{"report_id":"accf14a4-60df-4150-ba61-fd03ad84936a","version":0,"status":"done","tags":[],"date":"2026-07-20T10:59:29Z","url":{"schema":"http","addr":"toksweb.xyz","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"toksweb.xyz/","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"title":"Solana","dom":{"size":29898,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28840), with no line terminators","md5":"1d2f0001b17f00e0edf2a2a8395d062b","sha1":"b5c5a017d8f92c3aa6c9aeb4b8316fea50308f8d","sha256":"b176701b6c18e14173404cd68a05be0dd0a23a9e1a8e9ac227d699e222116395","sha512":"77f3ec00920ce65abc8290e1f88633e2fe680df5415c16ae53602c6e8ac362a4d7f8212cf842b6f7fc0bc67c1ffb17aaa03a83ad9544073f7b22ceb268a16e60","ssdeep":"768:cPudPhzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDV:c2dJzqyrYZ44dZ","tlshash":"e7d23f65f8904a3f371b71ee4de18e9d65b125034822eb98b6f860c2f786e73ddb1418","dom_hash":"domhashcf2c8cb7491c1febeff786855a07bb47","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"toksweb.xyz","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T10:59:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"toksweb.xyz","ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":19,"request_count":19,"received_data":1716780,"sent_data":9284,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":3,"received_data":32259,"sent_data":1647,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":2,"received_data":38762,"sent_data":1156,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"toksweb.xyz/assets/js/jquery-3-decwg.js","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"177720a712d06dedd0d2ded740f8edfa","sha1":"1b273629df47dbfd76af477b5b2d9731b1fee6e0","sha256":"f5ad72b13a3ba6614caeb70e4306d690f6939b752e28dc0ec48c2182647761f5","sha512":"b85cafcf973303276fd9366ed1d33ab5fd53aa7a1816caf051861cff359490ccce097a2f6cd280b4b907459a9d3030c01e7204e36e8b6f8b1709bab7d1160426","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAn:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5p","tlshash":"aa54a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","size":280363,"data":"","first_seen":"2023-03-09T03:25:42Z","last_seen":"2026-07-20T10:59:35.468401Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9c8c25600d5956c48d061228722fb5e","sha1":"ce0b3f10c178a9b703f6d1953b57d38c4dc3802f","sha256":"c29ecfee81338eaa45326ab5cf0f1fce29d8892a19a7686081736d7993ce4429","sha512":"59b85c4231de4dcadd752fb993ee96fc9297fdf7e79107a85846001cfe99dc398602318aae47b9c6480a7f0f81b80097d4f346411edd52701da282fbf9a2b91d","ssdeep":"96:bh3/Z9R9/QaKAdVz7Pp45CK5A39kV3SE0JVU9tHGguLjR9EcPAmC2PExQG:l3/XTX9N45XtYcHGFjReMExQG","tlshash":"73c147a6da9a1ba5f3b060a9cdb51ded98f70f573220d3f0acfb7ce72605800e512008","size":6007,"data":"","first_seen":"2026-07-20T10:59:01.558398Z","last_seen":"2026-07-20T10:59:35.475589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/js/script-m7i5f.js","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a80d72ef8b31c6da8132d3546f4a143","sha1":"bfec1bee33d2bc30abaf9e05b36a2439b6d5a7b6","sha256":"9f683416fe951630a738f238c1423aee602bf5238aa0978bddf73255660aca6d","sha512":"2c46fe0c2bd0a75d7214e4084d4191877c400d4c3e9a319a64d37a80d547e52116f3570e0e73097d6f3aa6573a102d087cb1139f6b71a4b42ecfbfcd83983b00","ssdeep":"","tlshash":"c311f33cb25eb46f42197955295f0705e8322c114863e8aee44efeb2191ce063a67b0b","size":1084,"data":"","first_seen":"2026-07-20T10:59:01.543972Z","last_seen":"2026-07-20T10:59:35.459189Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/_nuxt/assets/index.js","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","size":1010117,"data":"","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-20T18:00:28.149684Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af304c227e3b5b828e78a3a9c782bd33","sha1":"02db97fc140d1d2ca35df2815f5136cd46a12f8c","sha256":"fa25f86a98a44bee39aad0580dde6e8bccbc0c29bfaaa9c6f14e2a6384673b39","sha512":"31fe00d848e46a5041e141530b88599c86f20c8913f6c6e8cba931354d9d6e46bcd5aae6757f92353157e337f0fbf171484b62b1809c2a61130a0f2099100571","ssdeep":"6144:d+Frzet2WVKH7z4qF8ZyOBHU3eNDqwoYRZ9wBqGPw4KLWo36rtCCOx8PTjGKPHEo:d8e8WaX8fdU3bwoYCUx87iKPb","tlshash":"d125705112cc5a6f2f4083c738f5489a1e29749acccd087bb6d4d2c5de6af1db2af690","size":974515,"data":"","first_seen":"2026-07-12T18:49:06.899666Z","last_seen":"2026-07-20T18:00:28.154489Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.16.23","filename":"https://toksweb.xyz/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":803503}]},"http":[{"url":{"schema":"https","addr":"toksweb.xyz/","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T10:58:53.344Z","timestamp":1784545133344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vtQGq5rMWRc3O1CYeI7KtQBRZaWyDWdoOFhWXXIOP%2FLCw%2FkzwSWzM2kL2QTnKoSh2e9T4oILTMleeXi9W0GfSnKkok2QlnpcQx0TE1e9ik%2BGBuI%2FNPH7y%2F%2FmE8PLKA%3D%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740b79325696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":14472,"size_decoded":5569,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14292), with no line terminators","md5":"4c1ee60e0406a044710913d4f762097c","sha1":"8e315ed7b5e7d559b2f539b0808ee40c0d1cfb1e","sha256":"9d9df6e60fd30e3ee4cdbf58bd7fa205a9c6aa27e33be8c07b870ad3523ef884","sha512":"5b0f7dfc125b1bf4b014956c0c877d6007b2818853edcaf1553a4e7887dcc46861e753e404fdbfb7c7af2e08f429618c807e59e2970ee504defab387f2e4f067","ssdeep":"384:NPXTX7S9YkMEuSpGGgKGhf0UQekKQbV6aTPMnaIOFit3L:RPudnpGfKGhf0UQekKQbV6aTPMnaIOFY","tlshash":"8152ad6684aa1263723b94d7acb61f5d74f34a6beb22c264fafd36e617cdd00f412404","first_seen":"2026-07-20T10:59:01.527287Z","last_seen":"2026-07-20T10:59:35.44075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":271,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/header_tg.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.895Z","timestamp":1784545133895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/header_tg.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-6cd\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kcCUBBFE6jAKKw6Q20jpB73Zbab%2FhastTBf8t9mQFX36IhRJK80YELz0odor1ECJbeZpZlWkY09bCbWmuSKelTy0GWCAdvVZtSpbCLptpn0fmbX7Evfu4yLgbBmsg%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ed95e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1741,"size_decoded":1273,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5bd85f66fee829b40d0d054f9ef4a06","sha1":"df529117ac85504cc8d2013c78db773cb6ea678a","sha256":"dc8c8a576e05f15fbe28d0bc04b6b012f1a28b989dfdad987eef965e3fca79ec","sha512":"ce94964749b94a417f88c052a41a2b67d58b91e917739befd76b27c7317d7cbc33260bc399f6ae6360c3e5b4f444f13657f3202994abe88736b810e6e1296569","ssdeep":"","tlshash":"0f3101a813fdf5e0b906eff0976a80716a1e11e16f67ce394b4abe70e10101e4464cd4","first_seen":"2024-08-29T17:50:55.820389Z","last_seen":"2026-07-20T10:59:35.443891Z","times_seen":502,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeJI91R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:54.033Z","timestamp":1784545134033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeJI91R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toksweb.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9900\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Jul 2026 00:11:03 GMT\r\nexpires: Thu, 15 Jul 2027 00:11:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470871\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9900,"size_decoded":10712,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9900, version 1.0","md5":"56706b63a0f0391ea247202feebe2a68","sha1":"d09f6c283158a5c34a1a0fb3f1f2149989f05956","sha256":"ce5095dc1cb200aaa939e38067a0677018d10e9f26ec38cdcf1557ac524fc775","sha512":"b15d8da95c966ea4751ce32272f0dbb88c730994096cb7e1a2a5386942529e63c38ac0eba17dc4321efaf637b9b1a4b1bf9c75988e7b0ac0040b3a5bfa793774","ssdeep":"192:3jKminRc+/sXhY52YXvSTChIrFNmg8aa9FrQUJuE4MhlmY1A4NRX:3jFinGRhY52Yz4F7a9FdiY2kB","tlshash":"eb12b03042bd76a1f6bfedf611a732371007a05102a669379faf132d5e7aba01c4165b","first_seen":"2025-04-26T08:41:49.507205Z","last_seen":"2026-07-21T16:40:56.157457Z","times_seen":2325,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/_nuxt/assets/index.js","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.877Z","timestamp":1784545133877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 10:09:05 GMT\r\netag: W/\"6a5367c1-f6f29\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjYnBGCbT1Wyg%2FmZTiZyfzMYsMc3jMTxhW1GyZWkQTDuAhrls57ZwQX41lPfEPAH2Mds6X5yd9ajYuj6BI7KAdLwCeZkCoGBythTAVjv4l0C0WJhITqZUN5pnPpdmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1740eb9565696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011497,"size_decoded":244325,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63260), with no line terminators","md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-20T18:00:28.149684Z","times_seen":98,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/intro_image.png","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.898Z","timestamp":1784545133898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/intro_image.png HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:08 GMT\r\netag: \"6a5df1a8-33cdc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEOoxeOKmle55FCckgraL2%2FZnnwhwY7OCA119ZhLvRBncLHkotITqbsqtk3qSMEG291c8vM3DZEaB0dYuJrMZ%2BPRXAitjYHVUw%2F56VXrZ%2FgxHHyMFjIUdSCMQlzpRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1740ed9605696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 212188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212188,"size_decoded":212930,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"bc5dc0d115b76d0a6a5024e15af5d9dd","sha1":"fe15276499ff738f109b6e0d76af5c4c0b3f0c15","sha256":"6e608f23a676d940286a2cb9b85d12f6f82d741d4675b6a457b28c6d8eaefe18","sha512":"f80b2c36646d5139763a207d2d7fee8261b449d58af0a2a957159db3169148220a829b979f0b5bcafa2828f4bcb62ef89c1e963c46ad47616dc06519e39ad9b9","ssdeep":"6144:NXyV+2XzmwX+nfP+w4OBH/Utvx42rckmBTJr:Np2abf54W/yQp7","tlshash":"ed24126e56cdc426da1b96782b3e8dcc929939f450cb60d8837fa5a1c62bd4b0c3f447","first_seen":"2026-07-20T10:59:01.539165Z","last_seen":"2026-07-20T10:59:35.449052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/modal_ton.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.887Z","timestamp":1784545133887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/modal_ton.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-153b\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ztGqtWZDZBIBAOuYyytTswKD6lK%2F18SiTXOuxT8BU7z6LSGNuyupAUHSirbDSdty4IxQOumMJZpEUl6AP0wZ15KL7%2B%2Ff0JG1agXOiPfMQ01D0pS6SZ53ijzoGuclg%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ec95a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5435,"size_decoded":2087,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b308efea222497a2d8849c3b6fd137","sha1":"0c4f00be8f9a88e7c57efd3f284544345ae22fa2","sha256":"18b9938b78b5aea556bb7ea4c1339ef9d7ac57c3ac2b720aff34837586cb2c25","sha512":"fe539d93e5daf62b53c1935bf4ef79c918a324dc473b96bc49f40d994c6f16d7d7aa5ffbacdd92c9a9a4b0bb12934a8d2bb1687fa5d5286a1dd4b2661f124c7d","ssdeep":"96:kQqbyx+SCvQqbyx+SCs9pte9T1POLhGAt9pte9T1POLhGAHi7G:kQqbycFvQqbycFs9pCmt9pCmC6","tlshash":"46b11e93e3ede1f1b045f7c099a0e031bd502fe47a42dd6041e4bf1ea82984e2965ddb","first_seen":"2025-07-12T19:43:11.717851Z","last_seen":"2026-07-20T10:59:35.450638Z","times_seen":249,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/header_arrow.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.888Z","timestamp":1784545133888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/header_arrow.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-f5\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjU2ekDYvampZxH0Y8XToSjHfD4xfhOPQFMQyW7LCHelZ5GWDUmW2KnOfS3s6VxGmkEe%2F0vvdigIHh9MB7RqoadEAFvhU7e6BrhMQULHJRAr4893rFMOzELObVq1Fw%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ec9595696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":888,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff289fc9a61bcff3061fc6fe5a4a55ba","sha1":"627f2f0d0c31a20c97ee1f70e38e94c3a8ec0ab7","sha256":"7e9e7ed4c22a7a71bf47ba5fae2e4441e32f2a381e3c86423587f376748f84dd","sha512":"96f642c9ee66b3ec6b41ee477aaa311142a267624f8bd8ad29950e85fc4358289507eabc8537c04c6b3b414a3176447f4c26f4d3c717d2e94b243b292c637e1b","ssdeep":"","tlshash":"a9d09732010cc380c104931afa2b6072e522e0d3d7dc84d4aa1a322ab8804ebcce8bf8","first_seen":"2024-08-29T17:50:55.823466Z","last_seen":"2026-07-20T10:59:35.451842Z","times_seen":535,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/modal_star.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.885Z","timestamp":1784545133885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/modal_star.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-9ff\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poNTSKVHBIfLitgcwZnL%2BTzD6Z9rjzr98dWrWKGfZ%2FdnufdeGgZapALZfRM5n2FRYp7qFKsOG81ewoolymOBJPgAXuzceQVCNCW6gppl4rke7ID4He7AaYNuS0MwOw%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ec9585696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2559,"size_decoded":1887,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8128e920fad4d9889a25131a216a5852","sha1":"025fdb26103d9b1b0318595e1619dcf8b5b3f8e4","sha256":"361d187356c94ab6b3be14d6e9d5b5b28eefe83881d7f9841b4556ba99d64efd","sha512":"67d3df15e61d745b1e25aa3f9ddcb2ea1dc92465cb31f4b2d31a7647ad697cfa69b6f0b945df9ff4c33006e1ba4b2283cd726d4703f629571abf3743839f3ac7","ssdeep":"","tlshash":"b7512199f3946076b18aa3fcc525d8bc36eb24b5b951c344c2e8fe4a8c8501e18f9dc7","first_seen":"2025-07-12T19:43:11.7109Z","last_seen":"2026-07-20T10:59:35.454075Z","times_seen":250,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/header_yt.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.894Z","timestamp":1784545133894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/header_yt.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-300\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCh7Js6HfjlQ8c2pLXFLdwOAaR615GnIXOOMOjneRDuLczYTewnM5dPprVu4WFkVlCCicUmCfl7bHHXXobd0pAdpMbkAyEyQvspsFWE31Dw6ARoXHltmOL1kaVKKMQ%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ed95d5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":1156,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7af7f422a656c73a8b8f7747e60a5065","sha1":"cc27fe17b38567ea782640a047fa0d3cf69b6f5b","sha256":"18e56289608de0710fae63b1e09bd38fdb7f0a6f2bbb728651c6eaca05336889","sha512":"72da19fdfe44b1b8f6d704a972e7b773b354063e7290c24ff56f48c163441bfda8f99511602498e9b0b7152683130c2d3ece557513f7aeb3f5d6f4d69d198acc","ssdeep":"","tlshash":"a201d0c5b39cf1c1540457740a20543639fb2cf51e42da498bf29ca4529391fce85ddd","first_seen":"2024-08-29T17:50:55.819444Z","last_seen":"2026-07-20T10:59:35.454996Z","times_seen":479,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/bg.jpg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:54.007Z","timestamp":1784545134007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/bg.jpg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/assets/css/style-aggvt.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:07 GMT\r\netag: \"6a5df1a7-25f78\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LD2peK1v8Aw7cvPJBLS43OfOzIagHs2MrkeR%2BP0EnsondpkUgztyMkkYp18bL%2BzcKWv8Pm5eKw5cDOKoKXM1AdfFC38LfwiSsuGdCF%2Bm2wX88j8XNtFGRz4LJcH8Ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1740f89685696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 155512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155512,"size_decoded":156251,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1917x1078, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf4a059f4104e809ff875d9fc40a5b15","sha1":"3647d157bc0ee8381db074ec04a336224e2729a1","sha256":"c6578d69d5e7132b888444e39804b35ca85fe6bb0212cc1e21a7377a678cb552","sha512":"73ad74987de882a1485cecc7e4b8a111207ef826374e4c232550bd88cdaf032d2b4044f6e31fb69136c5cdbde22f63e9c1f3f53b1f6a46d9ea344cd520405b26","ssdeep":"3072:f937DOJ3uGVA6DOue2+ko70IIhzJ7jdd6CUCyKUR6uFTR:f93Pg3zhDO52+dQhlNdDBDURbR","tlshash":"bfe3234d832eae727db427a93337243d3210d9255f0279bef7e4b4f4b46d5858688ad0","first_seen":"2026-07-20T10:59:01.541785Z","last_seen":"2026-07-20T10:59:35.45571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/api/is-banned","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:55.055Z","timestamp":1784545135055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://toksweb.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:55 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8jcOXGS%2BS3NaKk19MMN8vCBHm7aCLNl8BIyCohBK%2FF57dpts6ITnSZEbMyjizvDeiKzfLHxM%2FEvy%2FNx3FuTn0atjA1BeNWPF%2Frm3ezNJ%2FFA13CCvuZDBsRlVeTQDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1741619a85696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":764,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-21T16:15:50.219264Z","times_seen":117903,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/css/style-aggvt.css","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.869Z","timestamp":1784545133869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/css/style-aggvt.css HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\netag: W/\"6a5df1a6-2b1e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6a7sjqS%2B55BixAm%2BSA96K58ispPcSttYYTpk%2FOY0Cpl0zjyG3VxlWkH%2BBLhBg99zFSdWHiYqGeLZmNH%2Bvq9T6nGyjRNDAHewXutCDBmekRRWW1Kn6bvAIkXeXBj%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1740ea94a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11038,"size_decoded":2901,"mime_type":"text/css","magic":"ASCII text","md5":"8a755f494dd74ece29d364cf97aa8ee3","sha1":"e53e05ebda765bffd373b18f84a4e58281f047bc","sha256":"99efc12b089516e171cfbd428efc4bb8e43ef0e8f138dca094bc4c4684e34dc6","sha512":"5ab0c621da62ffcce27d0d0ccb9082317fcb5fa50f57fff544303d5a6d56822a6c162d4129531d28547f916d7e2c7d8a20e5e1587ba2bf75b3858b657631a94d","ssdeep":"192:HbZFJFzT1aFfPOBMI+TWvqS9OAdW8xq4dkl/MI6F+2+Nrh6dL1NKKNJhD91NKKNw:HFFJFzT1eIgsECvtWrwdJFJJvFw","tlshash":"5132b2866eb22a04f817a4746ef617552249c803d14fc9b77ee0306dcfc92da57a3b8d","first_seen":"2026-07-20T10:59:01.534779Z","last_seen":"2026-07-20T10:59:35.458077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/js/script-m7i5f.js","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.881Z","timestamp":1784545133881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/js/script-m7i5f.js HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a5df1a6-43c\"\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bcVZ8cduBpsZiK%2B0yQUCYT8Hv48%2BoTaQRVoKXZRVr2ZgtJuOa570OdvRchg96lo3MQUqLR9n4b%2FRb9Gah6ljx8QN1oZxFlYxu2YAwdojMMsUW9%2FlJSCxFkj0YrTEA%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740eb9575696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084,"size_decoded":1317,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1084), with no line terminators","md5":"6a80d72ef8b31c6da8132d3546f4a143","sha1":"bfec1bee33d2bc30abaf9e05b36a2439b6d5a7b6","sha256":"9f683416fe951630a738f238c1423aee602bf5238aa0978bddf73255660aca6d","sha512":"2c46fe0c2bd0a75d7214e4084d4191877c400d4c3e9a319a64d37a80d547e52116f3570e0e73097d6f3aa6573a102d087cb1139f6b71a4b42ecfbfcd83983b00","ssdeep":"","tlshash":"c311f33cb25eb46f42197955295f0705e8322c114863e8aee44efeb2191ce063a67b0b","first_seen":"2026-07-20T10:59:01.543972Z","last_seen":"2026-07-20T10:59:35.459189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/header_logo.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.889Z","timestamp":1784545133889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/header_logo.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-ddd\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gn7xOqfq5k3QSQ2zm1SrYay6E%2F711HtKlBWXcIYVoXfeMq1byH6AwGLZA8QoPDeWU0o9SD4jEmcFYpyQRt6HX%2FpqHdod6zYmhhoATrRXV%2FDgFX7OSACK%2FAvP89RNg%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ec95b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3549,"size_decoded":2388,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e2d33a5121ce5e30ec07a395a71a364","sha1":"fa2b753ab381303f2a9c7eece0b7fd993372d595","sha256":"8b68430a85ddbf9fac909c4713bdc32208efc0a8302562040bd9aad7951f6f8d","sha512":"41c91efa4d3ec5abc8f716974127214e1912c88ca80297e4191c6d041273275ecfa9ad7151f0025d7e87fa6fb8608c45e25f452601ea1f51afc36899595bf164","ssdeep":"","tlshash":"c57198da53a8e4f6e14bdbdd9e12a471342338f63f52c2a482f05f29f44608c290cdd1","first_seen":"2025-07-12T19:43:11.700604Z","last_seen":"2026-07-20T10:59:35.460182Z","times_seen":252,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkebIl1R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:54.098Z","timestamp":1784545134098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkebIl1R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toksweb.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9956\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 16:14:38 GMT\r\nexpires: Sat, 17 Jul 2027 16:14:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 240256\r\nlast-modified: Tue, 16 Sep 2025 13:25:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9956,"size_decoded":10768,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9956, version 1.0","md5":"5423161597dcdfab1f2f5a748a06685c","sha1":"fd6f87a550d7a981ca337094ee1dd3b1248195c7","sha256":"36ad966cb653de70ba37355c41003b02de8940b2df6cbcd46480a6ad8cadd65d","sha512":"558a0a6eea3a25e40d7a60e12d5323feb8912fd7a4daa8d50fcfaf2e242ac4b3d9e5c40e0e1bf096ee9a54a9f94e869b295573a11a737b317db6cc0c6817c912","ssdeep":"192:GGTEGG7rNpkIi/flq1q/ARqFcaDbxwOEu3WoL/ZGNPylMaj51eTlWUryjyV/vWeP:GYEZ7riI1BsFRHbbYd+MCsRrd/vBP7pF","tlshash":"6c22bfb1447a8a80cd27cbfba6e38505a1b0264c098d0cf4d5c7bdd31e27fade827595","first_seen":"2025-05-02T11:00:46.815622Z","last_seen":"2026-07-20T23:43:36.936009Z","times_seen":1064,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:55.026Z","timestamp":1784545135026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Jul 2026 10:58:55 GMT\r\ndate: Mon, 20 Jul 2026 10:58:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-21T16:25:40.239132Z","times_seen":34884,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/api/config","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:55.057Z","timestamp":1784545135057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://toksweb.xyz/\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZLthLKiiq5akeVjILXuhn3QNWHTj21AueVO9sC%2BGD4nQPhD7pdq5gwTM5QxzClSjn38dmcnlvvwR4gsjPBF6Iaix1TRTGzl3X77UkQtu7LqkvrPpKZcTj2vAJuzYA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1e1741619a95696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":907,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"a787b605810dd95365c8ee8f1480888a","sha1":"5880985ce2d9e7d506d259e2a848bca289360fc3","sha256":"a10c977aa234f55cffa7cc25a433b3c306fd0d982907ef63f30749e77cdf0e5c","sha512":"1e1e3ba1a871da7e5d9ad0a273b9bf9c24fc3c7fafb1bc8ae8b2c1c40f44667ca0a5223d9ea446299dd09fe10ad0e3e32eedffe76420805356d5084179d86f16","ssdeep":"","tlshash":"aed02b2db4516b335bc71d8da1d41f9220543901f762676880a2b7405871028cc5d875","first_seen":"2026-07-20T10:59:01.548059Z","last_seen":"2026-07-20T10:59:35.462286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/favicon.png","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:54.974Z","timestamp":1784545134974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 20 Jul 2026 10:00:07 GMT\r\netag: \"6a5df1a7-270\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZgTlILsmmxuuBYoPoGmThQryKaSvFECH%2Fpo1CqW6vpSAq4riZpR8EjqsFGqZyQTK0kkHl8MisyApFunyUlRqQj73uEnlf9bg%2FkmI6K6DIptYqAb9R6ILwMBWhAfug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1741599a35696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":624,"size_decoded":1358,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f18b29aea103c90670542f40ac9fe8a1","sha1":"e16faa6288e472e00a47d2bf0e5503f8c102c471","sha256":"75bb71969ab9425913581989c197ae852ab1918d60f1a83eb50016eec26372a2","sha512":"fabe44ab4723e109301e9967a7c9c33c3c96790aa9180821a881e3087cdb001136818f5fdd4ee16db4c8fb3ac8d22cda126858a3decd38f21c8a54aee2e494c7","ssdeep":"","tlshash":"c7f002f32665b329c060376169ea1052e26f483486a2bf077f56e3f53288598aa27dd4","first_seen":"2026-07-20T10:59:01.550424Z","last_seen":"2026-07-20T10:59:35.463092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.870Z","timestamp":1784545133870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Jul 2026 10:58:53 GMT\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27306,"size_decoded":2824,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"6774ec217af7cf7bbd5d9aa4bdcbfd07","sha1":"9b85b8d5c1b27b9df20737e86d2c3ab5a6533e53","sha256":"aecc81df6c813815a00ce057326d0f5dcd55a3301e2ff068da7fc1a221db0b70","sha512":"7260caf72ea73878521e22cd96dca657986de0b92670ff2e19cbc1dd93ec0ab460f30959997caa936a8265158ca8317a95f06fe8da11d27197052f51aec76bb7","ssdeep":"384:QkevQpPePwczseHYxqeZ+XdeOFZnf6NxkcCkhkx+kRkg1kUqY4nkbk3kk9fw959u:+CiFyg2UfIUk+H00YNRYj78","tlshash":"3cc21ea1045b9104ea435cd223efbf36fe4fa2657050c479abfd199aeddac22632471c","first_seen":"2026-02-22T14:00:04.549986Z","last_seen":"2026-07-20T10:59:35.464833Z","times_seen":55,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/api/visit","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:55.137Z","timestamp":1784545135137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://toksweb.xyz/\r\nOrigin: https://toksweb.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:55 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QURty9CGvdi%2Fvvd%2BUHm36HeBGHf3Y4qg6RnTzJtiUBOWWcYIn4BzKY7YTcqjfL8U1zeXZ1R8dAY9Qnfe8Q1D%2BekQMpi06TflXwvIaCUEocIRyUWOhADnH1kXBkiWeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1741699b55696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":722,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-21T16:13:42.514243Z","times_seen":440340,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/js/jquery-3-decwg.js","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.876Z","timestamp":1784545133876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/js/jquery-3-decwg.js HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\netag: W/\"6a5df1a6-4472b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 28\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ps31RQ0o%2FmcGzLURnc4PV5CZKXK3G4dwD4YxNuagHlNuvUqiDsbUdcLEfJRrTFRWq9syt4t%2BFjtFkdETlCJRgXvpdIUXShniiXYb42elUeuXCHr8HtbgY%2F%2FTL%2FiD%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e1740eb9555696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280363,"size_decoded":84085,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"177720a712d06dedd0d2ded740f8edfa","sha1":"1b273629df47dbfd76af477b5b2d9731b1fee6e0","sha256":"f5ad72b13a3ba6614caeb70e4306d690f6939b752e28dc0ec48c2182647761f5","sha512":"b85cafcf973303276fd9366ed1d33ab5fd53aa7a1816caf051861cff359490ccce097a2f6cd280b4b907459a9d3030c01e7204e36e8b6f8b1709bab7d1160426","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAn:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5p","tlshash":"aa54a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","first_seen":"2023-03-09T03:25:42Z","last_seen":"2026-07-20T10:59:35.468401Z","times_seen":495,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/header_tw.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.893Z","timestamp":1784545133893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/header_tw.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-487\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bVPqqGY4k3ENgefY%2FW6k7UoWzpEceZmbw1x5jv8BPKfX2OxjisEodLjarK1hw0FdGQjaGRT5BgZ2wa4oTvjoe43dAZYYfSN0KjZN7jgu5ktuZ6VOAGPX3krUGCxgbg%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ec95c5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1159,"size_decoded":1350,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3456e4da585a861c755d4ec08c5b87a4","sha1":"100774b34064c2665a6f7e884c6a13800e612ea0","sha256":"15983e345abd7d5929d96922e8013181c91662fe2370c75834618a977b18e890","sha512":"b4abfe0c2b70b70c1ed34f6e3a1339888275195b50f4654e50f236b6743799e4b4aa49d43ced64f732491def319e778d8f4fc6991a28a842905e2f384a7cd391","ssdeep":"","tlshash":"2f2111eb53fab7d0e408d3a5956065363edf20fa1712c3a882658de0955632e0d5c0d0","first_seen":"2024-08-29T17:50:55.818556Z","last_seen":"2026-07-20T10:59:35.470143Z","times_seen":489,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toksweb.xyz/assets/img/header_mail.svg","fqdn":"toksweb.xyz","domain":"toksweb.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:53.896Z","timestamp":1784545133896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toksweb.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 14:36:33 GMT","end":"Thu, 15 Oct 2026 15:34:20 GMT"},"fingerprint":{"sha1":"27:D6:59:14:FD:48:59:47:85:2F:BF:9D:F3:40:90:90:9E:28:1A:60","sha256":"B4:83:EC:E1:E2:DA:EE:36:8A:1F:11:D9:D0:E6:06:D8:A4:69:1E:AF:C4:5C:46:4B:E6:F1:27:23:FE:5D:FE:E9"}}},"request":{"raw":"GET /assets/img/header_mail.svg HTTP/1.1\r\nHost: toksweb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toksweb.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 10:58:53 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a5df1a6-1fe\"\r\npriority: u=5,i\r\nlast-modified: Mon, 20 Jul 2026 10:00:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXilKKUlX3tx56S2WPn0unha3N%2BOWjx5bMIc4BRKjWYZubNywp5OY3pMa4NuH0XEBa9L%2B7Xjl%2BANH5KAkEIS0PqCI9YLa0uUj3Nc3%2FYUCcrJyA3voKnRQsnUiIfwpg%3D%3D\"}]}\r\nage: 28\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1e1740ed95f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510,"size_decoded":1036,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"574a55fdf09a4b9ffae6022be34926a5","sha1":"28d1938a2e0df55549cdcc57736ee6c17cd2e897","sha256":"45af836ac3b3ba107b672a7d6cf4e0c283621233cd2bd213ab99c4893c3f5814","sha512":"7a1e3f2e645610de5743d9db3370eb5f37801861ebb2bec7a610df2884eff087eb61cebb8c2db5902ae6975d2935f31be277429ed1c1da1562dd0df200510f2c","ssdeep":"","tlshash":"8af005a9505df5d8f405b71cd2246431607e12c6ef6c5ce407c0094fe10c5de2da57a0","first_seen":"2024-08-29T17:50:55.821428Z","last_seen":"2026-07-20T10:59:35.472402Z","times_seen":294,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"toksweb.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeQI51R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toksweb.xyz/","date":"2026-07-20T10:58:54.101Z","timestamp":1784545134101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeQI51R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toksweb.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 14:09:16 GMT\r\nexpires: Mon, 19 Jul 2027 14:09:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 74978\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9968,"size_decoded":10779,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9968, version 1.0","md5":"27489a49946962e82703dd093454687e","sha1":"cd2df6837df3d88d34556a59a343df6737841e17","sha256":"a5888696e9eb1b4bbbecc8eb3922b8369f49d4bddb72263e033cbd17f399be76","sha512":"03f275513139cd8c50bd580207c7df2901189a6819831d32428d946b508a40c5f32f800617f33ed455d72b0120e0833ccfb6f5ca3085369f5b406c5f3b0e6502","ssdeep":"192:KQaReCGr+Te5/TrI8NwdzZbtsfjKBGZtGJgtskLTRdRHhi2iBqMA4LKoP3G2Z:DzCi8iTEgu5SbiGGaB7chJLKoP3r","tlshash":"5622bf71e8480b7cc54f3fb8ba9a4c8fb35fd413ad4b4c5030896eb05597e1b5a4a682","first_seen":"2025-04-26T08:41:49.515892Z","last_seen":"2026-07-21T12:11:49.141923Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}