{"report_id":"bc6e02a3-07fc-4744-9865-40e20f3ea52b","version":6,"status":"done","tags":[],"date":"2026-03-10T11:55:52Z","url":{"schema":"http","addr":"legimex.org","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"104.21.44.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"legimex.org/","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"title":"Legimex — Official cryptocurrency trading platform with AI autopilot, secure \u0026 trusted","dom":{"size":80250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1558)","md5":"e8f39fd967b1a9e8d9450b545615caf3","sha1":"b777cba5666c9b199141c7ced4ef4b2acb7adf6f","sha256":"a88d61d3b6db9e42d775264555555f8950a858cf4de9806eb0da8f2b1daed425","sha512":"381cf500a4e9e67ecf4f7dffd69914baf14252435891be3e018ca1aaf6263f8936d5eaa587a0196b080306f787ad2c276d099a6deca8b4babc7860fa8ad5fe37","ssdeep":"768:24KQbG7Kl8LiJmFUFS8HW75ncNsTPHHXL6p4Fb9XuQy8jtxYiMPZz2P:LGyQ2oNciHmKSX8MiMhz2P","tlshash":"5473842254e1101b0413c1d8f3f97f6e66adc513eb0748a573ed13da8fcadd98a2a68d","dom_hash":"domhash9f5385f9c8bce68c7d28a23a4ec3ead3","first_seen":"2026-03-10T11:55:58.698456Z","last_seen":"2026-03-10T11:55:58.698456Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"legimex.org","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"104.21.44.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T11:55:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"legimex.org","ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-03-10T11:55:53.893661Z","last_seen":"2026-03-10T11:55:56.829844Z","alert_count":56,"request_count":28,"received_data":1084102,"sent_data":16064,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-08T22:33:42.678774Z","alert_count":0,"request_count":5,"received_data":413204,"sent_data":2385,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-08T10:46:13.710554Z","times_seen":2000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/webflow.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1bab0bac4461dfcd8f7eecc0fa6ffc9","sha1":"4799204eaf5278020d8c36a3435e51f38a31e5e0","sha256":"b9f5405a6e173207eeb006001575372ff3165627953d459a880791f1cfd1e5c9","sha512":"9ead35d6bce667ba07ecb38b2ff0a63ba621704dce88c336c1d1ceca041ab10111448a092a08360a5f61511d344843a4a8c4b6376b2b3f9cdb02dd013fe52cac","ssdeep":"3072:csEWJe9IW9DvEizCRpWDrdLuffkHUFfT57fX:J+rhjuHksT5j","tlshash":"7934e8cb31d1f0b603eb1169806f100ab2b95acbd44ac454e524dee96c399add3a7f3d","size":234675,"data":"","first_seen":"2026-02-14T00:01:51.923074Z","last_seen":"2026-07-21T20:09:44.158277Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7ce45d9c92bcc3f57fac145dea4abee","sha1":"c855be4fd84c81f305f121eb80a054a57cfe8cda","sha256":"a21311ef1c0fbb6d774d46931d60dddf3ad98b73e5ff16994f44dd8b8fb8ac09","sha512":"e6cdd7e6fdc5404237e2e0df993fa1093a3b48b04e780652e725a97d1e1d104e144deb5a6063b43359583dc49f7d9aa5d35d96eedf9be9b3e72f0c0a8a8dd74a","ssdeep":"","tlshash":"32218a79395b183042b27215b3dbb2182f3181c6380289c4745c55098fd1caa62fbfac","size":1318,"data":"","first_seen":"2026-03-05T15:16:25.691585Z","last_seen":"2026-03-10T11:59:11.854875Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"135dbf1de1934a61007968c4d6de8235","sha1":"6071769345966b3d2475b8d63ce58a4f7e251e32","sha256":"7e6230f9a156706361cdd4e66b87ebba22c9b0809dd6fefe74c80b016d7aa921","sha512":"a85cfe1a0f9064072394ca229b3259885d9ae0344651ceab40fe40d952ef16ef7452a50a1fd8d2921067a151429cbfef2c7d30fada3a8f3ffb3a2302faea25ae","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEOOPrBMU6QLiTFbc0QlQvaRF:AYh8eip3huBp6IidlrvaRdtQ47GK1","tlshash":"669309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89472,"data":"","first_seen":"2026-02-14T00:01:51.910386Z","last_seen":"2026-07-21T20:09:44.14963Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/jquery.min.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dde819ec13600d7390b5ca4a41ace31","sha1":"bd0456759fcef3a30f61161aba50ed3bfeb17c81","sha256":"bfc725ae42b56c7ddfd4883c5361f07194f022138f8fc81c37e20a5cd0190940","sha512":"c40b4008351b20846488b80cdb9a58fa973a4f0401f754d6cbc20788402eeff02ee336a7557f8b8d6583b8bbbecfe61a534f3b988abcf04e9796f0d50d3544ba","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEb2BSrBqSp+a/IEk4aAocVi8SRBQ47GKr:sHNwcv9MBupLl88SRBQ47GKr","tlshash":"1783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a823bf7e","size":87529,"data":"","first_seen":"2026-02-14T00:01:51.911622Z","last_seen":"2026-07-18T04:13:42.538215Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f7230e105cf398129f47c12c22b202c","sha1":"433aa063afab1440b0cafe6e874e4cab184b2086","sha256":"2664e7a097e9acf778b41359dec9031d2487be52bded5ed7efbcaa7c5196605b","sha512":"665a78ef234dd601a5b7d45b9e7f35d25688ecc5eb0d3f9fc301316a274d526fe56bd37d534b551e96d36629a178c64eb009b10a89729325acbf8a142175908a","ssdeep":"","tlshash":"b7116d7174f5a43600a7e6a22666974b2f54d907fd07c9903b6c4ac42fc3e80dcb364d","size":892,"data":"","first_seen":"2026-02-14T00:01:51.933288Z","last_seen":"2026-05-06T05:00:37.135818Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-31T11:11:43.861573Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50916ef1f98191b2a0bbcc61ba3bf396","sha1":"6832b45b436ad685069bb49e47170e09c8d64469","sha256":"f4a18251b0d9e458a3aed46104c67c7db28c341d781a3e0906a6f8aa2b9a6844","sha512":"7ee7d1ead877e9b68ece5101496dc36642f23cd70c32ece1a096bd12fb9afb16426433f3e44ce938622706e71201f14116b523bceb1459a4d352f38dac61ad08","ssdeep":"","tlshash":"e7e0686ad6fc307180b3b46053da8bec353821c1708ea43829fb46483f802908da38a9","size":371,"data":"","first_seen":"2026-02-14T00:01:51.934287Z","last_seen":"2026-05-06T05:00:37.136848Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/script.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a53aeb06b649b36aa008b084d1d07ab","sha1":"3da99f4c3eeacbaa756630b603342a2989f7b190","sha256":"8687df7ce4327c357c7380cc49d3f4cd06f361fd8591c4a48b789e0a81b2d27f","sha512":"bd5313255b3700161d234e95442070d4d94964d82ed9597e5fd2a6d920321eea1a205907140a06df5eca73cb2a204fe0fd80b7f7c52f490fe937f8d73932e350","ssdeep":"","tlshash":"5a41b1bf9d7b172a40ab418563bf9a0e7a34401b1b44dd863bfe86681fe6c1024f14f9","size":2421,"data":"","first_seen":"2026-02-14T00:01:51.917183Z","last_seen":"2026-07-18T04:13:42.523474Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/webfont.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c763cc4da9709d8e78bd65ae55c033e","sha1":"975f988863caad2d28c921ac046d5938330d94b6","sha256":"fb61cc4a3d3542cede5a46e5730481a9bc1366fec3345ee0d6ee396d5230a31c","sha512":"90f31713c21c055b5a25d04e2c88c7015af1f140b22b9d4aaa37b6ab8e66527f1b7d2d138b42f62b10c323336c9e482f0a41f5ce4cd1bdc989005286675d585f","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItr/:iEqRm4cy338m7t","tlshash":"6942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","size":13189,"data":"","first_seen":"2026-02-14T00:01:51.916035Z","last_seen":"2026-07-21T20:09:44.154403Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-31T11:11:43.861573Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/integration/validation.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bcac08719e9e25c7497df6bab48a913","sha1":"148fc57da5a7d8e3973b091442c66be7465d6c9d","sha256":"71bac1f177787b47bf4c8bf2292e9f9a5a5bf92d1d273d83bd6334b3e2275002","sha512":"0d37f5bd810c7fce59002d90c6cea99ac5e06e93b3a786d547ef18c7ae3601e8fe787bc537e1c94bc0776fe8e782cbbfb28e9ca5b3165dc028ddf74cdc140aba","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrStWDsknMOPOQ0hnu4oGl7q2rhLjwM:WOWLdUpFVkda+pmQrnRhrSt0BmQZvGt3","tlshash":"deb184e974f10515593366fd26df500669e5710bec45d98e3ecc83800f558e8dea63ec","size":5353,"data":"","first_seen":"2026-02-14T00:01:51.887112Z","last_seen":"2026-05-06T05:00:37.128134Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/integration/validation.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bcac08719e9e25c7497df6bab48a913","sha1":"148fc57da5a7d8e3973b091442c66be7465d6c9d","sha256":"71bac1f177787b47bf4c8bf2292e9f9a5a5bf92d1d273d83bd6334b3e2275002","sha512":"0d37f5bd810c7fce59002d90c6cea99ac5e06e93b3a786d547ef18c7ae3601e8fe787bc537e1c94bc0776fe8e782cbbfb28e9ca5b3165dc028ddf74cdc140aba","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrStWDsknMOPOQ0hnu4oGl7q2rhLjwM:WOWLdUpFVkda+pmQrnRhrSt0BmQZvGt3","tlshash":"deb184e974f10515593366fd26df500669e5710bec45d98e3ecc83800f558e8dea63ec","size":5353,"data":"","first_seen":"2026-02-14T00:01:51.887112Z","last_seen":"2026-05-06T05:00:37.128134Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"legimex.org/binance.webp","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /binance.webp HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 4596\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=C8yY9W6VisK3CjVa; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg10_=1773143732; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg9_=104.23.223.104; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: \"11f4-64c43e56e6100\"\r\naccept-ranges: bytes\r\nage: 9291\r\nddg-cache-status: MISS,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufXl%2BXedYU39PSxwF3HOoAicasZ6svEocSfrrwtCakHjYL2J3w54a8ALRpRAtEzkvmt7AsYRdIqXQ0iNX7LnGoQIUZnbTNWFXTtz\"}]}\r\ncf-ray: 9da221808a960d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"424753ed4ec0821b81b8f52ffd89a306","sha1":"4661fdda50a5eb4ba04f6257b65e455b2cb5bacd","sha256":"7d880825fe283bb1b546d96f6eaf858d1231a98c6d55a6e74023c1ffa4a6429c","sha512":"d94a4eb57c7d96223c89126ed8c74b5057f3210ba52764d3aa5780fde67426a5b74d0cbb26171ef955c4668284935ed305b81535f1e64a4d2261e3dd61341c63","ssdeep":"96:I0Jp+199JPCsVj+WOMT4jQ0h6AgwH4ygwpgcHMfGdffBZ024w4S1eqy:lJgdVCnX00MAgwH4ygwpfM+dffBZ02mN","tlshash":"4791298a757201af9257e4e2fe78220b17e07f51e1b4788e66930484ed9c00bbf78b04","first_seen":"2026-02-14T00:01:51.906092Z","last_seen":"2026-07-21T20:09:44.159314Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/script.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 730\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=5SWCRcfssQNuUmkS; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.93; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: W/\"975-64c43e56e6100-gzip\"\r\nage: 9322\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EyfkTBfHadeQLZVIZXWKunX3z1Rpq7EQOzLE%2FwbFWpMXJRWkzDs7cS5STiafYddAP6ZA27It2LlqCaRaa0YCacffOBw6nRHpRt2H\"}]}\r\ncf-ray: 9da221808a9d0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2421,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1a53aeb06b649b36aa008b084d1d07ab","sha1":"3da99f4c3eeacbaa756630b603342a2989f7b190","sha256":"8687df7ce4327c357c7380cc49d3f4cd06f361fd8591c4a48b789e0a81b2d27f","sha512":"bd5313255b3700161d234e95442070d4d94964d82ed9597e5fd2a6d920321eea1a205907140a06df5eca73cb2a204fe0fd80b7f7c52f490fe937f8d73932e350","ssdeep":"","tlshash":"5a41b1bf9d7b172a40ab418563bf9a0e7a34401b1b44dd863bfe86681fe6c1024f14f9","first_seen":"2026-02-14T00:01:51.917183Z","last_seen":"2026-07-18T04:13:42.523474Z","times_seen":39,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/favicon.svg","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=ygAkG2MgirX2dC2h; __ddg10_=1773143731; __ddg9_=104.23.223.37; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 731\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=w4dLL3xRtCW6KU3J; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg10_=1773143732; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg9_=104.23.221.83; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: \"63e-64c43e56e6100\"\r\nage: 9324\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Jd2rsGmq7dkfLaNx5CMpl6o2Uz0Qe5Q67D6VKIM3jCv3BogwJM9yMJ8c7C19Dh5uKQ0UVbKKtHBE3PDCZLg5wUDtGILtIfK%2FcF5\"}]}\r\ncf-ray: 9da22181eab80d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f0eaf2c946badfcfceca95db1305a2c","sha1":"70bf33d28464dd0b3f0b7a6aa6372d61c7287c00","sha256":"2cae90c4d7ff69d852165fa52ee31ae8dc18f8f19318d2ed871bdf7aefb98468","sha512":"328938a14f12e99ac06b9958c6d53db4cff75810209a8dbab0a96fc3120f7b8749032f436427a682db152c54db066b82c60277a4abcd0278d3aa89710cf85c11","ssdeep":"","tlshash":"d43153685329d72db5488378eb797469f22674d2d19cc07cebe06c29b41c1fe280429e","first_seen":"2026-02-14T00:01:51.912612Z","last_seen":"2026-05-06T05:00:37.11222Z","times_seen":31,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/webfont.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /webfont.js HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 5119\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=gqHiWvGNQfWJvje0; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.215; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"3385-64c43e56e6100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 9323\r\nddg-cache-status: HIT,MISS\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhxSkCIsVnNRsUOqL7a3imRp5t%2B%2BlAjSYA9UHCR1DTbPkDZ7UzMB29h55m7uk6U2RWfPb2Fn8CyxhpJWcOuoYK2Kvu3uBFOscN5j\"}]}\r\ncf-ray: 9da221807a8c0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13189,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2134)","md5":"5c763cc4da9709d8e78bd65ae55c033e","sha1":"975f988863caad2d28c921ac046d5938330d94b6","sha256":"fb61cc4a3d3542cede5a46e5730481a9bc1366fec3345ee0d6ee396d5230a31c","sha512":"90f31713c21c055b5a25d04e2c88c7015af1f140b22b9d4aaa37b6ab8e66527f1b7d2d138b42f62b10c323336c9e482f0a41f5ce4cd1bdc989005286675d585f","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItr/:iEqRm4cy338m7t","tlshash":"6942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","first_seen":"2026-02-14T00:01:51.916035Z","last_seen":"2026-07-21T20:09:44.154403Z","times_seen":41,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/mastercard.svg","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /mastercard.svg HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 1902\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=Be0KClZnesdUukBp; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.143; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: \"1481-64c43e56e6100\"\r\nage: 9323\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOdE3SbWTad%2FcGtc4O%2FEMiwOyCsnvLIV2tQkr%2FG0ykzt%2F0FEiD6Ic3rRP4Yz3FQdqmPBPzCGPXmdENyt16tTqWEAfbyckIfUdwXE\"}]}\r\ncf-ray: 9da221807a900d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b32bf1844a57f008d98cc825d826bc7","sha1":"732ada34c6939e7d504d788ed6a831f453f575ed","sha256":"dd657f707314257b240c5adcdb3ae4622bcd338b284ce35c5c0fc136d9782763","sha512":"b6c2b10acfda7d0a03e34b640bee74cdde7836aedb2a0eca703428668a93b6c8aa42f0060805d80877abc6609cf91c90305ebade5cf5438a0b237a1281421a1e","ssdeep":"96:mI7kRgQ95wIzGA7FGSiuhP9HEppAgW0r/VrrlYtQAP2Mcy+zPDWrCcIu2gkuZ:mkmGA7FGSrHEAcrrlYBOby+zimpuZ","tlshash":"b8b1fc99a6b585bcf155637ccb27e8a86c839ee4e721c04b92c21d03ec3001e8e69cd3","first_seen":"2026-01-23T07:00:58.683929Z","last_seen":"2026-07-21T20:09:44.158743Z","times_seen":94,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 30578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=zZiUIboasAu72exg; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.14; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"15d80-64c43e56e6100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 9323\r\nddg-cache-status: HIT,MISS\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvnoHtXX0xgU68Fb0ryihJKa2MxfgM4citzOnE5SvYRfKB9dPzHA3KAIW28xUv7d74x6v%2FeHlOQdnA%2BG2jOs0JrkTo2GQPnHNE0D\"}]}\r\ncf-ray: 9da221808a990d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89472,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"135dbf1de1934a61007968c4d6de8235","sha1":"6071769345966b3d2475b8d63ce58a4f7e251e32","sha256":"7e6230f9a156706361cdd4e66b87ebba22c9b0809dd6fefe74c80b016d7aa921","sha512":"a85cfe1a0f9064072394ca229b3259885d9ae0344651ceab40fe40d952ef16ef7452a50a1fd8d2921067a151429cbfef2c7d30fada3a8f3ffb3a2302faea25ae","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEOOPrBMU6QLiTFbc0QlQvaRF:AYh8eip3huBp6IidlrvaRdtQ47GK1","tlshash":"669309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2026-02-14T00:01:51.910386Z","last_seen":"2026-07-21T20:09:44.14963Z","times_seen":40,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/integration/validation.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /integration/validation.js HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 1644\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=kbP25B5cDZ2cnQT0; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg10_=1773143732; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg9_=104.23.217.152; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: W/\"14e9-64c43e56e6100-gzip\"\r\nage: 9323\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxXg9kVPvbe31XCRly9H%2B9t67W6Mdk9PSU%2BG2fsnJelsSHvdjfqHQdcNi8X8UHJbAOxXmsGVcR7JPWSeQEc64VWUYmAzsn%2F5mKyH\"}]}\r\ncf-ray: 9da221808a9c0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5353,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2bcac08719e9e25c7497df6bab48a913","sha1":"148fc57da5a7d8e3973b091442c66be7465d6c9d","sha256":"71bac1f177787b47bf4c8bf2292e9f9a5a5bf92d1d273d83bd6334b3e2275002","sha512":"0d37f5bd810c7fce59002d90c6cea99ac5e06e93b3a786d547ef18c7ae3601e8fe787bc537e1c94bc0776fe8e782cbbfb28e9ca5b3165dc028ddf74cdc140aba","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrStWDsknMOPOQ0hnu4oGl7q2rhLjwM:WOWLdUpFVkda+pmQrnRhrSt0BmQZvGt3","tlshash":"deb184e974f10515593366fd26df500669e5710bec45d98e3ecc83800f558e8dea63ec","first_seen":"2026-02-14T00:01:51.887112Z","last_seen":"2026-05-06T05:00:37.128134Z","times_seen":61,"resource_available":true,"data":null}},"time_used":1257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/normalize.css","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /normalize.css HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 3001\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=VQK5hq0aSGyZbUzI; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.130; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: W/\"2548-64c43e56e6100-gzip\"\r\nage: 9324\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YqoZhGcugZgvzHHR6zb2dE5L%2FoUjsyjuF6eOb%2Frhaxq%2BRFQXT7YfLEEnkzzuZpYuW4tU%2FYz2doey2QB1tZhReRBIjzUKFQ2I8HDr\"}]}\r\ncf-ray: 9da221807a890d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aa26533b4805bb239478f3a1488b1c59","sha1":"8e2afe141959e8dc049ef70442186784a90a13b4","sha256":"d7f65553eedd2f338184d4961dd05766ce777eb20b0c7903a1869991def4f132","sha512":"5fee2573f2f700f96dd382553f6b54d5754f1ee23521a8787e9b99ca53b2699d61069d727d2e78a9191f31de8bb1e06ae7f5bd25cfd5b36dfefc0a954dac8d52","ssdeep":"192:M/9pnjasdEvQnRo2UEKsSBPqW674gh8/9SDjFMfVFl:M/zjz0QnMLsQq773FMdFl","tlshash":"2a12b79923a10741922a5cf4b7f7938933485123831decbeb8d201ec8f8976553baf99","first_seen":"2026-02-25T11:58:18.614311Z","last_seen":"2026-07-21T20:09:44.157757Z","times_seen":33,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2103681\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\nx-served-by: cache-fra-etou8220056-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-31T11:11:43.861573Z","times_seen":449,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":39,"dns":0,"connect":26,"send":0,"wait":27,"receive":4,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/visa.png","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /visa.png HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 19174\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=sa7X81rS69kuO3ml; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.185; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: \"4ae6-64c43e56e6100\"\r\naccept-ranges: bytes\r\nage: 9323\r\nddg-cache-status: MISS,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDkiHdgaoGYDKwaj%2FbU%2FuxdILjOw6rZr7AP02A647daxiDE10WOdpk8tyXNheR5pThmQkKHd8Xn6ve5Lbmn2ke0LD4p1mrArZeHZ\"}]}\r\ncf-ray: 9da221807a8f0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit/color RGBA, non-interlaced","md5":"0ad630575feb533aee27903ceea5e69f","sha1":"b2047be022ade6abc8ca51f9e476638d8f2a060a","sha256":"e02f002ef8c6e426bf56a641163d52dfcec69464603251808f505eb4a89fbd4e","sha512":"bdea994f470fc97a226edf05c97203adc6f1db43cd01b9af69736bfbd5370caa2d7b1c93373afa62168f6efbd30a047b364791cd7d69b483ee5b0c3000965685","ssdeep":"384:+y8fNbEhAeyidzez/HHMxvPdJVk4NS90OFRjyx2aSXKTsyCEk1:f8fagqc/Hsx3jepLRhaEwsyCE0","tlshash":"1c82c0cb27b21255f8eba477b6638ed4d25e3c8a59320aca3304095163573e09b723f3","first_seen":"2026-02-14T00:01:51.907666Z","last_seen":"2026-07-21T20:09:44.159803Z","times_seen":40,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/coinbase.webp","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /coinbase.webp HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 6656\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=shELg5CQkGCZBscw; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.54; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: \"1a00-64c43e56e6100\"\r\naccept-ranges: bytes\r\nage: 9290\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOP241y0BCb7gXdRaVeLkWEUYjUpP8%2Bhw5K3TMWKQzYwdNbsRZtx9iqbmapM1MaEjL0KloBThsUTVmU2k%2BaCKJ59arcO03SGmwHy\"}]}\r\ncf-ray: 9da221808a980d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45222373b3461719016a27d8e51cd912","sha1":"d340a8a55f590cd3a8977f6b97985784b735abfc","sha256":"fd4c829ce7af3449fc962fc15de7829b19c335263c6629c8e93fee2b16eb72ea","sha512":"a7a9ca46568519360fd79bb2637940653fb60ad2e431915b7501991fb54e676a9ec5abf8e3b84ec3b65aa9e0c95fef52569dff7026cab2e4ebd3a0e2a4406c9b","ssdeep":"192:iXyE71q3vGEjEMBRXgGQ17vtM7Wj7v7N+RGu9/:iXO3vGUR+VM7WjPNW/","tlshash":"3fd1a0412c27081b87eba48066df601fb761f3df9142463a0c84b055b77e91f84ee4d9","first_seen":"2026-02-14T00:01:51.930177Z","last_seen":"2026-07-21T20:09:44.165376Z","times_seen":40,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/jquery.min.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 30003\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=GJ6WhjJGNGmCr6rt; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.86; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"155e9-64c43e56e6100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 9322\r\npriority: u=3,i=?0\r\nddg-cache-status: MISS,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VJ5B49nhyvsASAb7Gl6ZCLmcrXrE8Aae4ekCYfq3238%2Fj05c7p7azV%2FNXbn8AWWom2jBSK6NXlDGFXrRikQ2x1bIj2BbVavWClR\"}]}\r\ncf-ray: 9da221808a9b0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"5dde819ec13600d7390b5ca4a41ace31","sha1":"bd0456759fcef3a30f61161aba50ed3bfeb17c81","sha256":"bfc725ae42b56c7ddfd4883c5361f07194f022138f8fc81c37e20a5cd0190940","sha512":"c40b4008351b20846488b80cdb9a58fa973a4f0401f754d6cbc20788402eeff02ee336a7557f8b8d6583b8bbbecfe61a534f3b988abcf04e9796f0d50d3544ba","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEb2BSrBqSp+a/IEk4aAocVi8SRBQ47GKr:sHNwcv9MBupLl88SRBQ47GKr","tlshash":"1783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a823bf7e","first_seen":"2026-02-14T00:01:51.911622Z","last_seen":"2026-07-18T04:13:42.538215Z","times_seen":39,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/Hero-Grid.svg","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /Hero-Grid.svg HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=ygAkG2MgirX2dC2h; __ddg10_=1773143731; __ddg9_=104.23.223.37; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 3830\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=OLnAJPtdFzm2AxnW; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.141; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: \"c794-64c43e56e6100\"\r\nage: 9323\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bqla6YiVs9ujHzaNRIfR02fKd6zifqvYJVzdZh2tJHC5AkWwW7lwmQ8g7sf53hiyfh5AvM6wowTVGo520fzcIoZ0ihBrEoDnPH7m\"}]}\r\ncf-ray: 9da22181eab90d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51092,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d8023eb99cf006cc49f88692d808aeb","sha1":"b6749fe3e2d4dde23cb322ef0a3bdb1480559cad","sha256":"be575075de63f054d3e41e5fe62e2ff60e450a839d6a750a2788d24a3f0f0355","sha512":"885146b8684b5718cb960560b76ff77783461c823372971ae5b8f9a2c2876bed0360f7da80f2c917604390f877f41a524e3e72834a33abf21631f5e40a92fe83","ssdeep":"768:H0atp3OxS/wwTtbDKAXhI/Ctu63xZk2/4n77m:Dp3OxS/zh8Ctuik2/4n77m","tlshash":"c2333d9cb7e0abd98c06cbb73162a0c10631acbff2824f697244c77d4d694552ed4dab","first_seen":"2025-06-15T02:51:35.473031Z","last_seen":"2026-07-21T20:09:44.166232Z","times_seen":53,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/xn7gYHE41ni1AdIRggexSvfedN4.woff2","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:32.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSvfedN4.woff2 HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/css.css\r\nCookie: __ddg8_=kbP25B5cDZ2cnQT0; __ddg10_=1773143732; __ddg9_=104.23.217.152; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nset-cookie: __ddg8_=9Ab153hobTGorAfB; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg10_=1773143732; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg9_=104.23.221.210; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"6000-64c43e56e6100\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wTTL7IfggoaFP6RjIosDsrE4JpEj4bFun038QghL1a9%2F6wuJniH5MAHUOjsCc377SPya5PmvEIz7f%2BI9WomNqsMB0afRVavLMw0b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-ray: 9da221888b2f0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-08-08T12:05:46.053638Z","times_seen":10886,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/favicon.png","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:32.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=9Ab153hobTGorAfB; __ddg10_=1773143732; __ddg9_=104.23.221.210; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=QiHzmAGASouPHsvE; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg10_=1773143732; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg9_=104.23.223.57; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Mar 2026 11:15:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KMYx9XhPHgLjG6HmTn7AnM8IQBiyEWSmkZCqr0OI1KfeR0AMtrcoZrp2Ge4I5dqKH76VN4apdIisAMqRGTYghMlCBfmyOK1Dy1MP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\npriority: u=6,i=?0\r\ncf-ray: 9da221894b380d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:32.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://legimex.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 61923\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\nage: 2015470\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-08T10:46:13.710554Z","times_seen":2000,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/integration/validation.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:32.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /integration/validation.js HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=kbP25B5cDZ2cnQT0; __ddg10_=1773143732; __ddg9_=104.23.217.152; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 1644\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=xkFrkfUNYbuLEhRj; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg10_=1773143732; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg9_=104.23.217.152; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: W/\"14e9-64c43e56e6100-gzip\"\r\nage: 9323\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edD7Gj61qKTCgZtFsVSA5tQLPZwDTRXWr2k%2BdZRg1kkoXe825QwLGicaipxrsgh3WEgz84%2FyIDRCtvdKEwGJLs4nBOjWt8wPwLPh\"}]}\r\ncf-ray: 9da22188db320d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5353,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2bcac08719e9e25c7497df6bab48a913","sha1":"148fc57da5a7d8e3973b091442c66be7465d6c9d","sha256":"71bac1f177787b47bf4c8bf2292e9f9a5a5bf92d1d273d83bd6334b3e2275002","sha512":"0d37f5bd810c7fce59002d90c6cea99ac5e06e93b3a786d547ef18c7ae3601e8fe787bc537e1c94bc0776fe8e782cbbfb28e9ca5b3165dc028ddf74cdc140aba","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrStWDsknMOPOQ0hnu4oGl7q2rhLjwM:WOWLdUpFVkda+pmQrnRhrSt0BmQZvGt3","tlshash":"deb184e974f10515593366fd26df500669e5710bec45d98e3ecc83800f558e8dea63ec","first_seen":"2026-02-14T00:01:51.887112Z","last_seen":"2026-05-06T05:00:37.128134Z","times_seen":61,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/papas-exceptional-site-198d4f.webflow.css","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /papas-exceptional-site-198d4f.webflow.css HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 8032\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=PShyeot6VXTIrE88; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.9; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"ce96-64c43e56e6100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 9324\r\npriority: u=2,i=?0\r\nddg-cache-status: MISS,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMzbYYn%2F0Qi0menVuDbf7QSKdujUlRJv8%2FkBhEp9LTvUmIONSSMK3X802A1mcH3ojSA5xii39tW9pMXhJx9EEyMQWi9L0pOtvmE2\"}]}\r\ncf-ray: 9da221807a8b0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52886,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1176)","md5":"16b4ff4d51b2f470cdd3b3a26d91682d","sha1":"da369cce82380800c4e2479dd49f96e2ccac984e","sha256":"f6430b82272db66af98b03ab1c534a6f232ec19141a46ab6f62a3b677ef4ee5f","sha512":"a612a69668a052dda271c05da491633cf9ad87b41ef80b637e1ec9cb78fbe47e4efae018f2736de052f083ea2a0512388b2da145fed5965428648744bb8cef22","ssdeep":"768:hF1LxD8w6aWPTmBNRBvzqGNJTE+BTpSMXFJ6kFG:hr3+GNJTppScn6kw","tlshash":"7c3302042bf4250ca54f54f9d5eabac4f31a4486cf4ecdd5b9d22098df882c93972eac","first_seen":"2026-02-14T00:01:51.928955Z","last_seen":"2026-05-06T05:00:37.102162Z","times_seen":32,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/investor.webp","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /investor.webp HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 85148\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=ygAkG2MgirX2dC2h; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.37; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: \"14c9c-64c43e56e6100\"\r\naccept-ranges: bytes\r\nage: 9321\r\nddg-cache-status: MISS,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhjo5ea0%2BWLg4BrNRHBo1SxMKvvKy9m8syyRB9k1Xvj5%2BqHBzgTDrDiVwu1ST5pPX%2FvJU2AhhumApqpytBe2uRC4wCYuRDfQJyt2\"}]}\r\ncf-ray: 9da221808a950d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85148,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1456x816, components 3","md5":"3d760258cd1051d50fc2fbb7e6d9d06e","sha1":"80e56abf175f3624ff9d13dc5a7f4e30ed738607","sha256":"507b282d5a3bde4198613a255b275d83654e0b8566caf3cee7ed523123be8fbe","sha512":"10d8459be428f351a81af2f8a65a51b99af093f74119d6e1a010ec4dd53f900b51a51ac956b3fee9c3d42f519768051dc3f324bb7cd2e4efe8214b9e31f239ac","ssdeep":"1536:Z20uSlVQaUz4RyB5vbkga002fPKa9IDSnuRIUkvIDrojEBtpWA7rqmmCP9MUARJ6:EFXaV+zkgDDK0f/UD2EVF7rBb9MdROZ","tlshash":"7083026669c3761d7623dcfb8d1e9a0503f3f50c18589a24b0965ece3198f28dafb430","first_seen":"2025-06-30T01:29:44.480384Z","last_seen":"2026-07-21T20:09:44.162489Z","times_seen":45,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/iJWKBXyIfDnIV7nBrXyw023e.woff2","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /iJWKBXyIfDnIV7nBrXyw023e.woff2 HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/css2.css\r\nCookie: __ddg8_=ygAkG2MgirX2dC2h; __ddg10_=1773143731; __ddg9_=104.23.223.37; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nset-cookie: __ddg8_=xAe0Dq4CQuRtz0aE; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.144; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"89fc-64c43e56e6100\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdtxa1mmzduXTVPWG%2BdSjcyfc7LfGwL8%2FzsZ8a2gaxyq3RzD90J%2FwfRp4qmM6mVh8xIgw7I6YFYw%2FFtvhilJvjo7POtKyP2X6VZJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-ray: 9da22181dab50d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-08T10:19:28.673578Z","times_seen":2338,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\nage: 4753024\r\nx-served-by: cache-fra-eddf8230088-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-08-08T06:31:50.282378Z","times_seen":1250,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":39,"dns":0,"connect":26,"send":0,"wait":28,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/webflow.css","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /webflow.css HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 7278\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=ybIlRIjm7pZRHvGw; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.48; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"8921-64c43e56e6100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 9324\r\nddg-cache-status: HIT,MISS\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSBxei7Z08czC1n%2BSKKXRbLzxVDbd5KCNj1O%2BB8rRtoci0KHFnAbdldwnk3dlvPq2UsXlrkFeX9pqORRZEEKx3%2BuZD6jb1rdC5Te\"}]}\r\ncf-ray: 9da221807a8a0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35105,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9cc6ffbd07c66fc13345a441ab7e1da1","sha1":"038ba2f4e9a97eda0907665e6bfe1308ff644ec3","sha256":"9ee1235c24160d4b1b772fb722f8284d7dc4c6041669373a4bbd28d4b302c0cb","sha512":"251b4ea3f9d6a8b1d751c66f0380cffe745b25c28d85f9c003a5235c699cfd6f7c32b0f597f732d82fa6a4c1cdb35aad9991c5c99aa046f1747fbd5b8159528a","ssdeep":"768:qRQ/VHrFIfoF7GpFMDw82aWoS+lyKA+vdxxF3F5FiwFt24lLqClUZuaE7WkQBTVL:qWtHr5KCPxljdRLqCqQekQH","tlshash":"e6f295859bf40630b817c1a56890a365772d4002b74ede28fae1741fdfce2c799b3b5a","first_seen":"2026-02-14T00:01:51.925165Z","last_seen":"2026-07-21T20:09:44.166829Z","times_seen":40,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/css.css","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 1109\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=kyFjBngLpNaIgWx0; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.60; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: W/\"1551-64c43e56e6100-gzip\"\r\nage: 9324\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rta1TXJgh4Zo%2Fz1xTcrsdBUYTO3FeEcRnVvTyYZsfgVefq2iBc3rxKDdFpszCxrxR4zkIO9duM5TqGFVGxSU82y89Cf1UPwkEJf3\"}]}\r\ncf-ray: 9da221807a8d0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"eee8b8e839016607d5a1acc01b32f310","sha1":"cd43928a0be3a22c029c25632cfa13c90ccabbc2","sha256":"475231361d8753893978051446529a57f1258cede3b926010c73151a44c5eb5f","sha512":"f97fb2b81cbd6cfd95a50b2a4a1e92bfcce3e7a078b582e22b826bdf727e9cc973bd8228614d1d938f7d4285b8c37b651e23f2137f8544c8b421e089bbf50770","ssdeep":"96:cOL0sOLcFZvOLU3ZOLYOLBJc+u1OLBNlOg0sOgcFZvOgU3ZOgYOgBJc+u1OgBNl2:B0xVU381xfX0+SU3nyx0e03bU3u7x5o","tlshash":"c0b1ae50002b680067431cd9bbce3e358d4db281a08699766bfe159cbddbc7132b0b1d","first_seen":"2025-10-25T01:43:14.992243Z","last_seen":"2026-07-18T04:13:42.537547Z","times_seen":43,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/css2.css","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 3816\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=Yry1ujjz0avzqCFH; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.36; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: W/\"da28-64c43e56e6100-gzip\"\r\nage: 9323\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaGRWlR3hScXGljFhRiUtlWhrFhR8yGhhd800WiCxte81zFg4KOkZIeiZafmOwj%2BejmcyynO%2F0VRIa0525zGrEsRCpbsOT2JOxwM\"}]}\r\ncf-ray: 9da221807a8e0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55848,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"d21f248adf26552d8fdc86726bb0314c","sha1":"5c255ff3639efcc22745437ddf8e8f05c735d763","sha256":"60e42af59ad977bec61ae3f9494e5e0792c02105e297c5bc6c8946b86873e194","sha512":"d9cd01a29d7e528d2a627789bd1b5c64a70d87601c9e3797ad918316f6d7228d78f72c0ea1cc011f4c34bdafd6155291228966b54a75ce432191eb17f605c664","ssdeep":"384:KOiulhGfvJey2MorF3Mp3l3Z3SBpKqjip730Xp4ItophludpGG/+pHDADpUkpkpj:r+RVzvIsnX3UJUn","tlshash":"5d43a890086b9100eb872cd233cf7e32ae8db244b045d9786ffd1599ecdad6563a4b4c","first_seen":"2025-10-25T01:43:15.010814Z","last_seen":"2026-07-18T04:13:42.542485Z","times_seen":43,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/sslsecure.svg","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /sslsecure.svg HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 5188\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=fdumiYek2nIS8B4N; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.217.120; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"34d4-64c43e56e6100\"\r\ncontent-encoding: br\r\nage: 9321\r\nddg-cache-status: HIT,MISS\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nieL1bWXFstwQjxx5P4GI0EVdoFlSR8Rc9EJ%2B3EWzUi%2FhgoEs8BPknER6We3t6BOERie0rQ3D9ysqhMaOB4NReUxwmmMFmLw3od\"}]}\r\ncf-ray: 9da221808a940d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13524,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77c6a316bc11cc163f9b7ad5a70dd4d5","sha1":"24456de5a94c7077e96e3b6f2f6a93d004521614","sha256":"f81f6dfc4dec29a3c1a20248c88bb0072511a55e70b09f50c62f6eff18587cf8","sha512":"e899b761e144e1ab50c548778b9df5a901f7b7c0faf24f205a72f083bd47d94ba16355a24b62dd1ab0d79b9ecfef8ba0dfe13f1598b2398e9f4e90f0c6b6bff7","ssdeep":"192:3rkROEKW26EVcdpDhGBoJri/EYmuaweN3IkmXWtLN9/eMw2V/pxUX2z1I1:3rm78DurVxuu40Hmf2ZpxIUG","tlshash":"cf52c69073b8b3f4f141f7bc87669435be4f38fa722282b9c7b50d54951102e88e98da","first_seen":"2026-01-23T07:00:58.699841Z","last_seen":"2026-07-21T20:09:44.168896Z","times_seen":94,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/webflow.js","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /webflow.js HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 55270\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=ZR8gGm3tjcsczKZd; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.129; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: W/\"394b3-64c43e56e6100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 9322\r\nddg-cache-status: HIT,MISS\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPvqByNoMRc%2FIGfKzMw8mrdxREQDJpPESacIPM2sm8BwxksrQOj%2FlieeMqLthBHHvRuG4P67uSr7rAA1pRXGOFMqJznaFUFu8G7R\"}]}\r\ncf-ray: 9da221808a9a0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234675,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e1bab0bac4461dfcd8f7eecc0fa6ffc9","sha1":"4799204eaf5278020d8c36a3435e51f38a31e5e0","sha256":"b9f5405a6e173207eeb006001575372ff3165627953d459a880791f1cfd1e5c9","sha512":"9ead35d6bce667ba07ecb38b2ff0a63ba621704dce88c336c1d1ceca041ab10111448a092a08360a5f61511d344843a4a8c4b6376b2b3f9cdb02dd013fe52cac","ssdeep":"3072:csEWJe9IW9DvEizCRpWDrdLuffkHUFfT57fX:J+rhjuHksT5j","tlshash":"7934e8cb31d1f0b603eb1169806f100ab2b95acbd44ac454e524dee96c399add3a7f3d","first_seen":"2026-02-14T00:01:51.923074Z","last_seen":"2026-07-21T20:09:44.158277Z","times_seen":40,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:32.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 11469\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\nage: 2103682\r\nx-served-by: cache-fra-etou8220056-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-31T11:11:43.861573Z","times_seen":449,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/PayPal.svg.webp","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /PayPal.svg.webp HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 29522\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=7cAIYeN9rHywK0gA; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.142; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: \"7352-64c43e56e6100\"\r\naccept-ranges: bytes\r\nage: 9322\r\nddg-cache-status: MISS,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aR4OVfKzncvbdluDsasSFKW4KLlsNHGqtBT0h9bg2EeIxah2S8tWfD1jK9NB9N9Sz75Z%2FivZrBVvobxt%2FbjUu5hyEuSDFpYaGSly\"}]}\r\ncf-ray: 9da221808a920d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20567b13140b136f33f66f5a4b56d05e","sha1":"138883e6630fe5aecf643263bed0a5acb14c8a9d","sha256":"22252cbcf7d14dea5b376fecf97b0bcac57145dd8ae7882b68b770c645eb9acc","sha512":"22bc62e2a85ded39447e1df621154a226c9ca641f8f6163aea052dc259012ba39dd6b86729b9d428a014708129ae732f4acb67b0707e3d09213d5731a5f23169","ssdeep":"768:W7HwHWP5lBOpcj3wQbBtto4SaRfeZogdW1By6Jal:WjwHMzO6zwYR+GeSgdIYl","tlshash":"57d2f14b6dda156613e0c8285df4fa87688c7b7feea8c4f1553b7502682ce1d0b1e489","first_seen":"2025-06-15T02:51:35.49825Z","last_seen":"2026-07-18T04:13:42.539735Z","times_seen":49,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/fca.png","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /fca.png HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 101240\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=N72D6dtCIsIdyM8N; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.181; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\netag: \"18b78-64c43e56e6100\"\r\naccept-ranges: bytes\r\nage: 9290\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2B0dCO3ZtDfj1PdzAWxvEPdpZ2Hkep32WFPhZxzuVHBNZuncPtKJbdm27yuVAYkIZQu7zFvjr7eqMGFetDyD9lWXDiBm%2ForHHyxL\"}]}\r\ncf-ray: 9da221808a970d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 838, 8-bit/color RGBA, non-interlaced","md5":"dd33363aa36b4d280f70aa1a68fddf9b","sha1":"4e554d2aec491fff903611afdf0faddb4ff64ca0","sha256":"f74bae39330623eca736372257262432f6b755a171d5ce39a3966fa18d00449a","sha512":"4609936ce94736b7c600a49de2509a2c2a08830577416d0ba8a529fc57861d7d3dc75eb7933071ff3fd70784a65a2ffab9d3e2c4c768058686bdd13f5602e0e6","ssdeep":"3072:UBgw2onqU3ZzdmB2QRPqpwthKemi2/IlVw/hZ97i:UBgPUfmB2XUzwIDY397i","tlshash":"1da3024b3ec48ecad6c809f1094babb9ea64873fb150476863edd03d2d6d69b356c4c4","first_seen":"2026-02-14T00:01:51.882616Z","last_seen":"2026-07-21T20:09:44.164784Z","times_seen":42,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:32.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 70325\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\nage: 554217\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\nx-served-by: cache-fra-eddf8230190-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-08-08T09:15:12.317331Z","times_seen":6395,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/apple-touch-icon.png","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:32.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=9Ab153hobTGorAfB; __ddg10_=1773143732; __ddg9_=104.23.221.210; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 2382\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=sxx7xekBjBav3Gkh; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg10_=1773143732; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\n__ddg9_=104.23.221.162; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:32 GMT\r\ndate: Tue, 10 Mar 2026 11:55:32 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nddg-cache-status: HIT,MISS\r\netag: \"94e-64c43e56e6100\"\r\nage: 7593\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtsgD6rkCkvr%2BMxns7rqRCf3vgcVndQq5nsfmMLoBAfA%2FIKmzMTHqbeRrJ4YNapJqSvBPg39Jt47zoQhRBMPnZutabWzPvBchkyq\"}]}\r\ncf-ray: 9da221894b370d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"116dfb3d4432f85d3750f112e039d0a3","sha1":"72fd803cdc42904688bd4be16346eff0ef40080e","sha256":"e85d2a4b1997c11f3b19a34afc10462023cedd9ea9d5b4280f74494ae2f2ea14","sha512":"5f3646ec6eb314cb2ad48b4eea907612b16bda1ddf9edfc763a51d2825981fe48acc546e3ed8cd1a5bd63da6f8c45214d72811f341a0a7f8461f92586d652b54","ssdeep":"","tlshash":"56413d99d10b9bc0861d40fa1099978094d2ec1c02bd614fd2bc9c7acae1abcdf855b4","first_seen":"2026-02-14T00:01:51.889397Z","last_seen":"2026-05-06T05:00:37.130619Z","times_seen":30,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T11:55:30.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDNgaMty0oc5ptkIhAzUMinv0aYXvyZtHXznQ1N3ZgjTGXtAkOkfaZetAr1IUpwCrAdSlY%2Fkuk4ZdPZXtaIhJ6nte4RAl5FyWKHo\"}]}\r\nset-cookie: __ddg8_=lreZDwASAGAaJRMf; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.221.196; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg1_=NwvJahIDwQnxndDxU9pb; Domain=.legimex.org; HttpOnly; Path=/; Expires=Wed, 10-Mar-2027 11:55:31 GMT\nPHPSESSID=kv1kbtrp6s598u3d2il6t9n1su; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9da2217eedb99ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75475,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (502)","md5":"f60d1990b842daa9d13c56edeeaae4e8","sha1":"618b138811dbd99167f63b0bd38fa7410456a8b5","sha256":"ca2331b046670bc3f7cbddf2a05d532352bee439ccea31e10654981b15ed8ac3","sha512":"37f8d8dd6720e489e1e9b0562d540f8d853541ad7b6676e7e0b0d8775c073d6fb7b42989ccf1399f09408f24a7c9c81239886e81ce8b5ad9e8c4a24e134ecb38","ssdeep":"768:6xDo3l4zBQl+WsF7FTQdsh/qcfnhfHcEFb9XuQU8jtxYiMPZz4:Rl4nBxocpHdSF8MiMhz4","tlshash":"fd73a62254d1101a140391dcf3fa7f6926adc413db079ce473ee17da8fcae998b2668d","first_seen":"2026-03-10T11:55:58.720929Z","last_seen":"2026-03-10T11:55:58.720929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":43,"dns":9,"connect":8,"send":0,"wait":100,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legimex.org/integration/default-integration.css","fqdn":"legimex.org","domain":"legimex.org","tld":"org"},"ip":{"addr":"172.67.200.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legimex.org/","date":"2026-03-10T11:55:31.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legimex.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 10:17:37 GMT","end":"Wed, 03 Jun 2026 10:17:36 GMT"},"fingerprint":{"sha1":"C8:F2:EC:A7:E5:3B:B4:29:7C:08:33:A2:49:91:A3:CC:64:78:59:B3","sha256":"19:8E:9A:CD:E1:2D:7D:3C:C2:9A:FE:6B:17:66:EF:06:7F:CB:4A:9E:61:6D:A2:26:43:DF:45:9E:7C:17:82:29"}}},"request":{"raw":"GET /integration/default-integration.css HTTP/1.1\r\nHost: legimex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legimex.org/\r\nCookie: __ddg8_=lreZDwASAGAaJRMf; __ddg10_=1773143731; __ddg9_=104.23.221.196; __ddg1_=NwvJahIDwQnxndDxU9pb; PHPSESSID=kv1kbtrp6s598u3d2il6t9n1su\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-length: 413\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __ddg8_=5ABguAdarXaKOxDQ; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg10_=1773143731; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\n__ddg9_=104.23.223.39; Domain=.legimex.org; Path=/; Expires=Tue, 10-Mar-2026 12:15:31 GMT\r\ndate: Tue, 10 Mar 2026 11:55:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 09:52:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nddg-cache-status: HIT,MISS\r\netag: W/\"3db-64c43e56e6100-gzip\"\r\nage: 9324\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWNqd9LPUMvPRY%2Fgbd0xx7RxG%2F0TbUKwknbLmfJCdo2aZHBwd%2BZ7r8rugUeJekXy%2BVHjkso0fToYZXbSN7cN20YsH8RKRXYmjHAQ\"}]}\r\ncf-ray: 9da221806a870d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"241d8b07cc198e58411536bc5db6f958","sha1":"5455523aa41adb2e115d789756c59cde2bf84c76","sha256":"32469ef50810a6569bdf5e0407f68787312b5dc86beb0302827b46e00fedaa15","sha512":"6ee3112bb2d0199f4c52375a1fe98ea7607ae1ddfd8bc30ad848cdb1a549af626e5e504fca8ddaebe9602272ffc2cdf48acf41cacc18e72dc7b45ad2c29b6741","ssdeep":"","tlshash":"1411eb160a660a35a41bd2b46a653a2573191843770fec3b26a728284fc619e127fbe8","first_seen":"2025-04-18T11:50:01.196685Z","last_seen":"2026-07-31T11:11:43.891552Z","times_seen":392,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"legimex.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}