{"report_id":"c93bc026-400b-4fee-8c78-c0b7b3c300ee","version":6,"status":"done","tags":[],"date":"2026-02-18T13:33:19Z","url":{"schema":"http","addr":"votes-usualx.com","fqdn":"votes-usualx.com","domain":"votes-usualx.com","tld":"com"},"ip":{"addr":"104.21.6.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"title":"Usual Interface","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"votes-usualx.com","fqdn":"votes-usualx.com","domain":"votes-usualx.com","tld":"com"},"ip":{"addr":"104.21.6.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T13:33:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"votes-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"register-usualx.com","ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-02-18T12:58:54.251499Z","last_seen":"2026-02-18T12:58:54.251499Z","alert_count":19,"request_count":19,"received_data":5713337,"sent_data":8758,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"votes-usualx.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-02-18T13:03:29.349535Z","last_seen":"2026-02-18T13:03:29.349535Z","alert_count":2,"request_count":2,"received_data":1464,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad7e9cebcb95e4d149f0cc4968ab70cf","sha1":"e5c192d19ae39945d584c55822eb233d1cee9d89","sha256":"a305610ed749a5b5d8c334d35e5a5749decf41994a339ff40a5ca41ce7d27be7","sha512":"de95f46b95ca3037260b2c860b25bb5ea9890be494131016528fb5517d63d0393fdb48d0f8409b2f17b6d2ce7ffdd1ef5792507d6a4bc414ad2727c821691865","ssdeep":"768:53l2+75DiSIcwcws8SknpnO1RKzsXclKb+JMy6KUpwBvSHdPr:j5DLcSny6lKo","tlshash":"c3439aa61e4694d41f582aefc0f7988a95548e67cd9db51ac92eccc03228fe2c5c743f","size":55276,"data":"","first_seen":"2026-02-18T13:26:16.969203Z","last_seen":"2026-02-18T13:33:24.044627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-24T15:36:16.228616Z","times_seen":3327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-usualx.com/","fqdn":"votes-usualx.com","domain":"votes-usualx.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00599b114b0d44d2eb01e702a52c28c1","sha1":"faed15161fa9336e3f96a3a3b00a14f8294897c8","sha256":"efdc73613fbc8c93e9217aafca68a24774c2cbfac67aa98506abb2e0040a99a3","sha512":"931f4337a13f63ddaafd1581dcbb144c515f061d5aca9f09a97cba59b3f0b8dc1e2ce8f92b8739d2e77deb1d979fef4fee2387f22afe05c801f7fca80e20c0d9","ssdeep":"","tlshash":"cea001eba900425a6ae2528b9a163254752386daac88d092a1452580329975f922e98e","size":71,"data":"","first_seen":"2026-02-18T13:03:33.723441Z","last_seen":"2026-02-18T13:33:24.045991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6532796de35cc43fa2e1676af446e5d","sha1":"f1a0c3a69c53243c5062e2378f0d87b3a42500ca","sha256":"28554e9cdb0da8d378c78fe1d8a4e50a616aa3f78be38b56baf99a9f6231ffa9","sha512":"2d658e1f7eafd1645cefbd0e02d7e91e4f1f75152a0238bcb06d3fc82dceb86bb86881c285ac827618abe0cd18c623323711a417408707f62a8a32e69ac8a325","ssdeep":"","tlshash":"5ee0d8a4b058223707d37661c50b6386fd6140a59482f0014001c8d64ee9d451c7ae9b","size":358,"data":"","first_seen":"2024-12-24T17:17:59.974422Z","last_seen":"2026-02-18T13:33:24.046603Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-24T15:36:16.22932Z","times_seen":3122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"34550fbffc6e3f33d79b23589650ed9e","sha1":"05dceb502e7d9daf494b65953dcafd5b0acb39fb","sha256":"2fa5719afe8a470b1b4124e1c484fe32f6d78ed3748ee389d0bde7e41e465ea7","sha512":"2771691e2e76f44c97d1dee84002558e496b84144f746224a4d8ecd03c7864bb286ac1da97f8c014677222b7801caf818986be05746f975ddd13bd497410720d","ssdeep":"49152:tWdMhfxNeeHFVoapwW2QUSvhjG+EyY4bfO3xrQanJfCpszVt0IR:6","tlshash":"40e523416c5669f68f80026970f75e0e55d81d03a86ea1cbe39cf9c238aff9181db93d","size":3307608,"data":"","first_seen":"2026-02-18T13:33:24.048104Z","last_seen":"2026-02-18T13:33:24.048104Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-24T15:36:16.234328Z","times_seen":3225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/49201490-9e45-4694-83a3-06b38c622b27","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d58e77fa88a69b6cdaeb569a80b99f2","sha1":"792973570ed859056464bad0005d578cd26f2ab5","sha256":"4dcbd8a89c74df4b6f715c025e6cdd8223b513478803a4a78770fea98d5ca591","sha512":"3f8885dd88dd9c60888d778f9450fb3adc067436c20c5b2793ddb6bca68c507af2e3c4851c95971de72eb7a211b0b0c68be8fd3d802e4642ac072c94c1c77bf9","ssdeep":"49152:SWdMhfxNeeHFVoa5wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtuOL:t","tlshash":"d9e523816c46a9f68f80126970f75d0e55d41d03987eb1cbe39cf9c238affa181db929","size":3310003,"data":"","first_seen":"2026-02-18T12:58:59.302919Z","last_seen":"2026-02-18T13:33:24.050084Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce098a0e1fe90562de29b58f706a24cf","sha1":"72cc16ff7f6ad2ac7e8493e80e9560722fe6426d","sha256":"ba37778f72b5cd9523de1150b6ec2a4b6b06199a7851a625ce5c8fa598a3cd28","sha512":"9c9299718a8b0b1ee812c2be568f4558dbe763b2857e3dfe42ba579c22a5561f1b7ee9e703665cc229b9fe9c5c71b66dd50a89049da8a00b4e9ea5817feb137f","ssdeep":"","tlshash":"b3d0a7202604557d32e765d1ca4db286dc6005719481e401c81ef8964dd4e4534b1fde","size":236,"data":"","first_seen":"2024-12-18T16:28:35.190754Z","last_seen":"2026-04-15T01:35:01.494124Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/mk5nj.php","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad17b06a5ee78f49d84ba347b69e26f9","sha1":"249db50498325f61b0283237cd326153f843c666","sha256":"7bd680b6706964df636a50943d0fa788597acb0e51c784dd4895acd950ef30b2","sha512":"f568c0aa372bc81210526e4ba42b6211ec5d5878cef5d0e02c7b33448776471001d9b7739b9fdc485b05772cd928c7001e9c8e6e255703845eaaf0ea66d7624d","ssdeep":"1536:nlKt0rHwpjiqMfw+Tu4C5Bam6StJkMYjVOKGyei+c7qP+Nntz5FZOV2uXz8G7Gp:nlKt0spjirg5BVYjVOaj+uqP+NnR3Oc","tlshash":"97148499db4384cc8e58429ec4b6fa86d4140d1a8a5cb857ee2fdec23615f7290c727f","size":201654,"data":"","first_seen":"2026-02-18T13:26:16.962587Z","last_seen":"2026-02-18T13:33:24.051227Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-24T15:36:16.235088Z","times_seen":3368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a05f1f7270333fdf085e33620480daf","sha1":"3b69c88f69b6e7a79e68860bebd861eac3739793","sha256":"c74a983ba63fdca680eeaa17e5c7c2bec879aa40fbb7fefe45cf46580547dffd","sha512":"2c9b04e8f03a7cdc435cd8b04002a2bac8841bc318b65f02e4815c7e98a3dc7666f636465475383f7a518b3c4f371aa7e2df693adc695f815028bf5801976057","ssdeep":"","tlshash":"d7d023e02904133813e75550854f52823ff05455e4e1f001451de4c70ee5d0410ffcdb","size":222,"data":"","first_seen":"2024-12-18T16:28:35.193297Z","last_seen":"2026-04-15T01:35:01.495063Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-24T15:36:16.242832Z","times_seen":3155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-24T15:36:16.233421Z","times_seen":3282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"register-usualx.com/2be0092c-b185-4f87-92d7-d4369af429a0.js","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /2be0092c-b185-4f87-92d7-d4369af429a0.js HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggqCs7IYF%2BE%2F08GymMOPh6j6U%2FqBWIIE7yuAMfpvLHW2XIc37u1EdWmvefr9yyOVcmIMD%2BqbVev3DshLSktSkoIZjw8WErDhiJXlaBQjODk6kTM%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfde489b93d3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-24T16:59:44.483545Z","times_seen":46945,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/bg-gated-onboarding-pattern-desktop.d8018329.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/bg-gated-onboarding-pattern-desktop.d8018329.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 212212\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvXp3h1KIZgQWqlBiju0TeZ7lJT5tqh0lQWybe82jqad0GUtX24%2F8834N4R9nXT3vynZow%2BNzvwrmsrx4JUELEW%2FlMv73Wjcb1Oz4pPkUBa0FiM%3D\"}]}\r\ncf-ray: 9cfde489b9403483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 1840, 8-bit/color RGBA, non-interlaced","md5":"0ac319d8b186c744ca03bc3ebf149af6","sha1":"f45266939e5eaa7d0eaf6abaafbf5696e2cd5ffd","sha256":"ed446e8b2ac02e7ddd2ea96c102e02acdd23aaf99f6ebd9ac25ae427cfd8763f","sha512":"73e0ef3d70af0da1c1135f9b292f219f2649e70d48d9262a2227d80a9912a08a2555eb585765b1bdcde5574ff847907b9c22c0a1ae546003da81b2c2a5da8c2a","ssdeep":"3072:3ih1X0MKRZMwglrpdYFtfVnpFJYt4ZCbs734GNIxxjdeQLTtiJAi0a7tlZm:3ih1Xv2MwGjYFttn3+4ZC4bd7tfm","tlshash":"c024f1599995c850c281417c917b2be0b6305efaea9b9fc785a7b3774ec2bd4d00e0ce","first_seen":"2025-08-15T04:02:28.955224Z","last_seen":"2026-02-18T13:33:24.032679Z","times_seen":6,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-kraken.9bab6c7c.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-kraken.9bab6c7c.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1657\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZJtTFjB54FvGPo8bYj61rK%2FjOQcNhpY4prTSGtJhFCvL4AKABFYYiR6VUciUNnmXs2Ha%2BTndLeRurof3j5aTavbGaZiD1mfJLyCyoOQpcRr77Q%3D\"}]}\r\ncf-ray: 9cfde489c94f3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 229 x 47, 8-bit colormap, non-interlaced","md5":"05048795c00575b58b8a9640a6bc1514","sha1":"fdc9ae5b9ad67e1b98ad4f058d9073e5ffef5d93","sha256":"6ea864c1a4b65df62c56084597e735d203622cf89aab1d01a729f3427d4d3077","sha512":"b0c4b0fcaf346e9c1b87f45db6bf17ae1df616b3e966feb46fa4033d9913bd5f9c6a124372d9eb8b7991d65c60fec9285e21863ec74137e99e62d1dbb96951d8","ssdeep":"","tlshash":"fd310a53f1263e8c5b33cb521562087a083fac5056125d310c9438ac8b31be48326695","first_seen":"2025-08-15T04:02:28.964594Z","last_seen":"2026-02-18T13:33:24.033293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-usualx.com/favicon.ico","fqdn":"votes-usualx.com","domain":"votes-usualx.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-usualx.com/","date":"2026-02-18T13:32:49.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:45:49 GMT","end":"Sun, 17 May 2026 07:43:16 GMT"},"fingerprint":{"sha1":"97:32:0D:C1:57:27:49:CF:09:3A:E1:52:45:A4:11:C6:E0:A1:FF:DF","sha256":"CD:02:BB:34:E8:BE:08:A8:21:D8:4A:97:BC:4B:FD:8E:CF:9B:D0:3A:95:93:EF:A7:24:1D:B0:6E:1C:24:59:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: votes-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Feb 2026 11:26:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmoYrSKqmg1qGdWv2%2FMWynoqjftjvvQ48wptCQ1VEVr9iZvhI8FJcgvqUp%2Budw8WVgYYzknNCtjUYo50yh9QxyM7yiIEhTATBhoQwPovUvo%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nage: 1791\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cfde487fda5dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"9b7408a3fce92bad2bff10ba606aef0b","sha1":"d35791158123e67b46f96ad293741d0f64f0e8f0","sha256":"605fa2ed2cd142eafc244a5d24a042cbd9c54715b5f1d1556e6274a77a5a7641","sha512":"cc73cd8a57421612d2b2462de4d0a15f38d55bece947adac44400bdb590f7d4c83911014d5b2af5c0a9ae9adc33f8657dcd02f7deee037f2f1154d877b3c008c","ssdeep":"","tlshash":"f0b092dbac0092092ee112864a2172183817c3ea6c45c08261c024a0329839fc92fe8e","first_seen":"2026-02-18T13:03:33.695105Z","last_seen":"2026-02-18T13:33:24.034107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"votes-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-iosg.8adc29f9.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-iosg.8adc29f9.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1814\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLAcu1KblV1z0PqOaPhOyvX%2FAKCuWtNGPfLucZimb5kAQBPW6LuNedwTrlBhLRqtgr8oC8p%2Bansj6Di5yJK1cmzsRJL%2BQIePz%2BUkrfxoRtWiwmo%3D\"}]}\r\ncf-ray: 9cfde489c94e3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 59, 8-bit/color RGBA, non-interlaced","md5":"c4c684d848deccabc91164e6713136e7","sha1":"0d582cab5997659e5882ec532f6777553cda6495","sha256":"8bc0ecd67ecec33aab813f049f387cf4eff4e507713f7fefa37d5f7fa87bea6e","sha512":"7307792f0d3b61174f5caab2bec697595fa2b95e34b03339fcb1aedee736331f139f12e8d2e33c6a64d0c513978d412e996503abad4f5efc799975ec652e9dc9","ssdeep":"","tlshash":"a13129dc90a86eaae49623bc6b9c2be1b2b49446445938fc2132fc1c110b31682953cc","first_seen":"2025-08-15T04:02:28.949405Z","last_seen":"2026-02-18T13:33:24.034786Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/ondo.0d5ce323.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/ondo.0d5ce323.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 22948\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DeqrFtO4j749tIF22ZG0FwWivt%2FLcOW6%2BQzf5Mrx%2FFkU8JU%2FaRCNEkwfD8zAgSjQE3vsflJ61U7rL9l%2BpuLQBhGxUyP%2F%2BJwdZLS6VoqBZWVallw%3D\"}]}\r\ncf-ray: 9cfde489c9483483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"007d2a697499ce56753ad0980e7db1f3","sha1":"eb18e68d5b6560afab0b68f1f0643534191a04c5","sha256":"bac9af39efc0e35304dd36ac83df7bf534dd0a962e1353a8db46c7967845f206","sha512":"88ac50f499229193b88699739b61094f28427ccec87e64d3f1074a8b63d33872f5c806547f5a642c5fe8ae51bf61bf70423b5ef2b0d3cb3b8fc1d8748fe2f14e","ssdeep":"384:LRCFl6m6rGLjV4rklLfgWszL3CdpNgMn6go9TwK+z+MiDltYeEx1+:4b6m6Wj6rmrgn3Cdp/6P9i6YeEC","tlshash":"b2a2d0cc08fa3139fd985d348cebd6d53a9e81a0423a4863d8c82d25c1d5bf985b6745","first_seen":"2025-08-15T04:02:28.96376Z","last_seen":"2026-02-18T13:33:24.035328Z","times_seen":6,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/ethena.47bbc61d.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/ethena.47bbc61d.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 6669\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0t%2FwLV8ul88vAMF1aI9Er5lyRzUrXqUonFP%2FpVfxMh%2Fzs1w0nrGK2AVWiBBSFD2TJ0YRpjTDFNWe2yDUg3uDazPBBqOMSxyptf49Jz1jm7WzQjU%3D\"}]}\r\ncf-ray: 9cfde489c9493483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9794b084d8c1e1c2993f735ccc914163","sha1":"baafb9187f3faa5a45899eb43ccbf93ff8255d71","sha256":"51ba7604b935770f5ae7a2fd09429eab8b9ad07170d96f1309c326c9635cf8d6","sha512":"12ea6ee05f051d548f95797c13bbc81a208e1b81feb5beb921306241ee8076dae49a4f1d3def18d7f41f2f28b085653cc16d942bd4765cc8ab14f77083ad0b66","ssdeep":"192:dps43J+l7T85UbmXzK5/mdQSibuoiTMROwg9+:dN+J8uszm/pDbuxYwwk+","tlshash":"b4d19f9c6b0401b5986af3b538b24142e3996c1007b2c7dd355c15ffdf6c1982b95a4e","first_seen":"2025-08-15T04:02:28.95676Z","last_seen":"2026-02-18T13:33:24.035989Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-axelar.e59d074c.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-axelar.e59d074c.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2325\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9akXtlbofPSC3lEs%2F9JjEm0gMKo4dkZ4yt14TNWDvzZBSHbJNXLMh2j8SIJpfB%2B0ar6tI9blmilIIkIHPuMv%2BaWoXduaSDmaBAL90jSh89FaxI%3D\"}]}\r\ncf-ray: 9cfde489c9513483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 149 x 37, 8-bit/color RGBA, non-interlaced","md5":"923ef708b96f3adaf1ddcb8669f8dd39","sha1":"345860a77ea12c06946e3f3a2c5bf570c7d18d0d","sha256":"be4f92b9af342129427c3769a9d06d4306d98813042e8fb58f58b27802b9f75a","sha512":"954e6af436bd078e6186cd194b41e28ca2bc661e022272f385c33021139fd1a24e177a5b58139a2b7aa668c0bdb6f6d92f13f260c798ad167239a6fa6cc3e747","ssdeep":"","tlshash":"c9411b3912128ae688a48534091a15ceabfd904f195b9d7ea502bfc1471235819aebdb","first_seen":"2025-08-15T04:02:28.950352Z","last_seen":"2026-02-18T13:33:24.036534Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-starkware.f4d256f9.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-starkware.f4d256f9.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 3095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rn%2BZiNNxyNE6LN4Csw3CLyPD%2FK1qY8Pw4IQzY2kSaM%2BppCFiG%2BPepdfGuYkunpYTesnG7x4PgFFqsg6WFUo5IVnhkNnaionry8BbNhLwsVYg7Zs%3D\"}]}\r\ncf-ray: 9cfde489d9533483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 221 x 41, 8-bit/color RGBA, non-interlaced","md5":"a6b5ff659334dbaf999a1d880af3d68c","sha1":"094b681ff610602cb248196d654fbbf5fb5b6023","sha256":"d7037b91b598c89642500608274e19264268b690eecfb5c2fc4f940b5ad209d0","sha512":"6ee8e7c7df57840c81d9d61923ec4ac11cbdb47b6f44a61ea920045f6114be2a475f372c832a055f61f8a72df89e7e5e14df5bbbb8404d22bf471c2b4d8dae99","ssdeep":"","tlshash":"a7513c5263189262a08007ad041f2664cd3317ba11067b94f4f4be39041ff1af0f7db6","first_seen":"2025-08-15T04:02:28.952397Z","last_seen":"2026-02-18T13:33:24.03703Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-usualx.com/","fqdn":"votes-usualx.com","domain":"votes-usualx.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T13:32:48.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:45:49 GMT","end":"Sun, 17 May 2026 07:43:16 GMT"},"fingerprint":{"sha1":"97:32:0D:C1:57:27:49:CF:09:3A:E1:52:45:A4:11:C6:E0:A1:FF:DF","sha256":"CD:02:BB:34:E8:BE:08:A8:21:D8:4A:97:BC:4B:FD:8E:CF:9B:D0:3A:95:93:EF:A7:24:1D:B0:6E:1C:24:59:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: votes-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Feb 2026 11:26:54 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mX8SqxbRiOhFr5ZlhGtwSo7M8YGCHhhzb4m16x7j7luWOUW1sBYxQBlXcxa1L7Tj2smQPgv8DZnLLBFpJfBwSITbLhuMjd%2Fe5Ov8dQIkrH8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cfde4849e5e07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"9b7408a3fce92bad2bff10ba606aef0b","sha1":"d35791158123e67b46f96ad293741d0f64f0e8f0","sha256":"605fa2ed2cd142eafc244a5d24a042cbd9c54715b5f1d1556e6274a77a5a7641","sha512":"cc73cd8a57421612d2b2462de4d0a15f38d55bece947adac44400bdb590f7d4c83911014d5b2af5c0a9ae9adc33f8657dcd02f7deee037f2f1154d877b3c008c","ssdeep":"","tlshash":"f0b092dbac0092092ee112864a2172183817c3ea6c45c08261c024a0329839fc92fe8e","first_seen":"2026-02-18T13:03:33.695105Z","last_seen":"2026-02-18T13:33:24.034107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":48,"dns":16,"connect":8,"send":0,"wait":247,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"votes-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-amber.5ad4362e.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-amber.5ad4362e.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1943\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oK7nMyCmFoSeQjH%2F45s2s7qYcldqJPaXa02f5ZJDWS4DsSlO9n0bUZY9Tsv%2FclNSJZ%2FE5xUZlEXp%2BYtayHZG9PTcGZWz6D394euad%2FEaIwb%2Byqw%3D\"}]}\r\ncf-ray: 9cfde489d9573483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 37, 8-bit/color RGBA, non-interlaced","md5":"1a19d3f3c0ac4df3a97b1edea54938d7","sha1":"300c0b5cc3658118ff890bcaa35ace1163e28c58","sha256":"2054963ac69d7e9d75a07c2780fac3952071fa27c33a7abe370e3be52201daf0","sha512":"4aa0b1c5a2f139e6e8e0c01aadf0ceee12ecb16bc4c93e00ab311301e8d4f299e6dde152efef3be4aa078f396312a2426c8d658923bc19c34bbe64710e8e1bed","ssdeep":"","tlshash":"70413b4bad5d8536c773ca28a18e51a276b0390f354f02581603b6079a8bf07b02f346","first_seen":"2025-08-15T04:02:28.965461Z","last_seen":"2026-02-18T13:33:24.037559Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-gsr.54ebbb50.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-gsr.54ebbb50.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2992\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71VeWfYO61QAIMWPdDDaM%2FaedK8mHDkvcQi715a%2FZeVrZ%2BXqogv6arq0UWIfqezLgKqDIaYlO1QzZlTk2oEsPIZydvMxTIrre%2BVskJ290i7qEZM%3D\"}]}\r\ncf-ray: 9cfde489d9583483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 37, 8-bit/color RGBA, non-interlaced","md5":"e82174a05f794c76d5161fb47812774e","sha1":"b560fd79b07ed97b5258a2bb3116d8ad9bc2680d","sha256":"a1b25b15b6ee6ebbe7b2faa8d6cf0ac794b035740de91523848944c6152668df","sha512":"59eb70c442dbbe40e8749fba66ae89639d489582e7cc2d4fcf548bf809a43df959215e6b01ea1f0d640373820821fb0ba23449d7696eae5be32c6ba33a5bc670","ssdeep":"","tlshash":"d2516d8b303a98db62d16a588aff8046e5302c0c3d99f2967846f7d581d3256e0ebbc1","first_seen":"2025-08-15T04:02:28.953349Z","last_seen":"2026-02-18T13:33:24.03813Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/mk5nj.php?m=2952369","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:50.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /mk5nj.php?m=2952369 HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-usualx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:50 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUSHQizeSEgBXn6dvAOMFSJnSf52XjD4zPdkyC%2FbgJ%2BWkHAvqHR0SPWGg0CH9WTEerPpk%2BPRB%2Faz1Wn4PbB5Oafh1LR7UUNheZp3rcVVazTlIR8%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfde48e9a393483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3310003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f4529ab8570eb402457ca6d32eefeeb6","sha1":"a228c7854e4a4cf3ce78d018dab7fbc3b26435b6","sha256":"a82daa836691ed90c4e2ce39ee47b581048952185d7afca3f42e5b9acc06b7aa","sha512":"b9d35c40b3f6f5a594d693ac5d5cb8f402d377d98844abf53d7c16bbec5043691519325768ea3a5a3f0976881e57a0c518d34b777e6e743b4eb8a441acfccc74","ssdeep":"24576:SyjCq4rCMBZ849RxN4soD5JaHTRsq4BJ/NNbPaplQ1:SWdMhfxNeeHFVoa4","tlshash":"202523559c4ab6b7034412a632775e0f5ad02b0644aa52c7e6c5eec33e6bfb047cb4bc","first_seen":"2026-02-18T12:58:59.254928Z","last_seen":"2026-02-18T13:33:24.03866Z","times_seen":4,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/apple-touch-icon.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/apple-touch-icon.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:08 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 18011\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4dVzEYK5ULhR0shv0YhmfwOn7P9%2FfdRyXBU86JpTPsLy9%2ByCa6qyHBX42FaNRv%2FprPhmYTgLvQfeZqLNe6rGY8OGEYRjXFnc%2FvEHflYheq3LJY%3D\"}]}\r\ncf-ray: 9cfde489b93f3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"35c07cace0507bc3411d4aa47e2c82c8","sha1":"47954406ec09cd35c4033af02b34f72471861219","sha256":"1538be28396cba85080931fbd8bd5b128528ec1d2994e1818f6bd56ca7f50a3a","sha512":"a4316bfbc64519195edf8de706ef97519b13b7213a781b0a3f85335c95d34fb739149c3c955da02882fcb4dce67bd394c9b7ceb3340d66d061cc37a5a0fad631","ssdeep":"384:RtpiOT3dn9zb5r6tpnZ5aFJ/AvosgWfA6F5sh1A0:RtkMd9z5WanAvoZWI6shz","tlshash":"0a82d0d7919ebcc08f61828d239a7db8b199dc9b6453c854bc337f89137a6d7261181c","first_seen":"2025-08-15T04:02:28.954181Z","last_seen":"2026-02-18T13:33:24.039189Z","times_seen":6,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-mantle.6f00d0aa.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-mantle.6f00d0aa.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2992\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9j99s%2BXTxwrk0F7bkAAnbaMtoJ%2FC1dWbJ37je6M2EGNIyBdzP6KRm3jUk6kcA8eDYsOW54QVYz56Fdp8D0nd%2Fwb1kPfSU7lwKD%2B6M4Kz7FX6d0%3D\"}]}\r\ncf-ray: 9cfde489d95a3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 53, 8-bit/color RGBA, non-interlaced","md5":"e0106c590ec50edb6d5cdd7a5efa6dac","sha1":"de63dd6ee74c78559b5bba33cb6e6de588484863","sha256":"e899d177cceb2e70a7fbd9be16c342afb6119317d00805135b90a31dd09ef13b","sha512":"c9f0516eefa3fa9d71fbfdf99917f0bd1f6386c00765f68cd9c7b51e4c55bd2177236629833960d914834a67b8c435e4e93ed292b3068cd77e49cb04afe6c20f","ssdeep":"","tlshash":"7a515dc1422cde7ae0f2871d5276161efe3211211e2305add157f75f48e2b05a98e2f2","first_seen":"2025-08-15T04:02:28.966363Z","last_seen":"2026-02-18T13:33:24.039689Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/2be0092c-b185-4f87-92d7-d4369af429a0.js","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:50.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /2be0092c-b185-4f87-92d7-d4369af429a0.js HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 13:32:50 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVXgFIIXNKfMdejXaieEtJfBaSJsdOso2DeX6GBS2J95bC%2FqBBEIDIQqOstj3b8giMd6LDDfcHC7zCGFj6kxT0tmEkSRIlnvHTh9KIjbBHGNZEc%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfde48d5a153483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-24T16:59:44.483545Z","times_seen":46945,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-morpho.aec9bc5f.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-morpho.aec9bc5f.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2908\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TN6bIWsOemPOjWbPIgSA7skFJQgSstvRHGylxQk9xOaiM4HQFQQtwzbDu1fDimeyiiSqPhNYMzPiteuu3Yie2KNpx7%2BItaJibBm92Or0bV7G51o%3D\"}]}\r\ncf-ray: 9cfde489c9503483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 41, 8-bit/color RGBA, non-interlaced","md5":"31ad3506c34990812edc3a131ec388c0","sha1":"1b49651f615b19d83dbeeb62d1fc49af336ff783","sha256":"96b30c72ea6733f9788aec99e941d30c201fa7b9522a51d5777ffdac0a3599fb","sha512":"200f6e9007a55499ab4242e4c46e6535a537c9532693d47b87632bf06f014d7a63eccf1705c98d9c1fc234e1b272b797ff1d0d69ead0e6f2753dcf8d3db05042","ssdeep":"","tlshash":"835129e2e4257d90ce310810a02d1249baa30d659f3a53fb0ff5d9338922b45a4ce70b","first_seen":"2025-08-15T04:02:28.957801Z","last_seen":"2026-02-18T13:33:24.041558Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-curve.a64bcfa2.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-curve.a64bcfa2.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4350\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etBHt9m5zwlWjnKZqcxxTJTkN70%2BVGBhp1pfZmAdDL5m7O%2FWeS1H%2FcmfWvynznwtjLK5I7XApcGTSL2VwnS2Uzg%2FkL0uqw2hBAeHHR14ZKV48Rs%3D\"}]}\r\ncf-ray: 9cfde489d9543483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 157 x 49, 8-bit/color RGBA, non-interlaced","md5":"71b355dd686a07b8704a4d367c344360","sha1":"5944ac7c5f34b7b7a83537f816a6788c65d02bce","sha256":"747499a5742857d198a6bdaf10c57971188c1310debd890791c39cac88b3ae56","sha512":"af8e81b474b0035d1b8bd89e20192b461564dd685ecabbf7d380b9c8914ed4337e1e7388fbd2fb178c3f63eee84fcb5396a765c279a4cfa0fe85875aef8ec00c","ssdeep":"96:gao9KhtnxXVMOC0Bc0UZAqY1cmghxDTMrw4kmjQEiT87:lxq7AjgnDTMTEEiTc","tlshash":"d8917d90d9d2e6dfd124a67439bb52d0daa884dfc50700489d98f24bb4a630e78d2e94","first_seen":"2025-08-15T04:02:28.958737Z","last_seen":"2026-02-18T13:33:24.042092Z","times_seen":6,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T13:32:49.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-usualx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 22:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cymDXJ3NiWRy5tO%2Fv9Z02hnMjFUk8BkS2WSGnAptWFhZCUtVA1f0%2FUO2vH%2FEjtiPPBoqNA06D5CoH2BfO1SMD0kDgWIz%2B07EkbEWzVgMZSYNSII%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cfde487f8702767-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1899912,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (60268)","md5":"995097aec90cbc8f6b2231663f62f672","sha1":"ce0a7315f06e923c8f19e63dc6ec13839b70ac65","sha256":"6a8dc5e65237bbeb914d4885fff1bb762534f4150ac8cec4e672f671d49278bc","sha512":"bddf96856042a9e976abfd8db8439c58fd9c6fda57e0ed85e5fd6528ecd6b5dc633a356dc4c182d4f560f00d3e7e48658f66d864e567a46d59b904fe45d354bb","ssdeep":"24576:lXy93pAdM7KsZ63calkQ4hfg+Z0d4Vj1kskB1A:C6dM7W3caqv+du18A","tlshash":"5125d0679a16113f3c1380f9d3ddaa5c9129e083ed21aad9badd2041cfc27f619b7709","first_seen":"2026-02-18T12:58:59.271517Z","last_seen":"2026-02-18T13:33:24.042619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":95,"dns":70,"connect":8,"send":0,"wait":72,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/mk5nj.php","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /mk5nj.php HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BM1kcMRHccUskd9b2mosYdxf4UWA5x9s9TioGpYbQCHfrNVFnh2iEunXenhb3RGPK5BHj%2F%2FHHUj7dJ%2F6mmYNQkYkThCTwpsZVCHRE85HQ8xiyw%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfde48939253483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53971), with no line terminators","md5":"5d68320e40a2787fd4f3b61ba242ad77","sha1":"0493e9354719c10f75b00204c3c66dc78a6ee7f0","sha256":"bd07088936ed261acb97c113084e733358edf75e626181fe0a1a33c8fd0ae834","sha512":"4fe5c353d7feae4fe0f7d100924f2a997961fe7e26ff3cc7ceb061d855460537b0f8b853d992070d3ccc2c4e99bfbc33d78981f10c0934987fa34fd66d03036e","ssdeep":"1536:n31t0rHwpjiqMfw+Tu4C5Bam6StJkMYjVOKGyei+c7qP+Nntz5FZOV2uXz8G7Gp:n31t0spjirg5BVYjVOaj+uqP+NnR3Oc","tlshash":"9214b599db63a28c8d48619ec4b2f946d2940d0aca4cb853ee1eddc33515f7a90c727f","first_seen":"2026-02-18T13:26:16.948752Z","last_seen":"2026-02-18T13:33:24.04325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/maker.f54c59c8.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:32:49.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/maker.f54c59c8.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:32:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4103\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 2067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prmTJSmBdAH7JC4hZGUku6UNVB4BzF2H9pz2FmVZIT8dr9xGHOnGE91zf2ILy5eLhWvzEXU0Pfn84lecNiUQDogYkzukbinvb1YICeZdzqGlZzM%3D\"}]}\r\ncf-ray: 9cfde489c94d3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 164, 8-bit/color RGB, non-interlaced","md5":"561236811525477f8f83736d95bee9fb","sha1":"7dbd7f97437677080d428472c3128d942b227afa","sha256":"604735fd03981c174b5490e055416880204ba9a8dbd5c34957a9eb3927883625","sha512":"4cd906b4690bc2fc42f20ef7976f099abeef8608dea94dae409e3700c8c447ad5b4e5624839e81fac8cede88c75a9ec3bd9327a8d0c6d8e7a0183166265af958","ssdeep":"96:LnLJOt8EWWWWWWRjnn2fp0CFeKWIjeJFI66FI/5oIcAlAvA:LN6WWWWWWZnW0C8No8I66FI6M","tlshash":"2a81d6a5a30820ef61c1bb7473deb695ce337588ceecb40d3769245518a882556bb28e","first_seen":"2025-08-15T04:02:28.951285Z","last_seen":"2026-02-18T13:33:24.043956Z","times_seen":6,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}