{"report_id":"cd291349-2d07-4464-af21-ee39b7136e81","version":6,"status":"done","tags":[],"date":"2026-03-21T03:50:17Z","url":{"schema":"http","addr":"cyrexmods.to","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"cyrexmods.to/","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"title":"Krylenarpa - Cyrex Mods and Game Services by Krylenarpa !","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cyrexmods.to","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T03:50:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cyrexmods.to","ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-17T19:26:24.063008Z","last_seen":"2026-03-17T19:26:24.063008Z","alert_count":105,"request_count":21,"received_data":3302611,"sent_data":11651,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":3,"received_data":98313,"sent_data":1579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":11926,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cyrexmods.to/","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cd8373026ce4426884e33446a233589","sha1":"9cd4849bd93dc3138986b6c49c2661840bf23559","sha256":"9051fdcbfe7721b8c61aeebc0ca20c9b0c11d299bbaff06eb5f0cb286331c470","sha512":"86476714300fadb4f04d3c6fcbb691293ed7ee6e5dab8131643ac4500ccca984fc61dd4f691275728a0e8d715b43ac929990d82e8c002e00321231315bfbf719","ssdeep":"","tlshash":"7221c02b76bf303421aba1ababdf67c53130011f1481c4187dac86892fe4dd596e1af8","size":1238,"data":"","first_seen":"2026-03-02T12:15:32.178969Z","last_seen":"2026-03-29T19:50:18.777819Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/album_Ip1.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/album_Ip1.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VSZH3eaWk0dhsLCF; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 84932\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-14bc4\"\r\naccept-ranges: bytes\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":84932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 843x474, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b78c0f7602a199eeda5858a6f895fb0","sha1":"6c9f1345786719cbf17275d008203a04164f68f5","sha256":"b1403847fd8939ca6ac1068d348493339d9e7134acfbfc9ba7b7133a82e267cc","sha512":"ce86371e0a8ef610b703991b6a5514f9be390e0a1065e8a8598f3428e792cb17ab238f58f177134c2530f4dff4133acd01819f319af67b67fe1977697cf976ec","ssdeep":"1536:8JfBbHwDpWfxdH7WTgplhzczbJlkK/P4L8Lug5KhGQaIOX8ExrdNhS+n00xM95VG:SJkDpIbbWTeY75P0gFQrMxrdvnnx2Vq1","tlshash":"178302188a47accf30d07e684e03d0f99a2098fba893e699768d1712676796867c0f1d","first_seen":"2026-03-02T12:15:32.157969Z","last_seen":"2026-03-29T19:50:18.768247Z","times_seen":9,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/css/bootstrap.min.css","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iAdf7PSMKrlSEH43; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 05:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Feb 2026 17:10:00 GMT\r\netag: W/\"69a1cfe8-38d63\"\r\ncontent-encoding: gzip\r\nage: 166179\r\ncontent-length: 31840\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-06-07T17:29:18.149655Z","times_seen":22855,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/logo.svg","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=698N4fNW0HkRTu74; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: W/\"69a1cfd4-129c\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1246\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fa6024b9938d3cbe26892534752c70d","sha1":"ab31c80fe946e5e8d3d5d5c2874d0c67a3c55911","sha256":"8462c23220ab971bfcf388dc95fa952461166471ab0780585def59edb9fd5861","sha512":"03b17cec66b0f33fdfcd14c8a73dbf474d5f14687732d4090ead8d87d5b1c4539b176814798686ba70257551950f4a2d2d381f86581579ef722eee06d618a7a6","ssdeep":"96:KeiTrh+V3oOc7mdZ49YjZVuCElpbMWmxSRptpq5:Z1QWcDpq5","tlshash":"0fa199779b1c64bb905217e4c3c91a8230ade9c3f21980fda3a265679e21dbf01bdf41","first_seen":"2026-03-02T12:15:32.167748Z","last_seen":"2026-03-29T19:50:18.764631Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/album_Ip3.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/album_Ip3.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hixmGWKRKMOt2PDJ; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13368\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-3438\"\r\naccept-ranges: bytes\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13368,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 843x474, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6d8a1ee99c0a08bb6f1894aae3f2d5a","sha1":"3b3d5761fec20dc912b2d181130860ac40630a30","sha256":"2a04aab42976703386077c9d591f7e69a77000b231f95dd20cbf5a539d1b7b36","sha512":"3924d84cb5f9fde3ee773f656d062c3f037a627efd725da4ea58868415dcfedab3de324430c1248d90c039aaf6d1365c140851163759753d057d5ab4966743f6","ssdeep":"192:5FFDkQlF6iySsGmcbdUoAGucb/7AaiLtatVoMbf2dGbEwL6QWLu4:1YQOiSchLbuLtatVoMidGLv","tlshash":"7c52cf153e9d7aafe660def0699b4b122ed4c0d90663748107d9f8979d8070740ff785","first_seen":"2026-03-02T12:15:32.174412Z","last_seen":"2026-03-29T19:50:18.77426Z","times_seen":9,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":42,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/album_Ip4.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/album_Ip4.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TGGCOjXWjHog2WAS; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67954\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-10972\"\r\naccept-ranges: bytes\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":67954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e632896961df21410399b4088893faad","sha1":"18c31993adf0649a25a8c01449f3675cee03a346","sha256":"ff9af26605a210d1074c017719cd39ed487c530983fade48e494da17192b90c7","sha512":"018aa059acbe20826de2d6708b2428c14f92ddc2399f9ea18be6df030be1d69ec60dc22f593ad77f006048bc1dbbf9dde4b08051c846ad30f8aa844b37149d4d","ssdeep":"1536:wbU/o3KQidw6dFjm5ZjxSwmnU5HVZehOstTT9vjwNEHZE5SZ6:KYQAw+6NSw11Ehl9Y","tlshash":"a86302637fd085f0ec29b04f4b87fbe1998469e4c18c876a5c49153e6df8383636c99a","first_seen":"2026-03-02T12:15:32.175434Z","last_seen":"2026-03-29T19:50:18.777297Z","times_seen":9,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":31,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/ava_VQ3_1.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/ava_VQ3_1.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9fFljKPRCXRjUAEz; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 82910\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-143de\"\r\naccept-ranges: bytes\r\nage: 137548\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":82910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"978a47710f9658205d37414b5224fb03","sha1":"1768c632b03baccecd4bc854c9649ff3fb3ff5b3","sha256":"6c9fe0e2e7036e9ab426e6ffc26fe3557526c4c40a612843b5478663036e98a3","sha512":"613e3733fc81f5ce31894f1b8fa0ce9bdb6cce0f9ca07d773fe5d9c680fcdf5e848afded2932fde6ed8d26facd667474dfa7335a38ff14a81529c7220645a983","ssdeep":"1536:4IQ0bDx+AE0lDOahA9k7Hnd9XDlOjgGwULDycYoWtSyK37to3wN:xBbDQD0MCACjnVKxwUvyRoW9AxAwN","tlshash":"dd83029a0718e5458d820d986f18cdabd1447aa836b1e5c89b370ba4427dd7efce8ccc","first_seen":"2026-03-02T12:15:32.169989Z","last_seen":"2026-03-29T19:50:18.765809Z","times_seen":9,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/album_Ip0.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/album_Ip0.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rx388ucciKAOPiJb; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 21 Mar 2026 03:49:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54202\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\naccept-ranges: bytes\r\nddg-cache-status: MISS,HIT\r\netag: \"69a1cfd4-d3ba\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":54202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4b9f0b12985bc16e594702c1102dcf6","sha1":"a9ce1501b5d9fe7546074d3493a2412a26e984c3","sha256":"d777c3a841a69acc2046464a6b39695401a7401f3429896c4e702d0a9aa8562b","sha512":"bec5d223bd5fe433cd86cba069a04eb88a8a73ebf709cc0d10fe871b7b95b5dbe0c3922adf6ea51f41160aecae67d6fe6c5ededbe9184b7aa35599de2faf4438","ssdeep":"1536:Y9RB0RoqKWz+ceHVSSzbsp6whMDhBRM4JDeHhywYzHllmO:wRB0RoHNtU69NBRM4JDqhywYDt","tlshash":"2533f2486e3f26dd78d2dd66701bafe634c191abe8cec1d7961521c48edb04e88bd107","first_seen":"2026-03-02T12:15:32.156433Z","last_seen":"2026-03-29T19:50:18.773756Z","times_seen":9,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/body-bg_Hf9HV1.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:55.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/body-bg_Hf9HV1.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=EAqpFTlfzgpSrFZr; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8mZNrotVNViwxs3P; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg10_=1774064995; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101174\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-18b36\"\r\naccept-ranges: bytes\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":101174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c8bcbf7f3be82b0346cbf2b3defaf99","sha1":"b87c265dc61e007eb7d18af57005a7809cc9e5ba","sha256":"5031c36fa5ef40d1651b15b7a11b6c61b47f0ce26ba6642a3d3e58de0bcbbf6a","sha512":"e70205fed7c090fcafd0bc16129d6232523eca750364ca4b6a65153fc9305ec440da9826cbd6c4303ab2900a19f38a7961f1858f4fec2d699062a8a3b604d8f3","ssdeep":"3072:HI4G03F3DiTroe3cIJ+2gENSLvXmalBE/UWEMjt:oaFiAe3cqgENSzXmalO/U7ot","tlshash":"53a3020263cde2abcda53eb47f87154c6c238d1bd606f99ed72d0226a029f105bc97e1","first_seen":"2026-03-02T12:15:32.164804Z","last_seen":"2026-03-29T19:50:18.776101Z","times_seen":9,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/uploads/02_24_2026/Game-modifications-and-customization-Games-aaca8-1.jpg","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /uploads/02_24_2026/Game-modifications-and-customization-Games-aaca8-1.jpg HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8OBWsmrTxSJt36nY; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 20 Mar 2026 20:22:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: W/\"69a1cfd4-49fa8\"\r\ncontent-encoding: gzip\r\nage: 26897\r\ncontent-length: 265459\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":303016,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 1936x1096, components 3","md5":"30aeb17664f41421a830aeec54a94630","sha1":"d3a993c02a094192917cad15374708722fc2e72d","sha256":"f274a90e337faef426b6d252a4e4f0e66b818a4e9c0d1b7be6edc346eaf26991","sha512":"32d1197ee9c72902db6bd854147e0141953d91bb9e1a5024c8df01e7a514031c8e6fb1943f0d7a6d772fa3d0e86e78f72a4942bc0f70f876314404159e948b53","ssdeep":"6144:EST9bNd8f4RdmCsmWTId1b+cp5b9dRGDE8wI7JhmTDQ2tE9:ESTN8fCZZ/d/GDE8wEJCntE9","tlshash":"1854e1134c0d9a52a57d16e4bf035fed2f61665cb9967aff10220ecb3e18ae11c4e06e","first_seen":"2026-03-02T12:15:32.160974Z","last_seen":"2026-03-29T19:50:18.770291Z","times_seen":9,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/album_Ip5.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/album_Ip5.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FkVINPOTphHBehKp; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 96746\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-179ea\"\r\naccept-ranges: bytes\r\nage: 137551\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":96746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41481dc9f48d6dbc7a109b33e6f80218","sha1":"0547eecfdfe0cf6d271b64be641be460a0e7c624","sha256":"ffcae9682324202f12bb14d0d4e70ec5168afd1de5fd774c1b865c06692161fc","sha512":"2d6d1eb53d8f2da05cccab187203fa851407bab9b0dd7406eb71252a42f424637d350746687afa7edd8bf639e478bfd6532353e5482b47bb80ecfdbbbea3b0b7","ssdeep":"1536:H2z7eGawCdghhZd+CD7MvX5h0P7mvQPBlivTIOo3ZcSofno/3t:H2/Ewz+x5h+76QP7ivU7Zaot","tlshash":"83930214446c6f8a5a1b9e62fc738b0ac82f705d3f06929c9cf37944721ba4b91f9716","first_seen":"2026-03-02T12:15:32.176395Z","last_seen":"2026-03-29T19:50:18.774764Z","times_seen":9,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":49,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/avatar_OD_0.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/avatar_OD_0.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oqo6yDvJ78EWDmqJ; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 123218\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\naccept-ranges: bytes\r\netag: \"69a1cfd4-1e152\"\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":123218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15d31be6656e3d73eb6c1f3972fd8354","sha1":"9bc196dc443a612c1bd799ad493a7a0e22a3ef9a","sha256":"6434f977c1a67500434bfca38caed40020c976c478562cc5c1f33fc2c78c0de9","sha512":"65a71cd622b302e5728556ed73f5867af0229a6e9c89fdc14ad87b415e448a1d65a1161bb681aaaea1bc5e2bc6319e7f270683fb21485495d1e5b6d6387bb290","ssdeep":"3072:uL4KoUvn+kKu3KbeYU839rwWlIbLmPHu4tRKDhEp:e4ZUv+kKuSbE+vuzDep","tlshash":"10c31218268f9cc457a3b801c59ce5fa149a5bf123aa5c25b034e5ecfb9ce3f65c489c","first_seen":"2026-03-02T12:15:32.168783Z","last_seen":"2026-03-29T19:50:18.762655Z","times_seen":9,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":48,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/body-bg_Hf9HV2.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:55.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/body-bg_Hf9HV2.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=EAqpFTlfzgpSrFZr; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4a9vSqfVzJkMo2v2; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg10_=1774064995; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 21 Mar 2026 03:49:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65982\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\naccept-ranges: bytes\r\nddg-cache-status: MISS,HIT\r\netag: \"69a1cfd4-101be\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":65982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fcc7fc271d8f376d33d8bec3f703c39a","sha1":"dbf33a43b32382f1293d11945cad0b6eeb818f5a","sha256":"55208bbd347f0412a276d5c59a1eeb1fff4a885a187bea04cd3a194656522ef3","sha512":"41edc95b593d597dd4be050abbf603c9639f6089f1d39d49ce1950947a3365cbd0a3aea9d9df8d3db9c7074f583afe5addbad32223fdeb3375a93c54fbd6bb40","ssdeep":"1536:PC1ItgwVjUIpI7wBWdvqdBb7ch299yNcYKeAiFpR:PC1w9jVOgWdvcKYfyNcOx3","tlshash":"f1530220b8dc053eea1e73875d821a673cdf139a2846357942e8483544bb1fafe6c679","first_seen":"2026-03-02T12:15:32.163722Z","last_seen":"2026-03-29T19:50:18.771696Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/body-bg_Hf9HV0.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:55.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/body-bg_Hf9HV0.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=EAqpFTlfzgpSrFZr; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7QEPiqlmNjcJGea8; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg10_=1774064995; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 104158\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-196de\"\r\naccept-ranges: bytes\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":104158,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1282, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a0d9f0ab1bb0d57b7a0a66c1ad64c9b5","sha1":"c2098701ef29b027add5bcbab2295c41d002113c","sha256":"88c600e9957b4c908f35758ba4ba3d21ce566678a4e12f11466715eaaaf8b46d","sha512":"91bb647459d5c36d0a9b558041332be1dd50d602c7cb77bbc5083126f3bbdf552c79ba691e229842c725a111ff450555e671dfc46005f62f0adbde58cccb5f9d","ssdeep":"1536:8u/F3o/9T9+x9wrn62tZrAQLX1x13zPL9hV0XhHbS3b1+ADgQ8DM2/kxX1kKf00H:V/FolayAQjdD10xW37gvM2/kB0U","tlshash":"55a312b3369902e0e0586fbbf0434bd0a3c477a3a5aa4578754f62dc10dd6db2782bd8","first_seen":"2026-03-02T12:15:32.171835Z","last_seen":"2026-03-29T19:50:18.76642Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:55.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cyrexmods.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:34:57 GMT\r\nexpires: Mon, 15 Mar 2027 05:34:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 512098\r\nlast-modified: Wed, 10 Sep 2025 17:07:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37788, version 1.0","md5":"9577af3ccda5f49d71b0dea88b47f1ac","sha1":"fcfdbcb885ebabaf7354b134c44269942ae61698","sha256":"ddb8c66035104e233fc024669183aad3738b6daa16deee2ebb1241bd0f98ace1","sha512":"8f2256872c7a17c968039323f97a1646ff6bc682456621568a4c35f3f8780fa9237fe1c3192727f4f2e19d018bda5614bb197616b81e6ed87cc6683423e0650e","ssdeep":"768:+Ws2cEh6gcFObhrnUzM3jZdJIHnfwa5ZsXkyyIt:bt36FMyzMTZdJiwaXsJt","tlshash":"af0302bf85218f3e577b3d70c507af133c955938e92cea94e3126fa2ac432d90815693","first_seen":"2025-09-11T17:50:43.786734Z","last_seen":"2026-06-07T08:20:17.037355Z","times_seen":20881,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":78,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuM2T7I-NP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:55.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuM2T7I-NP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cyrexmods.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:19:20 GMT\r\nexpires: Sun, 14 Mar 2027 05:19:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:32 GMT\r\ncontent-type: font/woff2\r\nage: 599435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17248, version 1.0","md5":"777d741345ba899c7c01afbe40540f5f","sha1":"5261de59dfafc3adcebfcf39de4d2b03a8c5c458","sha256":"2df52199eac56e2ec7a735e609bb151bdab79422c3e73948f4b6580c66bb5a50","sha512":"65ba9bca87dc14dfdc88a62da1842f10fd062d723687905ec3801a5b74ebc7d39b9cbf5548980b3fee7f2ae6e2dc12c9421a17c7a47bc704f477f7152105a932","ssdeep":"384:AINGaxRZx7ed4az+Zc+Vs6CQ3JRkN0z1hF1a7VDqWBAgmMx+ZsHk+o8a:AIN777JZB66CsG0z3FWNqdDMxu71","tlshash":"2672d151d702e63ca84011b982e6dc33e47b57caea5456131bc0ae1ffe733d252691db","first_seen":"2025-05-30T08:10:59.47292Z","last_seen":"2026-06-07T08:11:08.594695Z","times_seen":3441,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":62,"dns":3,"connect":8,"send":0,"wait":17,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/logo.svg","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:55.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=8mZNrotVNViwxs3P; __ddg10_=1774064995; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9qjS5qRsV3GRv2A8; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg10_=1774064995; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:55 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: W/\"69a1cfd4-129c\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 137550\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1246\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fa6024b9938d3cbe26892534752c70d","sha1":"ab31c80fe946e5e8d3d5d5c2874d0c67a3c55911","sha256":"8462c23220ab971bfcf388dc95fa952461166471ab0780585def59edb9fd5861","sha512":"03b17cec66b0f33fdfcd14c8a73dbf474d5f14687732d4090ead8d87d5b1c4539b176814798686ba70257551950f4a2d2d381f86581579ef722eee06d618a7a6","ssdeep":"96:KeiTrh+V3oOc7mdZ49YjZVuCElpbMWmxSRptpq5:Z1QWcDpq5","tlshash":"0fa199779b1c64bb905217e4c3c91a8230ade9c3f21980fda3a265679e21dbf01bdf41","first_seen":"2026-03-02T12:15:32.167748Z","last_seen":"2026-03-29T19:50:18.764631Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lora:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Lora:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 03:49:55 GMT\r\ndate: Sat, 21 Mar 2026 03:49:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9342,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d3196cd8703ed97878540bf035827457","sha1":"f5ceb365d8834051ce627e230bf54a2c6ff28ab4","sha256":"b8348fc32dc6b0f88dd6b3086208c814ec53285c94a3bcea265c68a7e5c33c8b","sha512":"5efbc1e4602206c3aac7cbcebb0ee060787499b0798af627f15e52d343836fd9852dcb4bbfe4da2918844acf62ae4203681fd352ca6a389d01b70230d03ee4d8","ssdeep":"192:3HlnHQHzqQHPbqGIwV42HEHRRHM7IyTqVLbqGIwV4XDIWM:3FnwGQzqY42k/msRqY4U","tlshash":"af12129100179544a75718d223cebe7aee4e93587140d035abfd8b87fe8ede692a831c","first_seen":"2025-09-15T12:33:31.260503Z","last_seen":"2026-06-07T07:37:13.968154Z","times_seen":591,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":162,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/album_Ip2.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/album_Ip2.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=thXD36sm1FqOb7lg; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57272\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-dfb8\"\r\naccept-ranges: bytes\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":57272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"439e44ae5043a93b37868b03b6ca84da","sha1":"a6a73924d269b4bdc2389ad8eaca261e32de470e","sha256":"05d417b34a13f476b24f7a3a27f771ba9763cc912bc9aa434bd380a20b20f191","sha512":"9cacfea8f759fb88190abb45b91d3dd3c24d4131af4fe8bd30755e63977ce8fc50dfeb6ed0a00b92c17044ad3ee87070d44d28f00e0fea3ea83265d714ae2968","ssdeep":"1536:X02KRMK8wlb+2HOgT1mo++r/E29JpZv3l:6RbVugZmGTb9TZN","tlshash":"7d430271ad960f694a56f62eef0c5c292f072dcc83a5737c1a5ca39cf368e96c410a19","first_seen":"2026-03-02T12:15:32.178022Z","last_seen":"2026-03-29T19:50:18.771051Z","times_seen":9,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/ava_VQ3_0.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/ava_VQ3_0.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4JtdHdT6weZWtPta; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 20 Mar 2026 12:05:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93388\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"69a1cfd4-16ccc\"\r\naccept-ranges: bytes\r\nage: 56673\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":93388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5194808d1258ed596a9daf85418b37e","sha1":"f0a88930417b4ee9a15085b9aec1d4608f8f7fcc","sha256":"63ac92c5ddc37c0986b77be5bee5c7dd20708409e828a1523c45fe56f9884eb8","sha512":"52037638fcdfb7b1fa6247568e6872858eb837810bcc11d3106dea76ed222ea6c59db697137ac61012038051b08f38abc0eebebc07fd1b2afc99e70c0064db29","ssdeep":"1536:v8tjsWWbVVSk2hVkE5nRWZ187ER+tbKZRkkqrLTI8okuBNOS79kdt5tzCtrUCJL+:UWykSVkMR0RWkkLTI2QND9C55KL+","tlshash":"3f93021de0a9c0406aa073f63c14987df1db7a2a6fa8d56e8f0759cf4811664ee9f370","first_seen":"2025-01-19T04:23:16.994098Z","last_seen":"2026-03-29T19:50:18.775259Z","times_seen":10,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":35,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/avatar_OD_1.webp","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/avatar_OD_1.webp HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2slxRCL1EPOJFZuJ; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52000\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\naccept-ranges: bytes\r\netag: \"69a1cfd4-cb20\"\r\nage: 137550\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":52000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c5a14efcaa7602d60f837a430b2a4da9","sha1":"d12941902d4d5e81c2104df11fb83b675dcce79a","sha256":"237695d25f65c1842818ef462f4409b7bc6be736dba7d4e650e4f4bac8ae04dd","sha512":"f10968b30acba365609155f4d8ec0438d8daecc8836cd9a767e5f159093653197e080f9b5a0003b92288f1ae7c7349963b32ef636cc06b961435ac5b8c1479c5","ssdeep":"1536:XdT3nkb1jNaCA9xwqhrHLjWNOXgLGvNN+Ya8sDHIO:Xd7nkxL2qoLOVLGvED8O","tlshash":"6933018a9431db7e261d2ac366326fdf0220fdb589c6923014b7565870fb2ad74f3ad4","first_seen":"2026-03-02T12:15:32.170904Z","last_seen":"2026-03-29T19:50:18.776769Z","times_seen":9,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/intro-video_eJ30.mp4","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/intro-video_eJ30.mp4 HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=rx388ucciKAOPiJb; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EAqpFTlfzgpSrFZr; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3715277\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: \"38b0cd-64bd14d749d00\"\r\naccept-ranges: bytes\r\nage: 137548\r\nddg-cache-status: HIT,MISS\r\ncontent-range: bytes 0-3715276/3715277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"73b9b8ae06f9c6b9f554fb4720243dac","sha1":"dbf6a0a977eb1efa2ff99c3b52ac8b5674fc1d4a","sha256":"6372888397f8f680b43256c8b0c9fe0be0704d42128783e559a1e394c5a43aeb","sha512":"3f4f7d11f9046861b2114dd10454d907736d214ad4b5de7bfdccdbbb54038fa9bf20bae5d45a6d13029b9ecbb7dac597bc8f17ce454224112f9c2ef5a87d8d39","ssdeep":"24576:ojJckz1uDa5eOdIX9/klh8g1fT5clhlK4hmK8sPxyymAK5gDUA7+:ouEs206IXxwJcJK4YsfHKqDUAK","tlshash":"0f252352b39cc822f7981730deb903743b84f51d671b124b7bad5f989e686c99ac48cc","first_seen":"2026-03-21T03:50:19.354844Z","last_seen":"2026-03-21T03:58:54.119923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":24,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIhMX1D_JOuMw_LIftL.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:55.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/lora/v37/0QIhMX1D_JOuMw_LIftL.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cyrexmods.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40772\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:42 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:08:08 GMT\r\ncontent-type: font/woff2\r\nage: 599533\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40772,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40772, version 1.0","md5":"1640b0b69ef0647e11b559178cb8a08d","sha1":"99523cf576d3d1815e27b58a35daff6edc443dd0","sha256":"d824d807d4d832d12c87932d0b8ec1314dcfd502157a56dee6bb04cf8a3768ae","sha512":"2969e677c9d9c2a9a7bc7d5bd21b0397a3cb67642b99a2603936538bd580f837d93e6bb191e02a932493207d17d53b664e04272bf3850c6947b042d4c1a1d423","ssdeep":"768:W0q6cKPuFGIRn7MJzdS8CAvC3AA3x8dlmHJ45S4O0f3DNmzcB:WC0FGA7t8HvC18dlmsS4rY4B","tlshash":"3603f13c5f73a978faec58b8ecdf0726df9e0338a8eb1a5672d15c250aa0dc17610065","first_seen":"2025-09-11T22:06:21.040627Z","last_seen":"2026-06-07T06:22:11.396531Z","times_seen":3400,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":49,"dns":1,"connect":21,"send":0,"wait":16,"receive":6,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T03:49:54.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zuzdiShunkJSWY8Z; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg1_=pDbc7OKvrsBOcnxj4J92; Domain=.cyrexmods.to; HttpOnly; Path=/; Expires=Sun, 21-Mar-2027 03:49:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 21 Mar 2026 03:49:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 12877\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":58205,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (807), with CRLF, LF line terminators","md5":"1c0481552f603139dba4644650203393","sha1":"70f1e5fff801b215e073f063216ddab31501acc5","sha256":"23b2437b9fcb8e71339f3d3e70ed22804b775f4a3c3f8fff602d9f8672d152fc","sha512":"24564bbfb0d6b942cae99b7016cb261c37c2e1d6178ff792d09884e9e855328b5dd68b43305728e07bdad73149e0a363d3bd294030a42d7007c3e6edfbfd382f","ssdeep":"1536:Abd7PKFD9wo5oge/jg4pn8KNVfoeOepPt:Abd7Pq8g4N9VIkF","tlshash":"e443965e96f320862c47d0782feb175a3765c007e50acd647eed92889f82895ddb378c","first_seen":"2026-03-02T12:15:32.152056Z","last_seen":"2026-03-29T19:50:18.772707Z","times_seen":9,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":163,"dns":69,"connect":22,"send":0,"wait":370,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anton\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Anton\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 03:49:55 GMT\r\ndate: Sat, 21 Mar 2026 03:49:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1212,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"96b5500f78d02a20737a104595841040","sha1":"1299a6bbcbdc4105462ce46d84180570bffb8a9e","sha256":"60f7a6eec04197f4e0cc89810815abe3d1712ef8fe9519ac4517bced2deb78e5","sha512":"037bf5c11ac28e4b5e0b235609746b692c5d876b0155edf21f5b20c2a3f94fff7534e115a8cdc82ffd6c3664cb2c9ecd24b59ef39d995da17dfa49c50dbbc01e","ssdeep":"","tlshash":"9121fe91043ba100da974cc123df3d3aee8ea1856045d47d5ffe08cc9c5bc6a235870c","first_seen":"2025-09-17T10:05:41.613868Z","last_seen":"2026-06-07T07:45:16.066224Z","times_seen":1621,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":161,"dns":1,"connect":25,"send":0,"wait":36,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/css/bootstrap-icons.css","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /css/bootstrap-icons.css HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=V590KAcbuHSmPd54; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 11:56:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Feb 2026 17:10:00 GMT\r\ncontent-encoding: gzip\r\netag: \"69a1cfe8-17fcf\"\r\nage: 143610\r\ncontent-length: 14157\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":98255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1d14ac4000dc4a8d3557b256248d9000","sha1":"9ee496cc9baaae58b98e7fc1eb46e3578daf8143","sha256":"4ffa6bea4304d2eda418683f56261685ed47bf00995039f27e5ad62d53938d2d","sha512":"cb098f6eec464b8709ec6c70097f9b089c1e79ec6dd38ed9614d873f9d9658a6e9267178fd9cdfaf6068d7d2780963d766695e56eb10f5dfff441e5bab444fef","ssdeep":"768:Tqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMR:KOocm4FJwZ5ijINRDlIia","tlshash":"d5a3eeba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2024-01-08T15:48:29Z","last_seen":"2026-06-07T15:05:09.953703Z","times_seen":3712,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyrexmods.to/assets/images/vector_viT5j0.svg","fqdn":"cyrexmods.to","domain":"cyrexmods.to","tld":"to"},"ip":{"addr":"185.178.208.138","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyrexmods.to/","date":"2026-03-21T03:49:54.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyrexmods.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 20:30:13 GMT","end":"Sun, 07 Jun 2026 20:30:12 GMT"},"fingerprint":{"sha1":"8B:70:77:61:C5:E1:58:E0:43:03:46:AA:52:84:7A:1E:C4:E0:21:3E","sha256":"A7:7D:27:45:15:18:C6:C4:2F:B5:94:2E:DF:37:41:23:D5:D5:CA:0E:35:C6:D2:74:EC:E9:24:C3:CC:5B:E5:B1"}}},"request":{"raw":"GET /assets/images/vector_viT5j0.svg HTTP/1.1\r\nHost: cyrexmods.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyrexmods.to/\r\nCookie: __ddg8_=zuzdiShunkJSWY8Z; __ddg10_=1774064994; __ddg9_=91.90.42.154; __ddg1_=pDbc7OKvrsBOcnxj4J92\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7bkqMd8FZ4SSYfnV; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg10_=1774064994; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyrexmods.to; Path=/; Expires=Sat, 21-Mar-2026 04:09:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 19 Mar 2026 13:37:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 27 Feb 2026 17:09:40 GMT\r\netag: W/\"69a1cfd4-4452\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 137549\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 6264\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ef3088869af9558aa1aad860e165843","sha1":"87db2b90151a958d3bcb4a3d8817dec48760308c","sha256":"510d27d2e8a06d73f4892d19c59382a5bfdb8812777e40a2cf8409b827701848","sha512":"1d78dae117173dc0403915aba682ec406d106647599eac5290b11fe8574ec40481205a61ee24db1052789583b837da8742e9c3fb9d53cf421a5f28316237d49a","ssdeep":"192:71fIOnH4JR2qieFyoOhjfF6cGLEL8W6VWCcv9U+rnS1VjnVmLxcRW8Rxo3DdnLJh:7FInEYyoOxfF6cjL8WOnwdS1Vjns5Jh","tlshash":"437285731329afbe6483d3d89a98204171e1a6d5f3b992ecabe390215d03df76476c34","first_seen":"2026-03-02T12:15:32.15527Z","last_seen":"2026-03-29T19:50:18.769807Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cyrexmods.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}