{"report_id":"d3d127de-7289-4e40-befe-fe0da5d43d51","version":0,"status":"done","tags":[],"date":"2026-06-28T11:43:31Z","url":{"schema":"https","addr":"lxlis.cfd/","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"title":"Nolimit","dom":{"size":830591,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13095)","md5":"cb3a48974398c1b6ba7a7691ece5b747","sha1":"132b01acc7344a2bfcc48dcbb4e136ff7c50b5f3","sha256":"2f027d21736802bc85c4dd8562cb9d57ec3f4d9db5e333ad85b24ba65af8c776","sha512":"bc06df8e2dad6550b046ea0018d82c2b86244f5c125b279f8412538c3220ef821238fcacc1e8056565b78905a00e088e75ec96a081154cd9c888e67aeef2c76f","ssdeep":"3072:imvuXuLYQgU5KrwDydwOOdS411Wyh9z9zh0ExGUqYaU8M9azVF9gMJCpYvceHMrG:D2uJ5KrwYwZddh9zt+EgUqYM0VG","tlshash":"3a05cc62b0b7f02f41a787f53598539aa4b2ca09cacf0419f2edd7e463cec9679185c4","dom_hash":"domhash84bb30ef31f7d1e503772f21bccb118d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"lxlis.cfd/","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"104.21.11.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T11:43:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/input.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/image.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/ui.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/home","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2840,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":1,"received_data":707,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lxlis.cfd","ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-06-28T11:38:52.27196Z","last_seen":"2026-06-28T11:38:52.27196Z","alert_count":3,"request_count":85,"received_data":4198185,"sent_data":49942,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38e21f7cc42745b425795e8b2e88fc0d","sha1":"9bc3b07589c92b9cb601e39a6c4f5681cb0e9377","sha256":"6316da774dbfa62a4625b5e670c986f5cd66f8e8877b59cbdb93656c40ed4366","sha512":"26f442795a8f60ba197bc19b716a8b80a6e0c38f416374c60c99323fd96139d437dc66c2f005f7d8b1e8036218a465dd0c5d861eb7a38c068a5a572c56d24ce6","ssdeep":"48:CyMJ9pJ3wJx8v1htAzi5oJnJPJZn9eJ2dS1OC2XR5NDsA80phlnUsBnA9pjnAPH:SF+kZ56Zky3h59VUPjkPH","tlshash":"61c14122f06be11f04e5c7f5364822d5d8b6cd06c68e4109b69ddfe9a39eda73a081cd","size":5716,"data":"","first_seen":"2026-06-28T11:38:56.440051Z","last_seen":"2026-06-28T11:44:41.785185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4e3a837f716e919772f4b62f291953d","sha1":"38e7ff18fb78bcb4d65173f4db37501f74652aa3","sha256":"6e352f6a18e8322b78e4d698c465a3dc247e721c0eb8285dd622b9d2ef9d2aa4","sha512":"af78c66670a147e7106821204edbc4b2c314d65d9d036fe9a80dc5d43323fe147acbe02dd4ebe3c04c8c5fe7de775511d86c515f02534085cbda27cfb2b4b75f","ssdeep":"384:HZs6tWCUlChXMKJ5cDunderhspsnxl2iRH2cHT:sd","tlshash":"83524f22386ff10f10d5477136e823e698bace46c6ce550ab58ddeb9b0ded973a081c5","size":14424,"data":"","first_seen":"2026-06-28T11:38:56.441757Z","last_seen":"2026-06-28T11:44:41.785717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88359e6d2bd1915a9cdbe1cbc86d5929","sha1":"0dfa2a06393bebddecd98ef3790687903270ba3b","sha256":"cdeec66bfbcdc8c781e2f4dd8e10e5a1fccc8a0ec96d8e08aab04b8e53a1ae81","sha512":"70054067ed2ee6efff90487c8f6fd324cdcaceac8273cf19b26b843409c50041dcd32d8b4e99bd9a569384203a74c7705f8349c2532a30b838b4b816123e136c","ssdeep":"48:CoydrdxdbDBdSwaLDfOiNx34XDhchd2dodwcVBc3bdWdlBnO44xcEOdRfUVdxngo:HxxLYl2Jt1NN1pLcHdjydrSNfLwDBHLq","tlshash":"e4722126386ff10f10d5477236e823e698bace06c6ce5509b58ddeb9b0dec973a085c5","size":16799,"data":"","first_seen":"2026-06-28T11:38:56.443376Z","last_seen":"2026-06-28T11:44:41.786279Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a48b25ec851a83c6bba015709ea2cc58","sha1":"d23c212019ad9e42838338e23d6a73a3897a575c","sha256":"61905138679089d2b5f55f76c2ff83da263b5279efcdf1d06a4d0239d9cda0c6","sha512":"d40773c753dfc5196b6e0568164e8d1d0d17aeed93a955c0c4500f4d0f143fd9f6f7cb6f3873f4a43def2443b7bcab3d5fce33a56702bdb5683cf81008f9c092","ssdeep":"48:CogFDIpiHTobrHgCgwT6ALkuYhg3NXgh2ApTDgLgxmgixwZAsdBiNx3DqYohosoQ:RdE66CpApeQqxvVbuc6yNUtb+HgN","tlshash":"e2625222385bf10f10d5477236e823e798bade06c6ce550ab58cdeb970ded973a085c5","size":15384,"data":"","first_seen":"2026-06-28T11:38:56.444971Z","last_seen":"2026-06-28T11:44:41.786963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cdb78b6227cc157ba5e3fb0dbe029c6","sha1":"e8f811ac1723eccb7f9eb26bee44da11d4b001c3","sha256":"fb7a5411bb03eb851abcbdae8a9db9960d265aca3c1c8950baa48c2ea007c44f","sha512":"8375ac3231bacb2154a6d94194499978f089f9c8779fa82a2ece5099c883fb023118f7e02037a8f23fa6834a5acda864232bd7673556d92786b7502c872da094","ssdeep":"","tlshash":"cb716423306be10f04c587b9364822dad8a5cd06c78f414db65ddeee62eede636082cd","size":3764,"data":"","first_seen":"2026-06-28T11:38:56.44643Z","last_seen":"2026-06-28T11:44:41.787801Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53656e19fa3b6e76926b8dba267ca0b9","sha1":"273c4b7fba2a8b262d3efd612bb8ebd024735006","sha256":"88821bf085c751c68af056467c30b1c6e27947a07a820c474792f4255c832b8d","sha512":"53d332d1b29181f6f98dd6250ba0dc929246f4925faad0da5a104539298443213516fd3757f7d32c6e992b4a1a70265a90753739988369beeae5408d95f1098c","ssdeep":"192:LexxaD3S1gDbgFoiAjAF19fpvU2oRJ7EF5:LexxG3S1gDbgFbPF19fpvUxob","tlshash":"9b423d23386bf10f10d5477236e823e69cbade06c6ce540ab58cdeb9709ed973a185c5","size":12844,"data":"","first_seen":"2026-06-28T11:38:56.447764Z","last_seen":"2026-06-28T11:44:41.788489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6be6b1bc3164c58cb5f96aac370b9204","sha1":"f997896383fd0d589194ab57a8f9b299524405b1","sha256":"56a19277325928216a518ef25aeae915860d82ae69d5de185f1b2d37c5872d02","sha512":"d36e927a8de78b1d5915d5c957fbb0363a1c88bdad345111e2eb5c48edb18c691eb93464a8083df31c7cca582fd462ed3ed9d6fd1a1d17ffe5663e4bf7bcce57","ssdeep":"96:jr3pYSkPSJgWbzz74B414ezckc5aUtQ+zZc4lrWSkmhNiS3vftTr1fib:vV3OOTVUWgqkcb","tlshash":"aa126512b06be10f04d5c7b5324822e5d8b6cd06c6cf5109b69ddfea639eda73a042ce","size":9210,"data":"","first_seen":"2026-06-28T11:38:56.449179Z","last_seen":"2026-06-28T11:44:41.789Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52f18f56cb389f6b40392327e1bf7531","sha1":"3cc277a30e8b881d031588d3ec4ea88a607d34e6","sha256":"29ec42a771ecedab8d257d397d5a964271dc9a9b25ba7a389d2d31acf334f27f","sha512":"bcd699424c0c40992352dabd26df35a3e6d1320208a8c186e413c99de52aa33b5104eac011b6dbf63a5149d9e3db9f774a35830a41d94767de7a4a8644ed98c9","ssdeep":"384:svibwIqGZizHRDMO712Ii3abMH2aqIkcK+FxdU2XZ42hyWqay+9zrbin1FlLucvw:j3yWqay+9zrbIFlAHjoCb","tlshash":"80532226346ff10f01d5477136a823e6d8bace06c6ce550ab58ddee9b0ded973a082c5","size":62844,"data":"","first_seen":"2026-06-28T11:38:56.450601Z","last_seen":"2026-06-28T11:44:41.789552Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"570228fbf9308e0f89c1d19dd9bd3bdc","sha1":"d4d211a3d5ca9610687c5e9e354d94962ce92685","sha256":"e924c36700fc9dceefb65fb08780d850fa3f302555590570dd3f02686b19009b","sha512":"d0f21e924669fb948ebbd936fb3c2c080482aeb7d85c698bc14b1e198bd0bf7a67cfc1edd24575742e197707efaa164d0f8e5d3cccc9d5ecee20df3aecd284ea","ssdeep":"96:YslMxPNUPRS6S7bt3mFbm/3MlNB/PfAznmm00GQHzhiS:wxWpS6S7tq2IS","tlshash":"a1023423705be10f04d587b5364862e6c8b6cd46c6cf4109b69ddeee629edd73a082ce","size":8695,"data":"","first_seen":"2026-06-28T11:38:56.452383Z","last_seen":"2026-06-28T11:44:41.790005Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4eb569e2b348c5688ea38fffac922877","sha1":"fa250643c6aa98e878f636b3f700038e58e84192","sha256":"2370767cd7e28ffca39ff5b058623f0f55c298485c8d2d33527917af8e4f5c44","sha512":"8908d1ad5b7b0b1e1b6bf96a0235e7fb9492a95c5d62d1fc7b1ab3e1a288ba381b79e0d862137c7626a9673dfcf29a1fb7e9fc9c934a4f85cfe223067489d865","ssdeep":"96:HQaz3U/5xXszxd/WLw/VMneiPtFJhw4Jh:HQGU/5ZEz/WL8Srt5fJh","tlshash":"07622d26786ff10f10d5477136e823e798bbce06c6ce540ab5cddea9b09e9873a085c5","size":15479,"data":"","first_seen":"2026-06-28T11:38:56.454076Z","last_seen":"2026-06-28T11:44:41.790603Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad04ea3c5f37efc1434372bbcf373520","sha1":"114e9b590d0642a24178755f77739a7cba90a067","sha256":"aeb5cc928f85207662ac55204c136c901dd69c79ca04e0b611c6fb0e1f5dffaf","sha512":"94ad980661b333fb62f808926083c0b3ada4ab7f3026c0a05f9a3d6b994c9b7caee0b520b907a15fe142dd62e0adc5256bb2cf716a0fda9f42b71dbb98919af7","ssdeep":"384:tbhYGEbaktqK3pQm9E04A1gBYnVWpsyrGhf2GBB+19VsB:XUq2","tlshash":"5c923323356bf10f10d5477236e823e698bace46c6ce5509b58cdeb9b0dec973a086c5","size":20484,"data":"","first_seen":"2026-06-28T11:38:56.45542Z","last_seen":"2026-06-28T11:44:41.791084Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a66ff114802d4d1f9d6e5ff8f161434f","sha1":"5e04829839c5e15e30e8b6e3dc264ce1311cb9e1","sha256":"9b79e09c2ff10d5e5def71f8be307bf408ca5eb2a807d4e55784d9d292be465e","sha512":"9bacbded995e7017c3dcf6f7913e0ecc19099182f102fd3d63d2f04ea20417e4af2667207b172155fb2ee0f41686f947ede28d815db4ed575ffb2e57a799ee2c","ssdeep":"384:ZmW0IGsx2/MFZ9nK3X6NN22z2t7lGkFdgr2pdgTBsyDlGg80cnskA5+tDHGPT924:V64","tlshash":"6be21e22396ff10f00c5477236e823e698bace06c6ce550ab58ddeb970ded973a185c5","size":31459,"data":"","first_seen":"2026-06-28T11:38:56.456835Z","last_seen":"2026-06-28T11:44:41.791662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f83391a26c76f34995c3f3d7547b9c9d","sha1":"250cfa91079413cf6ba4262f3ce99c2082e3e2fc","sha256":"b0df544c6fc1f484579fabba9121b4f867eef219c5946cac82894b66d6162925","sha512":"054d6e14e0c38631f1ba6e8634334ce1b0d83d7390b18d4f050591c650993e97c0921e63ae55a139d62b665d2ecbdacb2480dc6e92fd010c9b1a79d36c1f9f9b","ssdeep":"","tlshash":"5001422330a7d24f05ea07b6364c61e498568d0ac69f520df588ecff609ead83b002ca","size":669,"data":"","first_seen":"2026-06-28T11:38:56.458612Z","last_seen":"2026-06-28T11:44:41.79249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62dd0d86c7330945c0ea9f79c035bb49","sha1":"01dd42d20d2d578e361564f278cab4c1217fd5ca","sha256":"cb039aeaae1acc9b8ea505d82531bd882372492eb8c795f47ed6aebaadead0f6","sha512":"c20ca37e31ecbacbde94bcae26a47a6a9fe1f323c57b16dfd34f72f3b06530755ebb5bb1a234831d4dfb6cb14f3e55cf18fed02ba42bd8cc18d2355e1daf8364","ssdeep":"","tlshash":"e6613c22b06bd10f04c5c6a9364861e5ccb5cd0ac68e514db69deeee725fee736042ce","size":3454,"data":"","first_seen":"2026-06-28T11:38:56.460031Z","last_seen":"2026-06-28T11:44:41.793049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbad5b5795f5f3b7c6c120b271a5dc11","sha1":"815373334a76f20b79235bd260af12905530f43f","sha256":"cc014d5ab4bad460fba26ef316d2e5615d9b7985247e106294d40e0da08fa413","sha512":"eba95da2c425c6c435d47fcd099710c0562c2d4ba6d1e7704bcbf43f1483a2264a87dca02b3be1c707ebfb356f4cd2f2c48dabbaf36a0729e611c8073fab246e","ssdeep":"48:TDsA805WBbzlSrV48LmnsUwAcmh+KNjqceLbjtgNjhSHBFPbL3vllSr10/WQ8u9+:LE6msUwAu8A5gYtkUQc4teS3iw","tlshash":"8dc1262634aff20f05d94771369823e6d8a6ce06c6ce610ab58deef970df99736081c5","size":6065,"data":"","first_seen":"2026-06-28T11:38:56.461261Z","last_seen":"2026-06-28T11:44:41.793625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db7464d90dd254b50402a26c23fccf62","sha1":"6d2cd78c301bdee4bc3a1b0985bc5933f1a56f99","sha256":"ae8b93a512bd6c0c42453c47834aca15c4f49ebcbd191f9567a8ad7ef489525b","sha512":"1f16701c34f7c13f662111c268ff4d811f1742a451a9ed2fcde340733fb47dad95c3fa1e4d1d96031e73c2718238007fcdf6cd4633c422f11de24c065abefdee","ssdeep":"","tlshash":"18814c23b06bd10f04d5c6a9324812e5ccb5cd46c68e4109b699efee639fdeb36042ce","size":3853,"data":"","first_seen":"2026-06-28T11:38:56.462654Z","last_seen":"2026-06-28T11:44:41.794185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"38f8a29364a136ffcbced8d8b827b924","sha1":"14c6319a1af3ba4f3a4a3fadbb6bddff546af6ac","sha256":"759af696a4ac8a9a8ed3ed7f1ec2fb2185866b29888ba38af704ab87b646a732","sha512":"3930cd3d9d6ece9ca9498ab6b4c32b2dfdddb0f554a64ad962e5a9105cb2ebd34b9192d50f525945036d88a59fc4fe053996a9db57be9f6b52ac849423f2d6a2","ssdeep":"","tlshash":"8b6135582bf06ac903d767b7232fb6cbe6258cd22cc8475bc120f897aea5e15c2d1534","size":3242,"data":"","first_seen":"2026-05-02T19:14:25.307136Z","last_seen":"2026-06-28T11:44:41.794725Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/input.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aaf31f171084c6c1572e22b13367d94","sha1":"eea04650623d044bd8f371c888e2b96a5f5dd14f","sha256":"d7b577780926a711aaf34ed78f738686ef654f561970ac7d809ec609845ab557","sha512":"b1a9fdf1a10361386c9540eefb1b5f0932c57a9f08777f273f1378d259c8c82c460cd93b515f59c78f0e402b83342afefe95e762b5aaa11937146861ac90497a","ssdeep":"192:N+Tc9s5bxqV79kJqzhlK/k6C20fY06IirXXYcnrpztBxt8uJ0D0AFT45JNbqXK37:NX9sE+qz7K/kvF/aYypT83p45JNbqXuB","tlshash":"3e221771a3e934c456bd8511fbb6e4348351687f01a0949b82afed9d3e0a45f92c9c3f","size":10298,"data":"","first_seen":"2026-06-28T11:38:56.405128Z","last_seen":"2026-06-28T11:44:41.759425Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/input.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca1545d71301b2280f880b0016580484","sha1":"65d5bfdc6c090b82b4f6e95602b4c80647ec4ece","sha256":"a43bbe1d2dbca15e5e2f7ab77388f7b89c98fd7b8ffa7f4537ff0774d5f90cab","sha512":"6b796102e2d7d51d0d94611c533d5c7f74b04bfccc3e8c0604a10c23f1ca5f811dd71a8fb6910c9784fc85c0f7e07b2770e1aeef1763ab284caaf758ecd36315","ssdeep":"","tlshash":"c1514686f7d1a9c413b203b7322656e1f478e88b5d4c548ab142f594bda4132cf63f36","size":3114,"data":"","first_seen":"2026-06-28T11:38:56.473716Z","last_seen":"2026-06-28T11:44:41.795208Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1215c41c1bdfa4d19734d45ae701d8b5","sha1":"13672366f87f4fec22a5698c338d4b4373b704e7","sha256":"ee14f9ade8f162d400ea227d10ccebe297a8134ae96d9e3b667f95ae8533df3f","sha512":"1c62662e9a5ede57474ea573df6fcfa66c3a5fc60756ca7894797b6c6560526c34cc6194a88ef7fec3d344eb843ad5c4e42ac7cf546fe460af58fc14eff6ead6","ssdeep":"96:E+p5DVIWeixdZvmA1gTEcun9TzXRRJ4q6YarNIrVwz:NVUiXZVWTEldzX3XaurVwz","tlshash":"968151092af021a4437b5be2763f45c1fc7e09577f8a0c4fa110f9903ba56e1db82935","size":4115,"data":"","first_seen":"2026-06-28T11:38:56.487208Z","last_seen":"2026-06-28T11:44:41.795681Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d69d9f12eddf2921e205e881a22867f","sha1":"3e6afcd3aa844120a9627676a6c51ac173beee1a","sha256":"201be415ddf42c1b9b72f3288765c0606439e86ff1d0752906408a8058ca2f30","sha512":"00726e234417f22375ab2c2514a2e33cc7e0bba11b7874b038dac84dcb622fc34da44b464bdb124847e384ab0c95590a487d5478d83babf2c5ec07e4bd83b554","ssdeep":"","tlshash":"5421cdbbb3e93d7946fb977374192849f063245e54018522e131faf65ae400cc9f2ab9","size":1232,"data":"","first_seen":"2026-06-28T11:38:56.47487Z","last_seen":"2026-06-28T11:44:41.796738Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/tab.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da451d757b4d733e52d8f60e2f854be1","sha1":"7e5cbafd9b452f8ba47fd77f319d33da5556e857","sha256":"6358f432bce6efbfb7c48436e36645f20386b19760e6367b63eac8b001e8522f","sha512":"703c222b2d5eeb6b77b072832832033cbac22206428adbf448ca87de38ecd92714edd80a618af9cd4e30cfc95027fd35f90fd02955515bb1d87e1ad13a2c1426","ssdeep":"192:bKRnOy+IkD9I1ILUsf33bXzdhGojFijTFBIg:bKRnOy+IkD90Ih3bDOEijTFBIg","tlshash":"b9e21d227c7bf10f10d51771329823fb88f69b45c6ce0a06768c9ea972ed89f266c5c5","size":31848,"data":"","first_seen":"2026-06-28T11:38:56.364568Z","last_seen":"2026-06-28T11:44:41.775878Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/image.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08d87376f8db5f29cb951bfda5067fd3","sha1":"762ecd7fa2e3ee53924fcd88ef80116862ab318d","sha256":"293f0582f63993b66dec15c6b8b8d3fcc207ef59ac124bea0daf1df9939a65ff","sha512":"99765e4ebff7522544929f8a5e5114603a15b5773b768f90954eba3423a710ab5ccf9adb58dc2d97e140002957d8f015b9a9b793d64017b06273d65fbc1fce74","ssdeep":"384:NKdbhXnjOnpJgsyRRu65/yXjbkNFdV9viFzCRQmM7HPCh2kBfSE:IZNRncXyFd3iFzvJ7HPO2kBfSE","tlshash":"7472c77557d13dc91e3ce18a7eb6897c0303a51319a699db92a27e9c3a1c87c34c0cb7","size":16026,"data":"","first_seen":"2026-06-28T11:38:56.416323Z","last_seen":"2026-06-28T11:44:41.776468Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/image.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e438d6ef1f19b4e598e9973b8e460399","sha1":"173ceebba7e50d9d3499b3d64edfda8340ae5695","sha256":"d92dce8d90b6cddcd959fb2446625dc7652cf47dcaf32ed631ebe1beebcdc695","sha512":"192ad86d3fab6f94baaf8d36da1b6eaec4a01d603bce1dac8004703e8a7cf3d8a776557f0f1e47d4a700458146dc10d2e212285d3f1dac553bd16d069759f320","ssdeep":"","tlshash":"f231edcab65138b60cfb61b5d6f7678afc7a80034802a204bd7c48811fb4d564227ee8","size":1876,"data":"","first_seen":"2026-06-28T11:38:56.486028Z","last_seen":"2026-06-28T11:44:41.797411Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-06-28T18:26:11.111412Z","times_seen":318129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d0e3485e5146a1dff1f4da691b5fedb2","sha1":"f84d5c9762e2373cd31ece0066058ca9f607aca7","sha256":"e15f410f3ec14df1a666640e1d76c429328fd6dc3f2487b3bfbef9a557efda8c","sha512":"e58c04e84a0475409750979336a6f42601bb1639c510f593855aaacddc88a0c71ad7b7c9caf2c6e7438ad00c06458d2d8944030d0c9bd6cc99b58a4bf7ced4ab","ssdeep":"192:HLXDNf9Vwz3F7w5QH4xoAZgslp96C0N4Kf0fahe++oGt3T:HLDNf9Vwz3Nw5QHkoAZgslp96C0NPf0p","tlshash":"e6d19e8632d0e60b7bce0da3ed26aad5c5728d2fb841740bc71cb98c14d639be2e4574","size":6388,"data":"","first_seen":"2026-06-28T11:38:56.477521Z","last_seen":"2026-06-28T11:44:41.798691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/ui.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c952ce1e3eab48fe4c8dc2b4229cdf","sha1":"b865aa0226f6e837edb6936f1b523257047591e0","sha256":"6c318d7b5098bad6860a3b33fce90dd3e99cbc7ae5987db819ff28534cba386c","sha512":"18037ad887b2cf96ae4d74d2bc339538d6f8750dcbca0fa0ec795893b60b2ede006cc3a30cd6f1d6aca134ef49c41fa391122fae6106ac798f24b2f979797b1b","ssdeep":"384:L20v6Mwk8WdSp4eK9YIM0HYVZ+Pp+fdvwJRmZ4ihxNZVYPPx0XLXJTX2Q:L20v6M9CSM7XOMxNZMPx0XLXJTmQ","tlshash":"55a28632cb833bc68aa53760bb71eaea1111949314604ac7a2551ecd2f1a9cf07d5ef7","size":21545,"data":"","first_seen":"2026-06-28T11:38:56.438409Z","last_seen":"2026-06-28T11:44:41.783729Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/ui.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/meadow.js?v=202606151900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d8c90ee0be01197e899ad6cc037a1f3","sha1":"230cb9538bb30a3c8c06ba50985492ae581193b3","sha256":"1798d3923494a1b6ea65872c674df2da47cfc92aa501344d8b2f66b89eec710e","sha512":"86856d3973ecab7e8a104600e1ee895cb8e4345e876c3a79b79d475460f9044ee64470cfc5b053cd8088c83ee6b0240a8a1134aafbea20d51b211304f0273e83","ssdeep":"384:c3FHf8T5UZO0e33d+EMK6vmv7eud6HkHlw6:cKcO","tlshash":"c952022634afe10f10d94b71369823e6d8b6ce06c6ce510ab59deef970df99736082c5","size":14488,"data":"","first_seen":"2026-06-28T11:38:56.350596Z","last_seen":"2026-06-28T11:44:41.766217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9e98e5ac7e88b4388c60f2c20341130b","sha1":"70da463a2982f65f41d6f2054db1dc3e1cdb5509","sha256":"ba71c00a816d334a30e4bd518dea47f6af105f700c629d6c75119fa9a85a876b","sha512":"6cef996ee71f83fb4221b3e4425187d2101f3ddb05a5bdb21ffa11c77b10fe2d5bb35a3a8b343192c586f46bcf52afb2d144c1ea3b0c0c5559d8c2eade35018b","ssdeep":"","tlshash":"785131552fa09465239a67732a3b30cef66d8046fed9184fc314f5c73a98239de85e30","size":3095,"data":"","first_seen":"2026-06-28T11:38:56.47878Z","last_seen":"2026-06-28T11:44:41.799348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da3900caca6a3085a24aa0dcd1918aa7","sha1":"d1daeb6ed1cd033932f4d536b148a4bfedbf0a68","sha256":"208100801e54e6896999c144f38440813aab425d8754ec4e7843d4c2dadbc6fd","sha512":"ab28d477636436af01e919bcf8474eb7e379ea0802b764136b0a037f37be1cd0f19f5ce8a46a517874549d62e23e63001d29b5983ea22ea8efc100a391aa02a3","ssdeep":"","tlshash":"e201269f31502a7222f3f56573bf9e80bd360803564267353aecc9881f35988556bede","size":798,"data":"","first_seen":"2026-06-28T11:38:56.476207Z","last_seen":"2026-06-28T11:44:41.800037Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"82e0414c888588990acbde5cf040c7c2","sha1":"4b39d962b0f696bf39d5ba9adafd07f7239da040","sha256":"74235baa6cde5edfb7a5cc541822e01d58359466e9486043d2f56cf370af81b6","sha512":"84385aae66f7769e938a103f158ed8c857a706a9c01508cbd03d8e18790d5796df3fda6950def871e44a407bb3b1a57d7836961f94c09891ab734964fee7bba3","ssdeep":"768:QlYpPx5UErXKDJfHTu6ea7g+eo0j8Z6HPw5VwDr9naaNPuYZfNVkP8xqY9XPkWCI:QlW6Ddz/ea6mQ+2NRzeWp9K8Dg12v","tlshash":"6a733d11d3c0695419cb9fb2f30ffee4ec5d8aa9b658484fd4816ff0aea5602e690d70","size":75720,"data":"","first_seen":"2026-05-02T19:14:25.305511Z","last_seen":"2026-06-28T11:44:41.800776Z","times_seen":13,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/home","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f7d14eeb9ecc60682797515c767589d","sha1":"84e4df741e164b4001dc5b62217b934a5855c9e1","sha256":"456140dafd10ce513bbcdee456fdafc785d7f99332db6722edaa34a926c8e51b","sha512":"99f71ee350b1ca376b11793f486ff47c6ef4a7b838b31989e6d8977d3f17d7b473790bc29aa701581fce93c0ebd450007002c5dbcf77936b70b48aee303d48cc","ssdeep":"","tlshash":"f35164b1773c2ffe8697abf3661910aeb13a1c5924009842d11bbbd62f35540c8576f8","size":3111,"data":"","first_seen":"2026-06-28T11:38:56.465818Z","last_seen":"2026-06-28T11:44:41.801394Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2a3d2dc76a842940a9be3dd9f8322faa","sha1":"cbc6686174f4a7677c721535c3577ae5e6c642e2","sha256":"13569c4ac1d932bf6378b2361cd1af3f8ff7d7025cdaa4c1154ceed7fb11d23d","sha512":"893d132a8074b1006dc6e7cfe6c8f9a3939217625dc0aceaebee81f870f4381919bbe0342a26a8c9cd8a04da683d4ebf95fa8889fb3fc35a68fda039c20d6e11","ssdeep":"96:MM1fhcWe/gFeVYhn0kqdJ2Fy6ffYFWs2/t2dDietd4tjNNRE:MMBhcWWgIqwyC07mdwj9E","tlshash":"0e91414b2106217b8972337a877e9918faba41731a01db51bc8cd5146fb0e5983bafcc","size":4494,"data":"","first_seen":"2026-06-28T11:38:56.488488Z","last_seen":"2026-06-28T11:44:41.802414Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f0ba6ef9cdc452baac570242103f497f","sha1":"4d2b33b8f5d8abc0c6cd57e8ceb02f39bd266dd5","sha256":"705460561277f345ae6299ef11530556ff235c13629535770f46b07fb8138b6c","sha512":"6a7730f8712fa4fa7e80e5f3c33fa7991087b46361c32089e599b5b17f7e89cf8835413cc336c7010dd77b43941e186377413b7be832ab8aa914f4744c58637b","ssdeep":"","tlshash":"e65114047f247e84136787eb9b3a74c5ec4dac0a1f50484bd175fd986f88611c6ea639","size":2587,"data":"","first_seen":"2026-06-28T11:38:56.472423Z","last_seen":"2026-06-28T11:44:41.805405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b7ff0d4619739a90c934c16d85c4493f","sha1":"405052c772498c81a621afb7a46111c0278f64ea","sha256":"bb5bf8064b119532b5ddd669acb027b9986709f56fb6f87096f580aa632b4457","sha512":"8ef73b3fb460a6ed066e22c027e8deabecc924000cbd948a8dcdb78cb687a3acb7f14b2566a541afa3dbcb4eea7c5e132d070bc3eb3d88804a167d9585b1af3d","ssdeep":"","tlshash":"a331d1573d8904326abe2137a7bdd78836b990541e82eb90bda5d12a6cf0e00443ffdd","size":1768,"data":"","first_seen":"2026-06-28T11:38:56.468381Z","last_seen":"2026-06-28T11:44:41.806034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d90a5725d89cf222e4e26164c2c09e02","sha1":"ba28ae035c23308a1538db3ffce473d2790af31e","sha256":"24b87725949d5f2c5705dc63e565f064a3b994f66ad1f08de63b61fcda2bf1bc","sha512":"74de49254e323720f81005c147b6a7954da82fa1a805961b35294eda91d541b5cc00ff26edd5082aafe301b4b7f5040934bf281234a10cbc20d973ddf048d135","ssdeep":"192:rDlfc+4hUyLhNOFN8N3OKN8cqCB8mD1AGdecCRw/T2Td:Pxc+4eyL86HFHA","tlshash":"5bd1301466c025462bd60efb3b3770c1d93b28bb6cde4d099614f9ccbb20263e9c95b9","size":6439,"data":"","first_seen":"2026-05-02T19:14:25.33251Z","last_seen":"2026-06-28T11:44:41.806639Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b29700b899460aedd69db586bb961ac0","sha1":"dd0e7147d385b1a341a590a26f71a0afcc505f92","sha256":"672275983fee61bae72c95bc0c640dbb2679c1161404d0aae850f8ced93145f4","sha512":"5a7e035e9f36b0075e7ea21f4f6d43ea54c55b2c07a35ec58b57f341447a99b65b772585360c042312746d1ce0cbe74613295cfe8c7eb670fa15063a59f74268","ssdeep":"","tlshash":"76513226b6b479bb87f79b73731a1440f13a146e38444022e0a2f7a31fe1244c986ef7","size":2916,"data":"","first_seen":"2026-06-28T11:38:56.484728Z","last_seen":"2026-06-28T11:44:41.807277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/velvet.js?v=202606151900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"262d5e95fac692b7eef5e756f519c976","sha1":"ef962d81463f8c2b995a28b0e0eae2364e215412","sha256":"ffa684316a6141e1bca3056e299019b7db28a2dd879c7d4581995c61cfff7340","sha512":"8d22613c5c5d72014f718326e9496cd94c476078f8536e5b31a2f684f63a9856850af051c5ebac3639b3e266113d8e6d2216f5111333bc1963fdae34c3910624","ssdeep":"384:+g3dfHXq/35/eqmT9P7T/9MxceAz7acPLf:+Dq","tlshash":"6c622627346bf10f10d947b1369823e698a6cd06c6cf510ab59deded70df9973a082ca","size":15463,"data":"","first_seen":"2026-06-28T11:38:56.37647Z","last_seen":"2026-06-28T11:44:41.773736Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"64dc290c7ef3535d6a1064a2759f4415","sha1":"f575bd84c5c8f8b93662480462204f7fae678000","sha256":"ec569770c980eee632c4e370ddf604547a4f537dfc49facb44b63e50a93084de","sha512":"fb95e3cb72e9f0faf42ca34702c20fb1bdb748cdb676294dac63e58b33d4a9ad30aba139c523030b812e99edecfc75ba12fa2423e7744a1ba8047e61cf53d8e1","ssdeep":"","tlshash":"ed6120087be03458679b1bb2773aa4c9f0bfd5ab4c954847c152fd942d94354c9c2e36","size":3378,"data":"","first_seen":"2026-06-28T11:38:56.46704Z","last_seen":"2026-06-28T11:44:41.807862Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"61d1b4e7e55435f9b60e0718842c5b41","sha1":"73c94910e9258cf34e95bc7dc420e015747a9df6","sha256":"85bd8eb6a1e6adff703e01ff67a3df61c7de7d37a33c32e4114a2ce9c23ce11b","sha512":"35d4b4876a7cc2196392e779b8b73aaca4c76126c06b1470f74e8d03a7409ff8a0c47c2fe1eff7fb1cd2d74890601da92e6afc4f7ae84781b57f6ea0fa4c1503","ssdeep":"384:JF10OB3kdwEN2FJ16kZUlBpdZE021sDH7YKyLToaL53rAIyeCrT8EbJe/ror:v10OB3kdwEN2FJ16kibXZEqHcQd","tlshash":"1c42fb11aff0659933df63bb723695eaf1511c0fb68004b98248f8746ab1a14dff1ab1","size":12587,"data":"","first_seen":"2026-06-28T11:38:56.492668Z","last_seen":"2026-06-28T11:44:41.808459Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb93e77dcbf61a2495cb058972d5066e","sha1":"7506a8e066cbb563ce20fbcb13760930a1fb1995","sha256":"2ae1347309df1385350f72270f6a1fcdfbbdfa886faf270969d41d08cb2e9e3e","sha512":"532c24161df4ef0f336fd0015c02d747ca0b9cb7b388c83c88269699f043a6c6afb7aaaddda736fffa0e29166eb32dc2065c086f9f46ec323724d6df3a05e709","ssdeep":"192:IEraqR6OFnyI6/qrT0w1fl38wBz/8a80vDoOzZ893jiBI4zYExtWwBWC5F4yEwqJ:nrFR7Fng/A0w1fl39x/nNlN8n2KwBWCo","tlshash":"37227252a7c06c401be39fb4ba1f7bc6e54948ae3a55088bda09bff46ef1610c6c5d70","size":10765,"data":"","first_seen":"2026-06-28T11:38:56.480023Z","last_seen":"2026-06-28T11:44:41.80901Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/nav.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a03ac13821d301b6b19c2183505c8a19","sha1":"b6f211f1b6ea4432083ac247a10a69c9f49ad448","sha256":"d2f97aab298edc1b2cf9051b4e56d2de40a6771149149b240535369e5b6b4328","sha512":"700f54a4b99f7b3cfe204d93f6c25ec54ccb413ab61a8bb0774f825a9eedbd712ee11f6e2db6c09bd1d1776e71ae93674a93a713db0af509cd391a2382318953","ssdeep":"384:cde6YjtRVOXmsporhW0egsjOXshbQfBbBNMGRZN1LJicVrQtJkejqT6pawXEm5mq:4YjYWzJp4TWDMF","tlshash":"ae042c22786ff10f01d6477136e823e798bade45c6ce5509b58cdea9b0dec873a086c5","size":180920,"data":"","first_seen":"2026-06-28T11:38:56.331288Z","last_seen":"2026-06-28T11:44:41.778626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/theme.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81622384c69d1aeef09c0f0716f883d9","sha1":"0a11ebf22a5d571d96cce57bfcb655b9629d10f2","sha256":"0075700f4ccfa2234459a6560dba2771246fe9ce9ab585839110d5ff97fa80b0","sha512":"555631a17d6a948b0630b26a5608c1c5417be4a8be30e3d9d73628203e34ae1598ae8e9efc903c5ec1773da6e257ca69828e7793f93a138040aba260af802c8b","ssdeep":"1536:MODR70Kr3YZp+CMOgWdO44mIDtB924/4KAsq5kckDzu2V4ioh4EB:JBN++Mdi9dOsqKu26mEB","tlshash":"bea3b77957ed3dc52928d54afbb58a380353aa010b92e6e315763dd8be0d4be34c0ca7","size":102688,"data":"","first_seen":"2026-06-28T11:38:56.36687Z","last_seen":"2026-06-28T11:44:41.776995Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/layout.js?v=202606091900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"643e5354d8c1b7accc8ea5d1f7d70873","sha1":"8a6dc68c0b3911f63149482a962d68d8afb9936a","sha256":"a2f10c04f5d921f9a9d858f38c8ece0d3ab046f8d66757e7e0dabf3fb9a94a31","sha512":"b9d3f33ac55d660810b59d7a923d1c6a3fbbb2619e57da92f696a457b42207c95ab9ddd6832526852ed5e445b3c7d8a98cbf8dca3aa4c08cf0281923508fe815","ssdeep":"192:O0NmSLx4qxgByNuoUB2dixhbip1YkQzT+qYo8a0vfIJhhwCmTbpVM:O0NmS+y22dixhup15Lho8aXn","tlshash":"48220a3176a43dc4166f521ab7faa4adf2364c09b2014c9fd01afdec3e50525c946cbb","size":9955,"data":"","first_seen":"2026-06-28T11:38:56.355219Z","last_seen":"2026-06-28T11:44:41.753618Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ab43c6354784a66b1ae8e42988d2ceea","sha1":"49707377a6e285b873e3751f489b7318dcc88ca9","sha256":"60e428cff9c675bb44b43841f219cdf1da7abffbd57362a134cafaa5a001b6d4","sha512":"015e12733bb16449164d91a5730899453b5dce08e023157fa99d6e5eb3c03eeac4cfabe6dfbdd81e8cc5bd1fb12db24c2c1e9fb8720304cc015366476e78bd15","ssdeep":"","tlshash":"4351311337e9659243de07fa156972c7e66bae9a2c4c0843c250bb907d10e50cff9eb0","size":2903,"data":"","first_seen":"2026-06-28T11:38:56.471153Z","last_seen":"2026-06-28T11:44:41.809615Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"37cdbe76bedbdaac0fbd42ce61678599","sha1":"38608194ee19af98da50a080282c8fb2615270e7","sha256":"e905fcc675e485f8f8e23131d65141fc4dc8658613b44cc866b2b1cb3397bcab","sha512":"89d82e1cd98b714c286ea1b7dbe4949b4e22b291cd9d463f728fba30007a64d7b2f8640507175f00f8937dbc61465b0443ab5755df82244391df2ddee44d3eaa","ssdeep":"","tlshash":"4bc08c3b7e2e243007be8072261eaf501a2e1a7309d0449692a4a8bd0df112907eadad","size":152,"data":"","first_seen":"2026-06-28T11:38:56.48344Z","last_seen":"2026-06-28T11:44:41.81024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6a62de793bffbcd368d4ddde8ba32bde","sha1":"980cf08bfb5569a8be21404286047db332c09bcc","sha256":"98606bad5a464f462fecc3f4f3b41c03119d649178e8f1e0cd9615dfcdfdf807","sha512":"41a5d5d6a1cd793e828e4b56f70703d01c78bbdf636c75ce1fac7ef386ebf641b16d23b1904853317a9c86cff266c770eea9f6940bb633e7575b190e1fa6a4be","ssdeep":"","tlshash":"8b014c5e715122a28af7a67dd2bf9ac8bd3b149348428221799cc4062fb1980613becd","size":715,"data":"","first_seen":"2026-06-28T11:38:56.494196Z","last_seen":"2026-06-28T11:44:41.810808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98cd75a99ad0529a51afa2cb0fae2c6a","sha1":"5b705d5d2a56478cddfce508c6aed6bb9b4967f2","sha256":"86cd025c4c917f31db2b086196b6343ae2ea6d72474ede21464278238909e0bb","sha512":"5075dc525efc3e8d3af148420f4a5cc2fc43decfdc8834d89ea895b2907db864adf67a0745ebd497407a2e9bb2271a4b8a79740babc80e8286afc195aa2f0b29","ssdeep":"768:E6RelJV9XBL90U358miAs7SyZS1nNPjpcgcIUXmv9E0j43catoqBp+MtA7fiAWo3:TU3/dT9grR9bubVTp","tlshash":"b6f27f1471c1a1a013935b7667aff8c1d67f08e87488021bd239ece47a62a07f9f7938","size":36219,"data":"","first_seen":"2026-06-28T11:38:56.495434Z","last_seen":"2026-06-28T11:44:41.811451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/harbor.js?v=202606151900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4505d580bb3a1246b57ed354d861af6","sha1":"2ffce25dd1da589e81918840461ffe59ad8a211f","sha256":"064083260a6260cf21d55613dfb276be24d9c0b98e48a35a4c5f02447507074b","sha512":"a856d41bed96522f8b8fd6ad5898e81c95587476c0d37588e2952f7f7f475491c8ff4b73eddc255b0e04e2b3fefe9b456a185cd88c2af0c3c6cc534aae799913","ssdeep":"192:pDUwpwh1vxHH8GBspQ1xU/cFeevjZgqjiWB0U/he6bue3W4lziwPhOA:lq1vxHH8GRx5FRe8iWOcqe39zvPd","tlshash":"09523726346be20f01da47b1369823e6d8e68d06c6ce610ab59dedfa70df9d7360c1c5","size":14188,"data":"","first_seen":"2026-06-28T11:38:56.36906Z","last_seen":"2026-06-28T11:44:41.777561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/sidebar-tags.js?v14","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e63ce2aff8d11d13d8538acf37a748d","sha1":"884968418c03db8ae20557af4e4051ca3b0c6631","sha256":"dd2f1927922120d5989d32b9b19b120bbef60c03d22ed1c8ad8aca79d990d7d2","sha512":"1aa82b65164dd90b6f02f89b35e6c63c296dae36f676f9cd522d3b03a5b82c79890379afc35745f1f277cc6067ad17bdade342908f66cfa9a270d0756d801087","ssdeep":"96:Z7z41TwUSSXnhfgZzNz4mZzDWO52h4zv5le4iVi4Ka674/Mh4Fvm4UpzqP42UgFB:15hMJB2wUEaxXhu","tlshash":"3ea25422b06be10f04d5c7b9354816d5ccb6dd46c68e4109b69cefea639ede73a042ce","size":22144,"data":"","first_seen":"2026-06-28T11:38:56.418551Z","last_seen":"2026-06-28T11:44:41.778165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b526ca1e850ae476df472cfdace56786","sha1":"12964c7cd977d18bd6b96a8e08fa4f591c197bac","sha256":"e4b5971d89c4b7a4c4a5c3dfbda5428776a8ec819fb28c8d583f2329e6f26e94","sha512":"aaba2c2046ed14cb8d41dd8205a98c733f42cf6a13656d3d7865d65aa10e67302549cfa434a7c01faf5faea24f58525c8bbd8a0d5160300c0857945eb07585a9","ssdeep":"","tlshash":"1b21ba4de9e221b0d4fba314c3aea38bd27a02e3140bc919f91dc9981fb45b0456de8d","size":1169,"data":"","first_seen":"2026-06-28T11:38:56.489723Z","last_seen":"2026-06-28T11:44:41.811931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b969a37b74eb122e48e160bd9a755590","sha1":"39c4875107635cc7947345a0d7d9409e0bb93fd2","sha256":"3042bf583b4b7a977a77df1cb480deb255a3a521dc758a4ebfaa2343ce6d90c4","sha512":"a54a04d16b6e52aa9867908c6127f6573e6b748c540cd6c98c85a9ee5e2b792889ecc1fe8ec1351d357c7b55712153d59b81d5cc03dcb6668689fd91905adc66","ssdeep":"","tlshash":"8601b11af272d178057392b596eb5b5cb534400f5a0013473534455daeedc462812cdd","size":775,"data":"","first_seen":"2026-06-28T11:38:56.463902Z","last_seen":"2026-06-28T11:44:41.812607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6d34ac9d936212ffe1cba8a894a3685c","sha1":"68ff735f8d18216052334988a85091ae491367b0","sha256":"e04389bf69b33b15157286cb1b3d6ad113378a19344f9f5fc375d99bafb4df6b","sha512":"29c94a1c395cbf4ad09bea99c28836800a3ce6c5dcda833a3b8faf96a9d7fdbff3d28c1812d3ad49c6238f6cdc7343325840eea5ce9c4824e2df1526328b3f26","ssdeep":"96:eZN3mAqMobBu3YnKurZ/QJcIGRKGx1dt4VdMimKziLfyvZHEI2G2RkoTQfq4Gf8u:eZNNjcBuWzrZ/QJcDZimKziLWiZsmSod","tlshash":"cad165463ec02c0933d72bab6b1f20d6f13a4c65ab410fded611f0356984d86ef91675","size":6310,"data":"","first_seen":"2026-06-28T11:38:56.490989Z","last_seen":"2026-06-28T11:44:41.813217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lxlis.cfd/d/UD0TDUckv3Nji-t9NHOr-Del12yQAfQfv64yPdX5YDZ1fAWNJGNFkBEYSqix2DnGauXQC4oALIZsUAok2IQkBU6PAU5E5j2teVoNqDjbHs9MbQ.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.108Z","timestamp":1782646977108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/UD0TDUckv3Nji-t9NHOr-Del12yQAfQfv64yPdX5YDZ1fAWNJGNFkBEYSqix2DnGauXQC4oALIZsUAok2IQkBU6PAU5E5j2teVoNqDjbHs9MbQ.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: dbb77c2af53da6e7\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJLwOoLZyukE2WsPMeJNvtnO4KFefBMwgzPuVUQpZduiD0GTP5GZ5uehdVsYahPLNubrYP3CIkZ7DXh%2BTwGkjLXbQtZxpNoUXGdB8B%2BZNCF%2F4N%2Bn6eZtPFddOso%3D\"}]}\r\ncontent-length: 4688\r\ncf-ray: a12c6e56ee0b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4688,"size_decoded":5392,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dbb77c2af53da6e706a6777ebc5d58e2","sha1":"2d640d426b7ab09b130375398caa4c96b02b4e81","sha256":"390242ac63d2fd40e122e1a541714186c0a7ffb1d99adabf39b23cca228b9329","sha512":"f5a5c4401c62a2e9879f98f270938f846382c5be10f52ad07ef927030d072cfd6d089f07a641ae20d8debf34e108477a8ed7dea2205f11147d0e587e8daf47c8","ssdeep":"96:CeIXteRs5CXm5ZK0adK6eCNaV4klTvItZYUYwnPE/KqYHdQ+jf5ZYXlrE:ClXteS5CXm5UdEvV1Ubvq0dQkfYBE","tlshash":"87a18d4b877d412e9d7141aecaefe2a8f81c11ea03aa7c3030df1ca5ab09682033449c","first_seen":"2026-06-28T11:38:56.359839Z","last_seen":"2026-06-28T11:44:41.752974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/layout.js?v=202606091900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.428Z","timestamp":1782646977428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/layout.js?v=202606091900 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:19:00 GMT\r\netag: W/\"26e6-19f05cce016\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N0GV5XOqyvmU9nPcpFijeqTYMVwtcl%2F%2B8Idf%2ByQQ0xQ7wxR%2FPqg3%2BQLpd9WK7GfkRzuk%2FsxOzsxD9msuN7GL33tuH9i0Nj7o3P9lb3UAssfHtVgmJSmjf2JpstQ%3D\"}]}\r\ncf-ray: a12c6e58ee378deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9958,"size_decoded":5203,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6015)","md5":"643e5354d8c1b7accc8ea5d1f7d70873","sha1":"8a6dc68c0b3911f63149482a962d68d8afb9936a","sha256":"a2f10c04f5d921f9a9d858f38c8ece0d3ab046f8d66757e7e0dabf3fb9a94a31","sha512":"b9d3f33ac55d660810b59d7a923d1c6a3fbbb2619e57da92f696a457b42207c95ab9ddd6832526852ed5e445b3c7d8a98cbf8dca3aa4c08cf0281923508fe815","ssdeep":"192:O0NmSLx4qxgByNuoUB2dixhbip1YkQzT+qYo8a0vfIJhhwCmTbpVM:O0NmS+y22dixhup15Lho8aXn","tlshash":"48220a3176a43dc4166f521ab7faa4adf2364c09b2014c9fd01afdec3e50525c946cbb","first_seen":"2026-06-28T11:38:56.355219Z","last_seen":"2026-06-28T11:44:41.753618Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/uNgQLc7aZu2gqWdj9m7pcVXw1-hOLYNjN9IVblveRQOs_I7SoLAtD-doyF1tZ3jQh4nGkcr3F8Ztir8eN5ly22mdF7XgueMTjTekaO2GE2UOVw.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.580Z","timestamp":1782646977580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/uNgQLc7aZu2gqWdj9m7pcVXw1-hOLYNjN9IVblveRQOs_I7SoLAtD-doyF1tZ3jQh4nGkcr3F8Ztir8eN5ly22mdF7XgueMTjTekaO2GE2UOVw.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 03767893c55b2cf7\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSr4MJLMALHx4t09jy3bJStcZz9YajToY8Y6MDQZVHsHIzv9NWgwnFcbSnL4G3gwZykDNSqwhFkPyP3QsGM93Uw4xt00AsOGpBYvZPtSC78NKcLdSzGZkEhoBdA%3D\"}]}\r\ncontent-length: 1566\r\ncf-ray: a12c6e59ee5f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1566,"size_decoded":2262,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"03767893c55b2cf7c533e994dfcd5b76","sha1":"fb6ad570e98e5b0ceafd8673a7751b3e4ad7022f","sha256":"772bb9d122b152dbe4286afd71f09a5b7cb029949e5a6c8ad7e7ee4f4aa6f917","sha512":"ba00ef1cbd24246886efc78e56132df6bca2929b84af28fc152181b150557b49bdf6c54999879cf1b948cf98a6c630a95a518155a7eff3d40d252fd117fac956","ssdeep":"","tlshash":"9431ba5d8b36a3b38632757d323710fc1b5504730518514e335a38df666685bc1649bb","first_seen":"2026-06-28T11:38:56.430178Z","last_seen":"2026-06-28T11:44:41.75487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/9PL5B_wgcy-pGhk4Emjkz5cPToov3nCDMLFvgN3-FEn8XMq3oD8a5b2h-4CQwOc7dk0ZxV7WWBSIz772XLxnW23Ru82o2NIbFTtEuFIRNktqTg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.587Z","timestamp":1782646977587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/9PL5B_wgcy-pGhk4Emjkz5cPToov3nCDMLFvgN3-FEn8XMq3oD8a5b2h-4CQwOc7dk0ZxV7WWBSIz772XLxnW23Ru82o2NIbFTtEuFIRNktqTg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 07fd3aee6038e1cd\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gsykPYrpQAmWr%2FVO89i%2FfR1GXv0F0llJJl46dX050lLxkx9gnCPyYeb6k28a0ft8VuRJ20I2AcP6ZmAWapzDE1GFSQ6cldxfNd8P8WdQgt4uJxhY1oBLfewYTw%3D\"}]}\r\ncontent-length: 10390\r\ncf-ray: a12c6e59ee698deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10390,"size_decoded":11091,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07fd3aee6038e1cd344b8cb538c16b3c","sha1":"97d93e34d76c0138a4e3facc00ad06190db5bf91","sha256":"74d346649b7c3b65291998f260e043183eb5b509c7cdc2c4a3bc0cd0a83f84df","sha512":"e85dac4894e5b006ef1434d7080c2d0a559ff043f20621cfb794fc9ee7fd135d4b706f1eddb2c83f68e2da278932c7099524a3b4786df735b4d0945fe455396d","ssdeep":"192:pnuy5f1+ZghbbPAVzvAg62LWt/x2dTCYO6FWK8KP:4c1vASf2AxOx8sP","tlshash":"0122c0f453f0b192da78aeb1f2d0097dd95c7603ba359615cdcf885adc68c8e4423a89","first_seen":"2026-06-28T11:38:56.428466Z","last_seen":"2026-06-28T11:44:41.755501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/35Px59tx0g5ze4oUI18BH6RzVcbc_WoViT8kCVjFMmr7IeLa_3jRF-ERF0ZHxBY1qR2h3hfEVwVzfe4jOXHJw9YL9h-EPoW2YaUjbcOOM8aBnA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.596Z","timestamp":1782646977596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/35Px59tx0g5ze4oUI18BH6RzVcbc_WoViT8kCVjFMmr7IeLa_3jRF-ERF0ZHxBY1qR2h3hfEVwVzfe4jOXHJw9YL9h-EPoW2YaUjbcOOM8aBnA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 17622eca9c6b9539\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmK9BLLJM3DqQi%2FrCyBMXKWDzHu9Fu5LEKClUjJosoYlTjD9twHPbaTz%2FP3vRovdbQ70k9%2F5q6rEHvuuHXFCaODJ81uAmfikHj%2FeVhWAWQOPYwfpr7FxjdNaarc%3D\"}]}\r\ncontent-length: 2840\r\ncf-ray: a12c6e59fe768deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2840,"size_decoded":3544,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"17622eca9c6b95395f2c73db53ca872f","sha1":"56b3f4e53a465b49cdc85eaa5f86ae4c671c490c","sha256":"507832f61ea72589a39b850283a239184fe70ab9907b166ec8618bc38c0a8f1f","sha512":"9ff1520cabf3321668f8e7f045e881a5ff9171109cd5193628cc249acd8565623f7901fbc33d341d8cdc543bc205d130c3f6b6fc4d54db0730905b176b5da290","ssdeep":"","tlshash":"c1513be2417d8df35b667460a9147909d90d352bb3bafa834450ba50fb3045a31d680c","first_seen":"2026-06-28T11:38:56.373131Z","last_seen":"2026-06-28T11:44:41.756065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/api/likes/user","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.235Z","timestamp":1782646978235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /api/likes/user HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nx-powered-by: Express\r\nratelimit-policy: 400;w=60\r\nratelimit-limit: 400\r\nratelimit-remaining: 393\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"2b-W50YGv6jTTSww5Z3FG2HZ36JLJo\"\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmeGCP0lJwmqGbMrDXU%2Bv0JFUnxOjKxTvA4R9UWqXY8CnEZytgSv52wKQyX1%2F9w9MVBpxhgri2JU%2BEe68UIuoSk36WWE5ake067KilwneHq6ZV%2Fgos1TKP%2Fpjkw%3D\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c6e5dff0c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":1196,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a23790e923be1f8001fe40934924f23b","sha1":"5b9d181afea34d34b0c39677146d87677e892c9a","sha256":"318fe8d7bd6b4e0d30fe6ca60d315801bac5f3dee5ce13b1e0f2f7fd4fe91bb9","sha512":"4d775831a68ad1447d7f89fa271dcc3bda26599943d348fd6249ca792e7322934be6152dc2e5fd0784b439750336938828ade5cdf614a0ee687a697de5cc269c","ssdeep":"","tlshash":"c39004344f5c31157045010d510c44557415c11d4310ff3f1530513d0c0310f5107454","first_seen":"2026-06-28T11:38:56.381316Z","last_seen":"2026-06-28T11:44:41.756695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/api/likes/batch","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.234Z","timestamp":1782646978234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"POST /api/likes/batch HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 7460\r\nOrigin: https://lxlis.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 401 \r\nx-powered-by: Express\r\nratelimit-policy: 400;w=60\r\nratelimit-limit: 400\r\nratelimit-remaining: 394\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"2b-W50YGv6jTTSww5Z3FG2HZ36JLJo\"\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyZzDwpfXs65b%2BAipOs16%2FstOC3qcar%2FWdjOmSX1%2BjkdxzpxPUlqMyeht14YxCXZ49Ch6v0hxvE%2F8jvHaCRuQPgGJCSk9EYV%2BGtw8%2Br3s%2FUB7krSxSWEn%2FIZvgM%3D\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c6e5dff0b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":1204,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a23790e923be1f8001fe40934924f23b","sha1":"5b9d181afea34d34b0c39677146d87677e892c9a","sha256":"318fe8d7bd6b4e0d30fe6ca60d315801bac5f3dee5ce13b1e0f2f7fd4fe91bb9","sha512":"4d775831a68ad1447d7f89fa271dcc3bda26599943d348fd6249ca792e7322934be6152dc2e5fd0784b439750336938828ade5cdf614a0ee687a697de5cc269c","ssdeep":"","tlshash":"c39004344f5c31157045010d510c44557415c11d4310ff3f1530513d0c0310f5107454","first_seen":"2026-06-28T11:38:56.381316Z","last_seen":"2026-06-28T11:44:41.756695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.772Z","timestamp":1782646978772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lxlis.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 294892\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-28T18:32:00.036376Z","times_seen":221113,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":20,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/fa/webfonts/fa-solid-900.woff2","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.075Z","timestamp":1782646977075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /fa/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000, immutable\r\nlast-modified: Sun, 21 Jun 2026 03:50:44 GMT\r\netag: W/\"24a6c-19ee84d5a49\"\r\ncontent-type: font/woff2\r\npriority: u=2,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 121978\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KC2eWXgpu23d3oxz5FPW4IeC2G35MVR6gBxSNGDJzeeuYes26CM%2BlnYc9E8JOUKaxDSvfoMUFsZHA6aP0PfukgeDrIjv5s4XXts7aHs5kWTPpiXwEh2AdujreI%3D\"}]}\r\ncontent-length: 150124\r\ncf-ray: a12c6e56bdf98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":150124,"size_decoded":150868,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-06-28T18:10:37.590345Z","times_seen":39241,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/t_oRRaoZwgeU70WOR61Va88eQbtxY7edKYlim4h1itITE5K_ExsJV-3SGhmoEiBhQ_PM-zCfG1vcSYLAruFhnvjQziIgCgIu2_ilbz9xMj5lRg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.104Z","timestamp":1782646977104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/t_oRRaoZwgeU70WOR61Va88eQbtxY7edKYlim4h1itITE5K_ExsJV-3SGhmoEiBhQ_PM-zCfG1vcSYLAruFhnvjQziIgCgIu2_ilbz9xMj5lRg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: c4efabe96c820d5d\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTDstgEobr2oonI4HaznM5HBVBrBgvymug8eYS8eknFbsenp4MMr62sdsAuxoMSESMZ7F43Hc369ylYq%2B4yyhjoGrqOQ%2BmSnRxR6BBLAoDyW%2FjIFMPLIOtkzEpA%3D\"}]}\r\ncontent-length: 1298\r\ncf-ray: a12c6e56ee078deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1298,"size_decoded":2000,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c4efabe96c820d5dc7da0c834add1904","sha1":"c97116a7e73e25ef3d9ff1be0159b1d58ad239d8","sha256":"7592bd4626688d1032e66778b84d6d44f460dbd07365ee031d3f10e72acb169e","sha512":"ab6e626eded1228457e05c9a1cb2eb33ea7e80a907951e9c3ac0e23e4a1bccd2a82c971f13149b03c7f55912c06cefcc7046b47be3a6993633d76118fcf72c41","ssdeep":"","tlshash":"5121f8b6ddc7c85af600a0edd871c37301145af5ea80a36efa5c8da3110a8d0b0766c9","first_seen":"2026-06-28T11:38:56.40749Z","last_seen":"2026-06-28T11:44:41.758825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/input.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.430Z","timestamp":1782646977430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/input.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:19:00 GMT\r\netag: W/\"283d-19f05ccdfe7\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7CgfMADK%2Ffcvli%2B99ximczYO6Id1dm1r2t%2F3I2wnLksmwfxgaRmoizMTfIZT9p5DOWdiHdcwS7e6Y%2FuzB2umyRJmkUIrr3uDNEOJfbMl5d3QaI%2BQ3NXUn0d3RU%3D\"}]}\r\ncf-ray: a12c6e58fe388deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10301,"size_decoded":5404,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10297)","md5":"1aaf31f171084c6c1572e22b13367d94","sha1":"eea04650623d044bd8f371c888e2b96a5f5dd14f","sha256":"d7b577780926a711aaf34ed78f738686ef654f561970ac7d809ec609845ab557","sha512":"b1a9fdf1a10361386c9540eefb1b5f0932c57a9f08777f273f1378d259c8c82c460cd93b515f59c78f0e402b83342afefe95e762b5aaa11937146861ac90497a","ssdeep":"192:N+Tc9s5bxqV79kJqzhlK/k6C20fY06IirXXYcnrpztBxt8uJ0D0AFT45JNbqXK37:NX9sE+qz7K/kvF/aYypT83p45JNbqXuB","tlshash":"3e221771a3e934c456bd8511fbb6e4348351687f01a0949b82afed9d3e0a45f92c9c3f","first_seen":"2026-06-28T11:38:56.405128Z","last_seen":"2026-06-28T11:44:41.759425Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/input.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/verifying","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.943Z","timestamp":1782646977943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /verifying HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1488\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /home\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6OGdZ7uHb9XGifA7qFFEmJhlBzJAnvNQBiPYuGKj5%2BAX2eofn8s9ecA7MRB%2FDUSQFeGmPEU3jB7LAO37%2Fr5QVo2x0UpRLN28jb0JRcK7bs5ZiXumWVwqNrVjco%3D\"}]}\r\ncontent-length: 27\r\ncf-ray: a12c6e5c2ed58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/api/notifications","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.230Z","timestamp":1782646978230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /api/notifications HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 400;w=60\r\nratelimit-limit: 400\r\nratelimit-remaining: 395\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /login\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUXdFj51M%2Fia33r3Xj9vhgztuzJvIle%2BWvbmbak%2BUTuJY5RnLbCKRFj3iGHBLFhsloKZSIR4RvqNXHmMlUFXqjqlCWWrikYbvEPdYRC8pP7TSS8sqJRmnG0pqyE%3D\"}]}\r\ncontent-length: 28\r\ncf-ray: a12c6e5dff098deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/verifying","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.381Z","timestamp":1782646978381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /verifying HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1476\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /home\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdGM31tng9w7GNJEPZ8hZx6%2FsTush9RCv93iZNTsN0IH0Yb2BfLWFtXC1io7Baxo6Azx1aQb%2Bt%2BpdcSfL0TsgJp1qNW%2BXesTj5GkEE0N9gjwMqbVn4D5820tKXs%3D\"}]}\r\ncontent-length: 27\r\ncf-ray: a12c6e5eef2f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/css/video-cards.css?v5","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.085Z","timestamp":1782646977085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /css/video-cards.css?v5 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:18:56 GMT\r\netag: W/\"17ff-19f05ccd13c\"\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWa78KKIfNJjOspvce07ZSLSYS2KqFzQOpJeP%2BHdR6f57WXSORSbUluxK3XWuhaRycUNLpw0bTUoIUp4ud15MPTBihhQC7CBkUGR%2FHW4Ol%2BpoDQ%2BRou7%2BpUXeWE%3D\"}]}\r\ncf-ray: a12c6e56cdfd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6143,"size_decoded":2114,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (433), with CRLF, LF line terminators","md5":"d00301b7582501fc11772b3473989a69","sha1":"2fe7cf10cd3a97fa348cb772142118a0a0412c94","sha256":"c7de455c2e90cf58a1b26b20c61ca2bdd0fe46d1daf0c8a1bf4db8b47355f10c","sha512":"092c169481b0287b8626b03188d3e00573b0f991d9d19da30876434ec15203f17bc7886a30b5cb4120149979716c5058c42824fa4ecdbafdaa4a4b7f50755442","ssdeep":"48:kLhzbNSFflipMLAHuQGeJnD/zgr+3TSg5LAHuQYVvPN/X/eBf6FilJc9zo7PHTA5:MxAcOpeRUr+336ONVvVf3+7PH8G5132/","tlshash":"e1c102b2aa55601cb062ca058dd6665fea3ec103d1220e7ce7d77356cac70cf19fa6a4","first_seen":"2026-06-28T11:38:56.38618Z","last_seen":"2026-06-28T11:44:41.760565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/V6HavDW0jawZewGfVQOYkrqKMBPcI9fvMDx7xJq8wFarzQNfvsgG5RVW3MQMieHeI-7eCmCdGSg9aZ8VMTCZRgF9yFOi9Sg82tYd7XPZ_2ZjlA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.110Z","timestamp":1782646977110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/V6HavDW0jawZewGfVQOYkrqKMBPcI9fvMDx7xJq8wFarzQNfvsgG5RVW3MQMieHeI-7eCmCdGSg9aZ8VMTCZRgF9yFOi9Sg82tYd7XPZ_2ZjlA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 7f94c374e76975a7\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcjzREhwjRkHtVyrojKUtb4BXb8lVDyH2Gx2lx3JoUekZQWijb%2FVl7UTirw27%2Bo8CzEcZztXuDp%2B8oyJQM0Lyhab1dmQnZhLRUv2Czjyq6uaCYARBPtwOkYqs8k%3D\"}]}\r\ncontent-length: 4116\r\ncf-ray: a12c6e56fe0c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4116,"size_decoded":4818,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f94c374e76975a7043fb42d52a54924","sha1":"9730567692aaeda1581e646efbbc9e912198f478","sha256":"9e18b5158dfa59ad69005b01eb54162da75874f56ab2323d1b63b4734f9b53b1","sha512":"2774e7d17c3ec941cf7dfe7c691da7fd70de84e7a18c77cfb7cd9970a3d8be030fbb563932bba727da8bb2bf6b0155cccb638066b465b148a1967ccfdd40f293","ssdeep":"96:GpfDjpmmd/Y1UZ290a7tFomoQNbbZMDsCbYqvIKcO:GFDjPY2GtOmJVK5BwTO","tlshash":"62817dc15a38b37d70268d2257810b078f54fd918e8850b668ae628326648f03a3bff8","first_seen":"2026-06-28T11:38:56.395764Z","last_seen":"2026-06-28T11:44:41.761164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/IKtfpEJXLdR9NlILbuviH8ZYcA78VMPk1g1N4wBsDs2h-FPH_-7zvRtL4pbc55L5dByiF-VsXHd8synd2lxilOZpofY6pQhMeDjXelURnnI6Tw.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.112Z","timestamp":1782646977112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/IKtfpEJXLdR9NlILbuviH8ZYcA78VMPk1g1N4wBsDs2h-FPH_-7zvRtL4pbc55L5dByiF-VsXHd8synd2lxilOZpofY6pQhMeDjXelURnnI6Tw.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 74513f5e359dfca0\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72HwKs7kjipSlmUo0pX%2FeEY%2Fe4TTRQdLom%2FECyQYWpWKMXT0BcMBYKpTucmYUrmptnfeoLKb8XucbKfsj7kqJmTOqH%2FJD6518zvo8PhZYn9nje2l5Gze%2Fq1PCFs%3D\"}]}\r\ncontent-length: 1488\r\ncf-ray: a12c6e56fe0e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1488,"size_decoded":2194,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74513f5e359dfca0faa26b0c241ee36a","sha1":"2601ffe8c6a4a8f78c9b1175e579034ca2690053","sha256":"3fb36e035de0b109838c2c014cd93ec716089c1bab620e53e044c97638f4dfab","sha512":"3d5d0a0f7d2d9e32ebb09327976e093445e17722be2948e1a69cb1ddf06631e256e540e24ba155106062e6dc8b11bd414ac8dc1523022434b0dbeda651be0253","ssdeep":"","tlshash":"dd31c93b1d982eb413cf5223b3d6e0e77640462c3d954bd399c53c59d1f961473926c9","first_seen":"2026-06-28T11:38:56.420622Z","last_seen":"2026-06-28T11:44:41.762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/bkTPPrA6GydzVEXT1GFPVCcFD8aGfztWXJHP9553JkB89hu8I1LspO_jhwzPr2wui3sgaokH6jz4WjOLZpWJHyIs4Uq2253Q3GfhbxLJtm5mpA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.581Z","timestamp":1782646977581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/bkTPPrA6GydzVEXT1GFPVCcFD8aGfztWXJHP9553JkB89hu8I1LspO_jhwzPr2wui3sgaokH6jz4WjOLZpWJHyIs4Uq2253Q3GfhbxLJtm5mpA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 9a230cb992b53f9b\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqZRryWyYxM4FlqRMx52OaxTDWbaHK36goj6DC8Ds%2Fj%2Fnor5GdpZB%2Bg%2FS%2BWoqhNY%2BBV6EvKPcN%2FMNA2nKkmdM4LSEwCykj%2BAOIPQtmeYBoWbro0iP5FFn8leA58%3D\"}]}\r\ncontent-length: 2400\r\ncf-ray: a12c6e59ee618deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2400,"size_decoded":3112,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a230cb992b53f9bbb9813fa817e9eff","sha1":"f7a85c4ab6f689b99504a12cd8e1c07048757e1e","sha256":"cde4cf5e3756c6e393645ad74915761018e59d872492fad45476eee318ec629f","sha512":"160e559bf2be162db26f4a89dabeca5ab6703dc5eec41eaa9cf9e14c56ac03884c2c8baf3041625a7e211e334b5c4ec823e1f52fe4c7880b6c6676a99c378fab","ssdeep":"","tlshash":"bf412ac7423b75cccb11b831629f920e926d6c571c2ee31b939f0c1c59a2c6a91885d4","first_seen":"2026-06-28T11:38:56.431797Z","last_seen":"2026-06-28T11:44:41.762551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/ka1uwLwP7SXX2-b2XNNNcAL7vo8xb5FWm9YlNg_2CZ4ssb7Iei8n7bJphG-TG88zXcHyxCAo5MYtH2EmYZ_qHa55kFpRTJ8NTlQyag5-sGhBjA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.597Z","timestamp":1782646977597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/ka1uwLwP7SXX2-b2XNNNcAL7vo8xb5FWm9YlNg_2CZ4ssb7Iei8n7bJphG-TG88zXcHyxCAo5MYtH2EmYZ_qHa55kFpRTJ8NTlQyag5-sGhBjA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 94c9ef4a1021dd58\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mz%2FWYvKJt9Ljsi60XE4RSfguqOZeOg0v9fLtITuV9IKdyG2zOhVOaizPJGE3iGqrm7vIyTZdbvv70Wkb4Tmao4GXpEMfzBuHMyOYGO6nBQj52YCTfgijKdj92qs%3D\"}]}\r\ncontent-length: 1972\r\ncf-ray: a12c6e59fe778deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1972,"size_decoded":2670,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"94c9ef4a1021dd58520b6bacb8b20182","sha1":"ada92ddb32f09156c67a612159e5d8533cfaf8e0","sha256":"a2bf24a14332b4e222f79696a2bfb3bde16a9a9e4ca48ec032f4b5e583b58925","sha512":"3c12e1b05f1a11946322febea76ec670ecc033b223a6a8409da3c38553e8a7d3946afb8d36d07c69e2f82fab52f3095737daf602ed0c0ba98c278f91f0eb2d6b","ssdeep":"","tlshash":"52412cd90ab14935deca5cb1c101735740e9c36ab6f1289fd4496e0d47f81ee0e97627","first_seen":"2026-06-28T11:38:56.398084Z","last_seen":"2026-06-28T11:44:41.76307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/api/categories","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.600Z","timestamp":1782646977600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /api/categories HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nx-powered-by: Express\r\nratelimit-policy: 400;w=60\r\nratelimit-limit: 400\r\nratelimit-remaining: 399\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"2b-W50YGv6jTTSww5Z3FG2HZ36JLJo\"\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QN7R%2F7b1paK%2FzjpPvs9QJI%2Bif%2FC8mWw3hKq0kT23YAtgzVueZnIACGAn90nHR3C8sBDitOpuFVh0Wexm8nFUyUe05CbW%2BrSxYRSFzVxesBA7vEo2rITXUKbZTSg%3D\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c6e5a0e7a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":1196,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a23790e923be1f8001fe40934924f23b","sha1":"5b9d181afea34d34b0c39677146d87677e892c9a","sha256":"318fe8d7bd6b4e0d30fe6ca60d315801bac5f3dee5ce13b1e0f2f7fd4fe91bb9","sha512":"4d775831a68ad1447d7f89fa271dcc3bda26599943d348fd6249ca792e7322934be6152dc2e5fd0784b439750336938828ade5cdf614a0ee687a697de5cc269c","ssdeep":"","tlshash":"c39004344f5c31157045010d510c44557415c11d4310ff3f1530513d0c0310f5107454","first_seen":"2026-06-28T11:38:56.381316Z","last_seen":"2026-06-28T11:44:41.756695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.936Z","timestamp":1782646977936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1489\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nx-served-from: page-cache\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EcR9obVEEYv5f5t2FXAQqeNzlEjsT2YGD9PZHyvlXEji5epewpJJLuUkjBDfM6dO4TQSP4LA%2Fv69S92zAWV94seewcL3f%2B69OjZjvTdYcggWIInYgn7rDlUqqX8%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12c6e5c1ed28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/login","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.287Z","timestamp":1782646978287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1478\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /verifying\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnOr60PQajSGw8JkrikPWmkVUMiOTT1v17rCfusOnS%2F0qEaavDzD5T8rRm9SjHuwdp5EAMVGzUq8t26H2uKUQCFjw%2Bc1DwbnjBY5SD3DG4kJ4pKAPw4fEaa7DEA%3D\"}]}\r\ncontent-length: 32\r\ncf-ray: a12c6e5e4f178deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/C2KQSkFlr5XSeUbJf6jtx0EIwnetAvrw-Y2ARwI79hI0EQREP26UcsBcByFYnIvBwTyWgn2CCUR_wq29QXVKpaOzRqkLYx5w-Zgjj1pouRZGow.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.576Z","timestamp":1782646977576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/C2KQSkFlr5XSeUbJf6jtx0EIwnetAvrw-Y2ARwI79hI0EQREP26UcsBcByFYnIvBwTyWgn2CCUR_wq29QXVKpaOzRqkLYx5w-Zgjj1pouRZGow.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 4d779f1ab4cce0b8\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVlIWqBUFWRKe5We4nNUy3qt8aTGjhir2nrj7g5BFki54sNMrNkP1Al9TEWIY%2BcDcoRC9o23Uw%2FSOFZE%2BFxh9uD3WUFyT98k6UoHzlwvuFnmbpNNFZ4iY%2FYkHzI%3D\"}]}\r\ncontent-length: 3402\r\ncf-ray: a12c6e59de5c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3402,"size_decoded":4106,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4d779f1ab4cce0b87714f944a31994f8","sha1":"bd4463993e9be4b0e2a24918ed037b129ebb3029","sha256":"95b22df7609098399cbf47ba577cc81507089286248ccac32177d49379b6deef","sha512":"0444e928ba4387e6f18b0b0d2833cb318dce53b58358d2cb16638c0c9c88f8f0c7cfc7d5b415161c0ac004cadf6b3e0b10b4e99aedb6dafe97291ee6d03dea00","ssdeep":"","tlshash":"ee614b882692a5933bdfb52a7cd818354f44c2c48fdaa6b9d7fed194b0a1c45b0446f4","first_seen":"2026-06-28T11:38:56.389147Z","last_seen":"2026-06-28T11:44:41.763616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.478Z","timestamp":1782646978478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1475\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nx-served-from: page-cache\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyEwOE8XnshUn7eX6piw0I3DTPx3XflGn91SiZ4fskH8WS%2BIZJyUqNQViPuC6qgWmfDQ5LHX9ByVleA3Rjw7MXBi%2Bhjh9EAWZ7zRsBHoQoPfqRqXn0I35Ds32ME%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12c6e5f8f438deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":804282,"size_decoded":114232,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13095), with CRLF line terminators","md5":"87f0619dc130f0839df5376abd31c2b5","sha1":"c8e66fcec4a6295b9da44ce7f2c774e0461dc7f5","sha256":"33bf9660950ea95a5674ad3757aa13b71933607eba8e54b2adaf03130755f13a","sha512":"2cd875109387ccc78409e17c31153c000d81d78d7f807ffda8f2e409c990bc970c5ec158f3d70b4883dc39764d6570d00a06762184266771344dae2072294a37","ssdeep":"3072:lmiuVu3JKxM7Wgic9g+d0h9zgXEXUqYKJCpYvceHMxB:V+Sp7WgiUg+d0h9zgXEXUqYQ07B","tlshash":"a705dd62b0b7f12f41a787f53598539aa4b2ca09cacf0518b6edd7f423dec9679081c4","first_seen":"2026-06-28T11:38:56.383582Z","last_seen":"2026-06-28T11:44:41.76428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:42:56.745Z","timestamp":1782646976745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 11:42:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1498\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nx-served-from: page-cache\r\nset-cookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM; Path=/; Expires=Tue, 28 Jul 2026 11:42:56 GMT; HttpOnly; SameSite=Strict\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5E0aeZ4iN3YDD7yeyWXOmd%2B5%2BgnbAZfUSVBtaFmNS%2F2H76QAvbrP2ZDuqDjH5hNKOWK9HvQUTcHfyp%2Ffr%2BY2NiyFmzo8pgPxHw8ss%2FUMc0drrBJzOv8GecWRXM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a12c6e54af4923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":804282,"size_decoded":114535,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13095), with CRLF line terminators","md5":"87f0619dc130f0839df5376abd31c2b5","sha1":"c8e66fcec4a6295b9da44ce7f2c774e0461dc7f5","sha256":"33bf9660950ea95a5674ad3757aa13b71933607eba8e54b2adaf03130755f13a","sha512":"2cd875109387ccc78409e17c31153c000d81d78d7f807ffda8f2e409c990bc970c5ec158f3d70b4883dc39764d6570d00a06762184266771344dae2072294a37","ssdeep":"3072:lmiuVu3JKxM7Wgic9g+d0h9zgXEXUqYKJCpYvceHMxB:V+Sp7WgiUg+d0h9zgXEXUqYQ07B","tlshash":"a705dd62b0b7f12f41a787f53598539aa4b2ca09cacf0518b6edd7f423dec9679081c4","first_seen":"2026-06-28T11:38:56.383582Z","last_seen":"2026-06-28T11:44:41.76428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/css/main.css","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.080Z","timestamp":1782646977080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=86400, immutable\r\netag: 4bf1e631b2455573\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 35428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81sqJAxLMYu%2BmthRYBPrLcfwZsf7CMW%2FmtI12KVZ%2Bpi26%2Fpck5WaJlLEExPXlfqA%2BsCYHu0ioNgShjXEgHfDBV3RgWBXZ%2FcZgz%2FdVTcThQgPeU7eQlx8jlklbFo%3D\"}]}\r\ncf-ray: a12c6e56cdfa8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26225,"size_decoded":6870,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (25700), with CRLF, LF line terminators","md5":"a1fe5f0014d04e98f54caee88ce5fd2d","sha1":"96564e81c9b9200644c9ecde5e458978eb123309","sha256":"5f345a95c897e22a2db023e133064bda17d0609e92e9a391f1f5e32b158ee32c","sha512":"3cc842a16cb8cf6e97607eb7db20241a14d26c4bb081a94789bd4cbbe93601f88239781d4721afc06f19b1a3e9bb1c3101d96f84111c529442274b514f1c4afa","ssdeep":"384:LiYzCxcGcecM3nnbS+c2zNIqOt5OkDaU5Tt:LiYzCKDecM3nDc2zGqcYkmU5Tt","tlshash":"7cc29531b245213c7437eb676de097af7125c113e62f4a9cea963120cec72eb0a72675","first_seen":"2026-06-28T11:38:56.400315Z","last_seen":"2026-06-28T11:44:41.76501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/css/bg.css?v3","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.087Z","timestamp":1782646977087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /css/bg.css?v3 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:18:56 GMT\r\netag: W/\"29b-19f05ccd10a\"\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3gH9%2BQy1Z5BLkU95a02sRF69U0Pf%2BnuS480RqzD05sLVaES0YaUcIkZS7kXS9P2FQIx9SbW5oBZtLcX0xc0Y7Jc6HXtiitliK7eZQKmkznkQh6ivwoj6zs2E7U%3D\"}]}\r\ncf-ray: a12c6e56cdfe8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":667,"size_decoded":1092,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF, LF line terminators","md5":"2ce42d770808dd134d9bcb2de8080c8d","sha1":"789cf382acfbb1acdb641df70415ee33d06cbe09","sha256":"97032b94789b46cf2ad85013eb5fe4e72eb613955c117e6093de4ae9dbe13816","sha512":"c2f175053d863156cb4fa0c21287bcdbd1032562cce174674a09b584970fa5cdab699236febee5ebaad402b14d25e9083e3b6ccbe67227b8f8b4fdc0660231d1","ssdeep":"","tlshash":"ae01dd6648442089f2b2c7eda423973c8cebd10ad2020f7972f4a8ec4d9205b933e014","first_seen":"2026-06-28T11:38:56.42594Z","last_seen":"2026-06-28T11:44:41.765568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/meadow.js?v=202606151900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.435Z","timestamp":1782646977435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/meadow.js?v=202606151900 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:20:38 GMT\r\netag: W/\"389b-19f05ce5c9d\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jiEeA0jx2GqgTuWLAOxz4AcmIdlSfVqclHoaJypLRthz6yefRNCsVCQcCqhlZqKqUhAb%2BctjvR2XhhEyuUKM1zB3CgPrFg6LX%2FduSVtnlpycsaM9diCRmhwL0E%3D\"}]}\r\ncf-ray: a12c6e58fe3c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14491,"size_decoded":2929,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (14488), with no line terminators","md5":"7d8c90ee0be01197e899ad6cc037a1f3","sha1":"230cb9538bb30a3c8c06ba50985492ae581193b3","sha256":"1798d3923494a1b6ea65872c674df2da47cfc92aa501344d8b2f66b89eec710e","sha512":"86856d3973ecab7e8a104600e1ee895cb8e4345e876c3a79b79d475460f9044ee64470cfc5b053cd8088c83ee6b0240a8a1134aafbea20d51b211304f0273e83","ssdeep":"384:c3FHf8T5UZO0e33d+EMK6vmv7eud6HkHlw6:cKcO","tlshash":"c952022634afe10f10d94b71369823e6d8b6ce06c6ce510ab59deef970df99736082c5","first_seen":"2026-06-28T11:38:56.350596Z","last_seen":"2026-06-28T11:44:41.766217Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/uju1Do_HOiHMAlutc5ac4aFC0dNVJLNDFd00UttMSZpvc0O9TVRjNVS6OB8p8yC2zA2MyJlQg9_vyq7rDE1QjBNquSRh__LapxarhE6KeXpUUA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.579Z","timestamp":1782646977579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/uju1Do_HOiHMAlutc5ac4aFC0dNVJLNDFd00UttMSZpvc0O9TVRjNVS6OB8p8yC2zA2MyJlQg9_vyq7rDE1QjBNquSRh__LapxarhE6KeXpUUA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: c1800b5b4e6e308a\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XC5cJH2m1y%2Fio9ngiU0dq20JJXL5XFKEKDqTiOx6Qelhe%2FPMtAL1E%2FRJp6AGF%2B81VtuOjNRudYPMaQs5t%2FsRYAkUi2lPFwOTrskq1VzlrReovuiaZOjrhu9GgpM%3D\"}]}\r\ncontent-length: 1964\r\ncf-ray: a12c6e59de5e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1964,"size_decoded":2670,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1800b5b4e6e308af97832b38f8ebdb5","sha1":"ac6ca6a5a2d6e162d2fe4e6c02a4674be7f0114c","sha256":"ac7fbfda8aa1a894d601b70c041640a4936f95befb20340c7849c61c98bd70ac","sha512":"b2532199e81ab099d958f372c17c9343e41288a1bef046c28b13557bedbd99a898499930d2238c4caf124768543a966f091abf157a518049f7ff1fceb5458ba0","ssdeep":"","tlshash":"68412c281c8412bfa6ba776ea5c61779c30fa62eaf0296897c54c35f215520085cc159","first_seen":"2026-06-28T11:38:56.357629Z","last_seen":"2026-06-28T11:44:41.766824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/S_vbTn57NpUUGaifDdWEB7QW2yR83F7T9lt4kniwGXQo5DBWedKm-hdowsTj-ZTicr2-ZnVBZN8EONlgYPP6dyzoWKAE9mGvE4axJQV2UxqHyQ.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.581Z","timestamp":1782646977581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/S_vbTn57NpUUGaifDdWEB7QW2yR83F7T9lt4kniwGXQo5DBWedKm-hdowsTj-ZTicr2-ZnVBZN8EONlgYPP6dyzoWKAE9mGvE4axJQV2UxqHyQ.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 4e091e3816f53f05\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UqXX%2Bv06tHMc9AY8VL4t5gNB52LsFaED9nq9%2F7tEDbwBRRUQ9CH%2B45OQ%2Bih%2BVRq737wnR17ucJPsCRrtBZpPTl66pTOk6bB0n%2FVl%2BbhHjVYUVr528qW8Vy%2BIvSo%3D\"}]}\r\ncontent-length: 3820\r\ncf-ray: a12c6e59ee608deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3820,"size_decoded":4532,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4e091e3816f53f0524f065e896eceaa7","sha1":"735e5d47e45deb6640b02e55a484fbed9ae5ab10","sha256":"0d0ce75a00bb4c748322547d7b0413a11a94a90a090b29a99eea99c1073b1a4f","sha512":"76d66e13c4b280249d8751f377b3f86738fab9f965941f1b32c822c4c486edbb535247f6f8cc0f2b245cc6cdd2527b94611425ecc8c4a093d0d64eea3b146d7b","ssdeep":"","tlshash":"48715b0cd6dfea6c6598125fa2a637561e439b50743e1fc2e71fd120d029dc42adced4","first_seen":"2026-06-28T11:38:56.391463Z","last_seen":"2026-06-28T11:44:41.767381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/KxxGk18nFqZ-520T5bJ3W7XcZ1oDHL0eM5Y9b3pQhpF_dw-V8MF63Evm-3Yml8J6ZdVMJsaWq53cI6GpDABlWnqY1qCKEtNMw3nfql_9qP876Q.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.583Z","timestamp":1782646977583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/KxxGk18nFqZ-520T5bJ3W7XcZ1oDHL0eM5Y9b3pQhpF_dw-V8MF63Evm-3Yml8J6ZdVMJsaWq53cI6GpDABlWnqY1qCKEtNMw3nfql_9qP876Q.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: eb224c0a2c54cf84\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjROeXVH1dg668ovwoTEL%2FkG4tIx1bZ0CwCUMHCZZXgX1D%2BK%2BSSqJGsL%2F7FlFhXVySZCgmbw6CIhy6uiikl6U7OW8h2g%2F883FaNyJUCBlZArMWEGxZd8WUs8vA0%3D\"}]}\r\ncontent-length: 2542\r\ncf-ray: a12c6e59ee638deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2542,"size_decoded":3248,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eb224c0a2c54cf843581819be535eb7e","sha1":"94114bd4d9eb8fba7a8086e341d22204c5be1b7a","sha256":"5c283f27518b9b9a3d167cb0843756dac9d4ebcf37efe7809a06cbf9604b8300","sha512":"55c2aaaf231c5916aace49d78306155e6fe10c260872061f3b5dc6fbc740ce79bca77df32d6ae43f6130b4dbcc41510a8ba898771dfa8c5a0ad3e558bdb5df5d","ssdeep":"","tlshash":"2d51296e9bcb518101a65c6d6e137dfea243a0b7ce1021113024fabaa4573f1fea30e1","first_seen":"2026-06-28T11:38:56.393621Z","last_seen":"2026-06-28T11:44:41.767926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/login","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.624Z","timestamp":1782646977624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1494\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /verifying\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tngf3Rxu79dvzk2cnN4g0HXcEX64AIVOYmCOvDzlsSOgJAKBDnH%2FkIbpkF5KS7DcCjHWmgRlOkWJZXo49bUmtklb0dNWeP6C3eiLferB%2B3rJpGRwOkaC34igYq0%3D\"}]}\r\ncontent-length: 32\r\ncf-ray: a12c6e5a2e838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:42:56.616Z","timestamp":1782646976616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 28 Jun 2026 11:42:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1499\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /home\r\nvary: Accept, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM; Path=/; Expires=Tue, 28 Jul 2026 11:42:56 GMT; HttpOnly; SameSite=Strict\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsIlt2An5yH4nWfi5ItmNOyO29NRCD1tjmNdhVhkLWi71oLdANQwrIUFzjV9tjnv76PSSdCvnnUgqR0QP28zbwyIzMLX3xeqTNx%2BgPG00AK1O8EwzA5wFr2wdzA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a12c6e53fd8c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":99,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/xbFLQ6q8Gez8WlVVHGIAxMUKvzLa6j3Id8stRsRiFCux8nl02Ex34XN8tYhDaaoQuw2bfB2lAaXAlRNcVXiwLrQwm29WyoKecxJViUY0_Rb8vA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.100Z","timestamp":1782646977100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/xbFLQ6q8Gez8WlVVHGIAxMUKvzLa6j3Id8stRsRiFCux8nl02Ex34XN8tYhDaaoQuw2bfB2lAaXAlRNcVXiwLrQwm29WyoKecxJViUY0_Rb8vA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 665116c3444a2f7a\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIGkE5KWNQWc1Mm1tp7Tin%2BQKeN1%2FnUKMdEV%2B7nHdxM6jIPhZQiUnVxqJtRFD4%2FsIyXhBlsfjvJaPo%2BQAEUw4BzAt%2BOOcRr%2Bul1yymwPMKtwLfVvO2vFpee54LU%3D\"}]}\r\ncontent-length: 2646\r\ncf-ray: a12c6e56ee038deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2646,"size_decoded":3356,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"665116c3444a2f7a85dc1f1938eb6bf9","sha1":"3dba333469807fba1e48864752b684e089d58d8c","sha256":"d8b43c8df10fa5b6a750443bf8468fca7a37eebd1e68159612f5f25bf8e956f6","sha512":"69545eec23eb2194bca0d7d65a0ed86c1aa942adedfabeddd00235e963458c7916ecce47925cd12e64f0f1b8b843569c3e8692241515dc2995b9bf09f62a798f","ssdeep":"","tlshash":"15513e5692d2136fc38f2895cfc700d5546553596ad700b8f33b1412a73d7e766d885c","first_seen":"2026-06-28T11:38:56.352673Z","last_seen":"2026-06-28T11:44:41.768823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/YWBTEuPKFHGSjH3Yh9ErTbPabLcQPQD1q6CFmR7EyT-RVbKH-uDYyRG6uINYKIrVbp3-WiT9dk9a2IjIRl_3IYwOvhgMHtXANCaXhSFlI3llZg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.101Z","timestamp":1782646977101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/YWBTEuPKFHGSjH3Yh9ErTbPabLcQPQD1q6CFmR7EyT-RVbKH-uDYyRG6uINYKIrVbp3-WiT9dk9a2IjIRl_3IYwOvhgMHtXANCaXhSFlI3llZg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: ecbc6fb50386b733\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Xmz2pylNrRJgJnjlR%2FzgXzTzUOg1%2BkIWLQImJkN66Qnn2B3qCvy1j16prC3hacWsq7uI%2B%2Fs7yAtZ1rVqBXjy8C0KsNPRgkUPyQ0WKuAErfpet4yRqgtKghF%2FSY%3D\"}]}\r\ncontent-length: 2292\r\ncf-ray: a12c6e56ee058deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2292,"size_decoded":2998,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ecbc6fb50386b7331b8c83b23d27ca14","sha1":"24b494e14fa9ca666dd11fee2f9fce4b1865f2a9","sha256":"12b3cde09da7977c5ad5176eeca22768f7afd2b606abcb237f8a7601203ae681","sha512":"75d451ddebf75fff1620e1ad45a8dc7a58e36706d4d9e68bbf56b553731e25248adef4dc47a9ba5dc266ad72365283f3c5ba6f61766a5a34cfbdfd4eb4e5929a","ssdeep":"","tlshash":"6f412b011808f3f1e6612a7178adcd5e9e83101a16b0afb9d74b3ac8175bb9335575c7","first_seen":"2026-06-28T11:38:56.33734Z","last_seen":"2026-06-28T11:44:41.769337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/CVT-r1bzeEPWPNQmPQeo93JrqRZOQGhOMvZJjA8qws2-ItxWMR0rreKvQOoc7S4XaPbBvmo3bFr0wQJdgV8KfZMGQFgwFSQWlejFY6QP75fkaA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.105Z","timestamp":1782646977105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/CVT-r1bzeEPWPNQmPQeo93JrqRZOQGhOMvZJjA8qws2-ItxWMR0rreKvQOoc7S4XaPbBvmo3bFr0wQJdgV8KfZMGQFgwFSQWlejFY6QP75fkaA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 9c3e31275650cbad\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmmqGZFVpvZ7yOkz5w2SQLYkvZqmLfWnZmOUglPj8qq34NJsfgNwXPGqMVyO8qmNdTzN%2F4tlko3VPphpvftMMF%2BKszehKvIeiHxmNZYYeTxiJ47u0N2sKlSGpSA%3D\"}]}\r\ncontent-length: 3526\r\ncf-ray: a12c6e56ee098deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3526,"size_decoded":4226,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c3e31275650cbad7e872de2c41d0784","sha1":"b0a1a3931765783052c676f1d527f1413047f294","sha256":"1606a48691ee2535c234d6bb942a20a581e9a4f319d3c8682c63d4d128becdbb","sha512":"42d5253fe9f53c8f3b372109b3161e30ab0960ac17d99772f43dfc2cb5739543d60c85fc7788e96c8d873c70affd7ffbce43dcb9333b34c86b941c8284977dc5","ssdeep":"","tlshash":"95714c10091cada2ec4857eaae905ad18dad0592b9ccc3f2f17437a585c17c92bf190b","first_seen":"2026-06-28T11:38:56.409778Z","last_seen":"2026-06-28T11:44:41.769902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/render.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.419Z","timestamp":1782646977419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/render.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlocation: /login\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l72KVNKAspcUPlMHmamCA6WFfwaVvi%2BnnlqxdIPyNTW6NsNBYRTgkprZoUF%2FS2cn9j86LzPLSk6Y4pAh3TsxC9J1gx1zCy1UHPiY7S9V5vWxbqttMuQaQWERw6k%3D\"}]}\r\ncontent-length: 28\r\ncf-ray: a12c6e58ee318deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/ghCV1wc_8tUsnFf1RmTvcjq_a9QdttZ-YesBYxMMVmNy-mlTh6OjDjNYGKugr2xuiwIJNjaqVHq8R9SRG2Ra8aoQTunnZhE3Tyn98EROgb5ehg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.592Z","timestamp":1782646977592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/ghCV1wc_8tUsnFf1RmTvcjq_a9QdttZ-YesBYxMMVmNy-mlTh6OjDjNYGKugr2xuiwIJNjaqVHq8R9SRG2Ra8aoQTunnZhE3Tyn98EROgb5ehg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: abfa08402a03f1c8\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yX%2FvZ42M6Xd%2FX%2FLGenXMvIpDLOAtInDUIk3dSyCflaLlG3yKlMEWF7OhWAxReMbpTdbKI2fumdwbEnVzq1fQGB1bmYIZ5zbeckKpw2DVHLy6blVNgysUjOq8nds%3D\"}]}\r\ncontent-length: 2340\r\ncf-ray: a12c6e59fe6e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2340,"size_decoded":3042,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"abfa08402a03f1c85643bc75fb8549d1","sha1":"61d3795f133813a6cb343c10243c737a608cbbd6","sha256":"f7689bc8df502f1693a24083c4d408263d08cec448a92de6300170b6d2c9d61a","sha512":"bcf2442f6ec7a1fe2e51bb98d38a2ddc4929f4d3a7ed22fa1d217d1e2e06ecad076e5181672728ed176034461230e6bfc057683410cd338d37b09b8fa64f92a3","ssdeep":"","tlshash":"90410aeb3a929492e27b3ce1c19f6009f81508060865174bc0f6cd55f3e969bfc5d40b","first_seen":"2026-06-28T11:38:56.34846Z","last_seen":"2026-06-28T11:44:41.770422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.781Z","timestamp":1782646978781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lxlis.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 294892\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-28T18:32:00.036376Z","times_seen":221113,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":46,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/guD13wG9VFGCtEcPCzqh2Zd8xS4Qruj2ZhcAXD4JjUUZuDxqW3gC3ryA1-aKo6aO1z0QxPpPLe407MUg70LmOL-PHVOsYTedOJFBVlewCi6DhQ.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.098Z","timestamp":1782646977098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/guD13wG9VFGCtEcPCzqh2Zd8xS4Qruj2ZhcAXD4JjUUZuDxqW3gC3ryA1-aKo6aO1z0QxPpPLe407MUg70LmOL-PHVOsYTedOJFBVlewCi6DhQ.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 9da63585c0317d4c\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfYjsU1wKDOlM8rhTrL22qDjxz5OkpjQcqjfQdasZddNnwvXNwMvZzJ1MNuXfvKLVInmD25QIdu6LgirC8Fp%2Br9eZ9fv7FsQ4l7UtgRfXfSuuj%2BJAbl0golqtKc%3D\"}]}\r\ncontent-length: 2054\r\ncf-ray: a12c6e56de028deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2054,"size_decoded":2754,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9da63585c0317d4c5712a831b4f62261","sha1":"42069392e5a9da2f265e476e3f819b716a10822b","sha256":"f413f8800113365b3f2c1e80a62653c36ae61cfc95f6a0f8692bc3e63a298e7d","sha512":"8b0967dfea31f8f8e03f0e41d143e00942455cc3c2a29f64b81e716878a9e3a74cbaeb2b7950f549a5415aa11ae4247239a7456eab8c724bb0c87229b13d9369","ssdeep":"","tlshash":"b441fa2a25f4c6b18f07d01562c02b0051fe86b762c6c642bccf73076ea5bb022dd61a","first_seen":"2026-06-28T11:38:56.34639Z","last_seen":"2026-06-28T11:44:41.770935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/74qiTdB_iFHfXK3CG5ZZ3FfXpnibbu3Gvp1maEIUo-KYpPuMLZ5wWLJYUfNisOQCfJEBJonRr2zheA1MxxCqZR8iGMIY0_NATZkwTGR9A3em2A.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.595Z","timestamp":1782646977595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/74qiTdB_iFHfXK3CG5ZZ3FfXpnibbu3Gvp1maEIUo-KYpPuMLZ5wWLJYUfNisOQCfJEBJonRr2zheA1MxxCqZR8iGMIY0_NATZkwTGR9A3em2A.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: aa2a5790e96ac556\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghZrx%2Bg1YVdyBuTdi9GVENSJjd0CnL0DQ28G9sOk%2FkSUVmuJb0GNXyfBlk6GglhfyJm9ohRNNsOPXJvpOPQ6fUk4COYx8EyizYO76FK5N%2BaR4AzovvsAzHCxYjA%3D\"}]}\r\ncontent-length: 2378\r\ncf-ray: a12c6e59fe738deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2378,"size_decoded":3080,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa2a5790e96ac5564d58c204476e65a2","sha1":"f58662f617bbae22fd2703952d3f2e1e454b8607","sha256":"7a9ebfcbd42e1837e6fdeb6525732135a594a1c0dffaa5ff9fa11464f1de20f0","sha512":"0f02a377757a68162671423adf85467388fcfd4a7740c1a5cc44642930045392b6e3bc984229547c8333b4078efdbc60287fde9dc19061ae1605cc1fdcbcb260","ssdeep":"","tlshash":"32413b2499309af5b8daaccb06f1e2cce918c1334d4f56ce964d072392d0369f18f6ad","first_seen":"2026-06-28T11:38:56.342566Z","last_seen":"2026-06-28T11:44:41.771462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/api/notifications","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.601Z","timestamp":1782646977601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /api/notifications HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 400;w=60\r\nratelimit-limit: 400\r\nratelimit-remaining: 398\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /login\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaYXiGL%2FJiweuD049AKYgV2VyD%2Ba1YLOxQSOiJ2J0FRo6TYlMP8MZ6uXbGhnH5wLqgrOa%2BXTlsLISuu5IFsOGBOb4dYy%2FVirmVwIb6kYtnY5Jns1j93PbKBdBk8%3D\"}]}\r\ncontent-length: 28\r\ncf-ray: a12c6e5a0e7b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/css/grid.css","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.082Z","timestamp":1782646977082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /css/grid.css HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=86400, immutable\r\netag: 23034bfc6ef95dcd\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 35428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBvo6tZc2DNziG2lzL6bWlMJIg8d8MBkwInE6zPzVoXvRoY8XpcmCFnxnMKbZI2PMvwUpu1bwQctPAZEik3u44Ky%2BbyAdfEHdveLUNOvf61ZbZ82W0hMdNmxAT0%3D\"}]}\r\ncf-ray: a12c6e56cdfb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7551,"size_decoded":2642,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2632), with CRLF, LF line terminators","md5":"f2eaf717810be2211a9ffa8506389b69","sha1":"294245b74b8ff111eacddc58bc501b81f4595753","sha256":"e773bb063c4b66b174a3715cf165554bae26b79e2e318d58c796c74c2d4f2fee","sha512":"88a98d67ab3b66dce06cfd2f1c6fe1789406e8f2b41c2f5a2e265e4150b7edaa76fb8ae084c5019bdedfe3b7764989842a5a088f0e818b0d81bf9e14c9a8f576","ssdeep":"192:Li2ayTAyVTmTXTV3TdTSS+arOpm2X33fR:Lqyh6DB3hcph","tlshash":"abf13353f0c51599601789aa29e377ffbd3f90007b170fb9a162b3354b860df09b142a","first_seen":"2026-06-28T11:38:56.362167Z","last_seen":"2026-06-28T11:44:41.772042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/bQnlwjJuxaqqkGesEF9LNolPm0dSoEcq8T2EQb2NJELwU_rjz8Wiz7pFJq-SQTLJULyDjBVqChpe1hKbHtcMHPqAfhq6yEuVNJr8AmdMFrBtww.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.114Z","timestamp":1782646977114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/bQnlwjJuxaqqkGesEF9LNolPm0dSoEcq8T2EQb2NJELwU_rjz8Wiz7pFJq-SQTLJULyDjBVqChpe1hKbHtcMHPqAfhq6yEuVNJr8AmdMFrBtww.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 72dc70567d8b25f0\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FTQLQZmFKe3CjlVqlo4lYHb0uMp21dKvEJ%2FpQ0KOW1u2XALcF0gNoPqnjKpHX1FWxQzwsbDmeG3uKl7iyz2NdSR9jSyhSOET3WLshU0C3yHZAzlxBQgfA9tBDs%3D\"}]}\r\ncontent-length: 4610\r\ncf-ray: a12c6e56fe0f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4610,"size_decoded":5310,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72dc70567d8b25f03c1c110604636abc","sha1":"9601049ded4e920970912a1c3387c4deb0ffb3b4","sha256":"59fe1eb829eb1158ed1bf9740fe81332c8d9fb22a9bff6e7c453e7f4a732e490","sha512":"2aee22da8e54f6299d3135bc42f17815ebbd1fe41490fa98aeab11b9c7e36d5d2ff89081b0800e948b65886e93525e91cc43a099073d0f64e80e8cc523cd1261","ssdeep":"96:MTjx8ax3+8q2X89PXAKwuRvSLBYQFpAAv+kLIARisgYRWOmlZ:g19x+8q3/IuRvI/d+AuYRWOmlZ","tlshash":"69918e955a3d8625b481c20f63c09ac345be83d4cde66242f3c62624ae17f439bf174a","first_seen":"2026-06-28T11:38:56.339964Z","last_seen":"2026-06-28T11:44:41.772565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrcode@1.5.3/build/qrcode.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.416Z","timestamp":1782646977416,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /npm/qrcode@1.5.3/build/qrcode.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"40-AHh+G/p6qIqrAO3GAe3xQb2vB2o\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 81331\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nx-served-by: cache-fra-etou8220135-FRA, cache-bma-essb1270024-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 59\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/xbFLQ6q8Gez8WlVVHGIAxMUKvzLa6j3Id8stRsRiFCux8nl02Ex34XN8tYhDaaoQuw2bfB2lAaXAlRNcVXiwLrQwm29WyoKecxJViUY0_Rb8vA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.585Z","timestamp":1782646977585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/xbFLQ6q8Gez8WlVVHGIAxMUKvzLa6j3Id8stRsRiFCux8nl02Ex34XN8tYhDaaoQuw2bfB2lAaXAlRNcVXiwLrQwm29WyoKecxJViUY0_Rb8vA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 665116c3444a2f7a\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lf1Nz7RfI8mKQra9QQ1aIQ2Nq70lHew8jxtUQIhbVb1Xysx8a%2BL1%2F1mqgH0fRr24ZPGrw8JzqL2ZiyP7Dq3ib1c3tMERPWGhigr3vMYfXIINddwoSr1LNw9uBWQ%3D\"}]}\r\ncontent-length: 2646\r\ncf-ray: a12c6e59ee678deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2646,"size_decoded":3346,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"665116c3444a2f7a85dc1f1938eb6bf9","sha1":"3dba333469807fba1e48864752b684e089d58d8c","sha256":"d8b43c8df10fa5b6a750443bf8468fca7a37eebd1e68159612f5f25bf8e956f6","sha512":"69545eec23eb2194bca0d7d65a0ed86c1aa942adedfabeddd00235e963458c7916ecce47925cd12e64f0f1b8b843569c3e8692241515dc2995b9bf09f62a798f","ssdeep":"","tlshash":"15513e5692d2136fc38f2895cfc700d5546553596ad700b8f33b1412a73d7e766d885c","first_seen":"2026-06-28T11:38:56.352673Z","last_seen":"2026-06-28T11:44:41.768823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/bQnlwjJuxaqqkGesEF9LNolPm0dSoEcq8T2EQb2NJELwU_rjz8Wiz7pFJq-SQTLJULyDjBVqChpe1hKbHtcMHPqAfhq6yEuVNJr8AmdMFrBtww.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.594Z","timestamp":1782646977594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/bQnlwjJuxaqqkGesEF9LNolPm0dSoEcq8T2EQb2NJELwU_rjz8Wiz7pFJq-SQTLJULyDjBVqChpe1hKbHtcMHPqAfhq6yEuVNJr8AmdMFrBtww.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 72dc70567d8b25f0\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjdRHoMlIY2aBQ2keyK%2Bw6HoIOUANS4Je8ToLK75we4hpnEh%2Bl7MHdzoko0zDfCT5%2BidJ24SbxVOpU6r0xcrVfJRW5djPCS%2ByVG%2BEfSYx8LjdiMFD2wp8eQOU6M%3D\"}]}\r\ncontent-length: 4610\r\ncf-ray: a12c6e59fe718deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4610,"size_decoded":5316,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72dc70567d8b25f03c1c110604636abc","sha1":"9601049ded4e920970912a1c3387c4deb0ffb3b4","sha256":"59fe1eb829eb1158ed1bf9740fe81332c8d9fb22a9bff6e7c453e7f4a732e490","sha512":"2aee22da8e54f6299d3135bc42f17815ebbd1fe41490fa98aeab11b9c7e36d5d2ff89081b0800e948b65886e93525e91cc43a099073d0f64e80e8cc523cd1261","ssdeep":"96:MTjx8ax3+8q2X89PXAKwuRvSLBYQFpAAv+kLIARisgYRWOmlZ:g19x+8q3/IuRvI/d+AuYRWOmlZ","tlshash":"69918e955a3d8625b481c20f63c09ac345be83d4cde66242f3c62624ae17f439bf174a","first_seen":"2026-06-28T11:38:56.339964Z","last_seen":"2026-06-28T11:44:41.772565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/SPHjrAcNloqUn5OKfIa4VkwyXv7GAdjxxZ4xh05FhwfmgQuAQpSgCsRgjN0HOVeMaqSvmEh_CIbzn5cAdsKkjn8aZLRC56MrMuUyB1rrgJdV0Q.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.599Z","timestamp":1782646977599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/SPHjrAcNloqUn5OKfIa4VkwyXv7GAdjxxZ4xh05FhwfmgQuAQpSgCsRgjN0HOVeMaqSvmEh_CIbzn5cAdsKkjn8aZLRC56MrMuUyB1rrgJdV0Q.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 1ee2d75a94d064ce\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyRtxE4KJG%2BYXMpXM9ZZ1sh7wsFxLp28%2FnPnYXcRmVvEtBC1OnEXlJb3oFc45eq%2BUiSrbBntDY%2Fd27Tjz8zOyi35ckVDgHTCR5Scvh6UyrjI7RAqe6KS5QeG46U%3D\"}]}\r\ncontent-length: 1442\r\ncf-ray: a12c6e5a0e798deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1442,"size_decoded":2146,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ee2d75a94d064ce827eb5d220414e00","sha1":"b7bfd08fdb81004fc9b3c0db19aad1c45de57ea0","sha256":"b01f685b06d6d6c36d23c35873fd6ef36e32ab7190f8b6ecc86aed4a998923e9","sha512":"58fc0202b0f3daa72bffdd9a79a813ca70a0b0bdccb55456d938abb8a40d4ecee56a66abe94aefa1c59b1745b917f7a7c1f5af983aaed5038ab4a1b54628571b","ssdeep":"","tlshash":"8e21e9e45624135a9641d4153d5fc17701967863d783cef8fbe082b6d23e6f38843862","first_seen":"2026-06-28T11:38:56.424122Z","last_seen":"2026-06-28T11:44:41.773087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/login","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.873Z","timestamp":1782646977873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1491\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /verifying\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQEhU38RKitcsgCoh%2BaWogjDkdWgUtl7jMMvALYOl%2FkPt6Sk7geY4Z8LtcdBzS%2FQV6jpNTI8aiOmKDFZ3rFHnYyTAWMZWCXIHF%2B5URa4vC2RFxkLbDz2f1r0zWk%3D\"}]}\r\ncontent-length: 32\r\ncf-ray: a12c6e5bbecc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/9PL5B_wgcy-pGhk4Emjkz5cPToov3nCDMLFvgN3-FEn8XMq3oD8a5b2h-4CQwOc7dk0ZxV7WWBSIz772XLxnW23Ru82o2NIbFTtEuFIRNktqTg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.103Z","timestamp":1782646977103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/9PL5B_wgcy-pGhk4Emjkz5cPToov3nCDMLFvgN3-FEn8XMq3oD8a5b2h-4CQwOc7dk0ZxV7WWBSIz772XLxnW23Ru82o2NIbFTtEuFIRNktqTg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 07fd3aee6038e1cd\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKiAHT%2BDl64jCKsLoVbzyd9cV3uHdxO1ZsTmyvjleObvA9TGRbm8q74U98FpHSiUZohBQCjPW4CTJ00hleYi14pbSYJLhEGC5csTV2krD4vgly1Tg90%2F5ztWI4c%3D\"}]}\r\ncontent-length: 10390\r\ncf-ray: a12c6e56ee068deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10390,"size_decoded":11093,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07fd3aee6038e1cd344b8cb538c16b3c","sha1":"97d93e34d76c0138a4e3facc00ad06190db5bf91","sha256":"74d346649b7c3b65291998f260e043183eb5b509c7cdc2c4a3bc0cd0a83f84df","sha512":"e85dac4894e5b006ef1434d7080c2d0a559ff043f20621cfb794fc9ee7fd135d4b706f1eddb2c83f68e2da278932c7099524a3b4786df735b4d0945fe455396d","ssdeep":"192:pnuy5f1+ZghbbPAVzvAg62LWt/x2dTCYO6FWK8KP:4c1vASf2AxOx8sP","tlshash":"0122c0f453f0b192da78aeb1f2d0097dd95c7603ba359615cdcf885adc68c8e4423a89","first_seen":"2026-06-28T11:38:56.428466Z","last_seen":"2026-06-28T11:44:41.755501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/velvet.js?v=202606151900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.436Z","timestamp":1782646977436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/velvet.js?v=202606151900 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:20:38 GMT\r\netag: W/\"3c6a-19f05ce5f60\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZmexptwCIZZG4mdr7TV5zc6EZ8Qc2P6fhPvuFCNVlprKCKH53NYwhDtrBTq4Lro5rtrZvCm4VyBzEdz2tcm4tmA8p%2FqYihcUKWdEXq7eEC6KzPdAwb2TRJBGEY%3D\"}]}\r\ncf-ray: a12c6e58fe3d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15466,"size_decoded":3069,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (15463), with no line terminators","md5":"262d5e95fac692b7eef5e756f519c976","sha1":"ef962d81463f8c2b995a28b0e0eae2364e215412","sha256":"ffa684316a6141e1bca3056e299019b7db28a2dd879c7d4581995c61cfff7340","sha512":"8d22613c5c5d72014f718326e9496cd94c476078f8536e5b31a2f684f63a9856850af051c5ebac3639b3e266113d8e6d2216f5111333bc1963fdae34c3910624","ssdeep":"384:+g3dfHXq/35/eqmT9P7T/9MxceAz7acPLf:+Dq","tlshash":"6c622627346bf10f10d947b1369823e698a6cd06c6cf510ab59deded70df9973a082ca","first_seen":"2026-06-28T11:38:56.37647Z","last_seen":"2026-06-28T11:44:41.773736Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/verifying","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.871Z","timestamp":1782646977871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /verifying HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1492\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /home\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfJKc39mWOuKWIiNIuhrQ6Dn%2F0jZDIKd64gfYZGCU1%2FweBwonIhn%2BNwDJS%2F2eudmfUavDWbXR%2FG%2FNAZZOsGZYd3TFlQ%2F81tlUl36ElUIQdE6PXvqLD3zYGdnSEM%3D\"}]}\r\ncontent-length: 27\r\ncf-ray: a12c6e5bbecb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/login","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.245Z","timestamp":1782646978245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1481\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /verifying\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KW826xIPeNrwz%2FRwC6h0KVY77lH30%2FBRBbrnMXVYoxdrR2uiSGuvgUZW3WjISbqqV3beVCQkyOjBguEeX6z881Y%2BXRS7FUK1otNpPfYXp2ka7C2XlKvALY06Kv8%3D\"}]}\r\ncontent-length: 32\r\ncf-ray: a12c6e5e0f0e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.376Z","timestamp":1782646978376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1477\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nx-served-from: page-cache\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35tAk7toESKHNsjNjDefE5cNmEWbeo%2BDyJT4tiYWXQVQeBEoTFuErzCi0E9cl9%2B0CssqtgHULEbp3K1EkpnBQ7OXRwjW%2FfsNIvguiQ44sRbefYl7JQytcQc5AeE%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12c6e5edf2e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":804282,"size_decoded":113924,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13095), with CRLF line terminators","md5":"87f0619dc130f0839df5376abd31c2b5","sha1":"c8e66fcec4a6295b9da44ce7f2c774e0461dc7f5","sha256":"33bf9660950ea95a5674ad3757aa13b71933607eba8e54b2adaf03130755f13a","sha512":"2cd875109387ccc78409e17c31153c000d81d78d7f807ffda8f2e409c990bc970c5ec158f3d70b4883dc39764d6570d00a06762184266771344dae2072294a37","ssdeep":"3072:lmiuVu3JKxM7Wgic9g+d0h9zgXEXUqYKJCpYvceHMxB:V+Sp7WgiUg+d0h9zgXEXUqYQ07B","tlshash":"a705dd62b0b7f12f41a787f53598539aa4b2ca09cacf0518b6edd7f423dec9679081c4","first_seen":"2026-06-28T11:38:56.383582Z","last_seen":"2026-06-28T11:44:41.76428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.779Z","timestamp":1782646978779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lxlis.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 294892\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-28T18:32:00.036376Z","times_seen":221113,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":39,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/qntSDMZg5TQSt8aPkH6poVLw5hhp2oDngiP8bWDYeE2thJxrUrqZFBw3NB5qVhd5aSGaeoSGY9n2U4RRT2G8yUlUWKKrcXejaEAWJDKVJVEt0w.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.116Z","timestamp":1782646977116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/qntSDMZg5TQSt8aPkH6poVLw5hhp2oDngiP8bWDYeE2thJxrUrqZFBw3NB5qVhd5aSGaeoSGY9n2U4RRT2G8yUlUWKKrcXejaEAWJDKVJVEt0w.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: ca9d5665d7cc040c\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUnDhhOI4gWgI8RaZGkAYG%2FB%2Fw4kQ%2BAahRCWy6sujR%2B9cXAGpjLm1tlpJhhGz01WhRZVN06F%2B3oQby6bPX4v1BaidsC556Zb8HEiq%2F4vE0ln3GxafBT26dvgFSw%3D\"}]}\r\ncontent-length: 2448\r\ncf-ray: a12c6e56fe118deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2448,"size_decoded":3156,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca9d5665d7cc040cf6d2d64b338034a9","sha1":"597606088d8ba619c27fc5a6429aa73d7f1de153","sha256":"bd17cb2d5230e1c20f876987d2a743b34d61ad2367421a42b3d5bdf3505c865f","sha512":"9c2ae177a4bc70c8318948d51554316c017e731de5ad8fcfb45cb2d5cb8de137654348786f1275a7b6cc450f1338cfa38991ad73a31a2ed048ba3aa658bac5fd","ssdeep":"","tlshash":"d1512b1d15e2f0e55e13e343f72454ae6cb22d920ff14f2856b6ebf452c21c42f512a9","first_seen":"2026-06-28T11:38:56.433353Z","last_seen":"2026-06-28T11:44:41.774346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/YWBTEuPKFHGSjH3Yh9ErTbPabLcQPQD1q6CFmR7EyT-RVbKH-uDYyRG6uINYKIrVbp3-WiT9dk9a2IjIRl_3IYwOvhgMHtXANCaXhSFlI3llZg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.586Z","timestamp":1782646977586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/YWBTEuPKFHGSjH3Yh9ErTbPabLcQPQD1q6CFmR7EyT-RVbKH-uDYyRG6uINYKIrVbp3-WiT9dk9a2IjIRl_3IYwOvhgMHtXANCaXhSFlI3llZg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: ecbc6fb50386b733\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxbmAk1iKydZaMWm6h3rc4txEtpZUezAQjkzhrZdnoiBbN%2B5u8dMSiK28djAMb7ANz%2BunLAWKdfk41Tbi4jZG78vl%2FMuerCI6ljQ7atob6KSYN25rnpOGi40qHk%3D\"}]}\r\ncontent-length: 2292\r\ncf-ray: a12c6e59ee688deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2292,"size_decoded":2994,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ecbc6fb50386b7331b8c83b23d27ca14","sha1":"24b494e14fa9ca666dd11fee2f9fce4b1865f2a9","sha256":"12b3cde09da7977c5ad5176eeca22768f7afd2b606abcb237f8a7601203ae681","sha512":"75d451ddebf75fff1620e1ad45a8dc7a58e36706d4d9e68bbf56b553731e25248adef4dc47a9ba5dc266ad72365283f3c5ba6f61766a5a34cfbdfd4eb4e5929a","ssdeep":"","tlshash":"6f412b011808f3f1e6612a7178adcd5e9e83101a16b0afb9d74b3ac8175bb9335575c7","first_seen":"2026-06-28T11:38:56.33734Z","last_seen":"2026-06-28T11:44:41.769337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/IKtfpEJXLdR9NlILbuviH8ZYcA78VMPk1g1N4wBsDs2h-FPH_-7zvRtL4pbc55L5dByiF-VsXHd8synd2lxilOZpofY6pQhMeDjXelURnnI6Tw.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.593Z","timestamp":1782646977593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/IKtfpEJXLdR9NlILbuviH8ZYcA78VMPk1g1N4wBsDs2h-FPH_-7zvRtL4pbc55L5dByiF-VsXHd8synd2lxilOZpofY6pQhMeDjXelURnnI6Tw.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 74513f5e359dfca0\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRUlE0U2usbPb%2BYoACDnu3XIKwlF3oXD2Wpl0vnT%2Bq6ZHmyBWSFwN7f05EuTARrm%2F%2BdApfS%2Bd1XkvRRmLBcDTksZSFTYDyZtR7U%2BYyUfAl%2BbARBZN6lNqqK6pO4%3D\"}]}\r\ncontent-length: 1488\r\ncf-ray: a12c6e59fe708deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1488,"size_decoded":2198,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74513f5e359dfca0faa26b0c241ee36a","sha1":"2601ffe8c6a4a8f78c9b1175e579034ca2690053","sha256":"3fb36e035de0b109838c2c014cd93ec716089c1bab620e53e044c97638f4dfab","sha512":"3d5d0a0f7d2d9e32ebb09327976e093445e17722be2948e1a69cb1ddf06631e256e540e24ba155106062e6dc8b11bd414ac8dc1523022434b0dbeda651be0253","ssdeep":"","tlshash":"dd31c93b1d982eb413cf5223b3d6e0e77640462c3d954bd399c53c59d1f961473926c9","first_seen":"2026-06-28T11:38:56.420622Z","last_seen":"2026-06-28T11:44:41.762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/login","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.622Z","timestamp":1782646977622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1495\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /verifying\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJQkXTPq3rQ0myflUwmUfKwvnhEfHsFrr9IHBM1FsQTZFvtRDGySFrT2KTWoR79ZOV2vydqr%2BAX4zwQtvnQL75FYF1jdPh4OAljr3Knt5ETlNgYhgl8kIKJNc9E%3D\"}]}\r\ncontent-length: 32\r\ncf-ray: a12c6e5a2e828deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/verifying","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.869Z","timestamp":1782646977869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /verifying HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1493\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /home\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOZoJjQnkiY7I5VTWO78ufR3Vzu%2F3udg%2FsL%2BLL91b0gLRxHj3Mk1r5fZ48eS3UPk%2BIu7WFcOvKvdZ2ABGdJ5qooclBEgvv%2FuZsqUY7pJWPFPVbExT8KAirxKcDs%3D\"}]}\r\ncontent-length: 27\r\ncf-ray: a12c6e5bbeca8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/verifying","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.319Z","timestamp":1782646978319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /verifying HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1479\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /home\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=np1pXFT5md%2FrhpIr57N0PdqZDREYyqcIRiAlAsWtV3E10y4pDwq307BrktWoznBl2HUccvUl%2BM2eDGQExq5zjsjo%2BLl3np5n6dc4WebvdAQN3%2F%2FMjIk8y6D1zoE%3D\"}]}\r\ncontent-length: 27\r\ncf-ray: a12c6e5e8f208deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.777Z","timestamp":1782646978777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lxlis.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 294892\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-28T18:32:00.036376Z","times_seen":221113,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":33,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/css/sidebar-scroll.css?v17","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.084Z","timestamp":1782646977084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /css/sidebar-scroll.css?v17 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:18:56 GMT\r\netag: W/\"2f07-19f05ccd136\"\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEKVVRDzEiInK4UxEtK8MYzELdqrJs7Ob6PMoZkww5V7pcdzss73xi2L1vqwRuLgN5gAOE96hvFFmzp%2FdcH2BVcXBwTEFSUH5LrOyg%2F7hxBIJuDmQoQ1OfmYfPo%3D\"}]}\r\ncf-ray: a12c6e56cdfc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12039,"size_decoded":3240,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF, LF line terminators","md5":"0a82f205016542169b41c97b9e235b5c","sha1":"1514b0b1e131d671f43bd023c9a5e6264d73576d","sha256":"7dc63b3d2f32aa7c2dfb10361ff1c7abec6ff3ac4aacea04ec47845c2442f6d6","sha512":"3b8b2ff7b5af4d7044414d177ffbd815ce9b998ba969eafef5539f70d20d772fb13bdb9225a3f59f9b79b2b4c823f2926febb9ac5f9e8e5b4c2d42dbed086827","ssdeep":"192:/iPKPCz1eQZIYzulEFWyhFHL2+oJxAvoo:/WkXya+oJxAv5","tlshash":"5a42df37f5c5148921374a88ebd3a7be7ebd0000a7020ebdb69a373853451eb8d19e58","first_seen":"2026-06-28T11:38:56.402599Z","last_seen":"2026-06-28T11:44:41.774847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/jW9QZwflPV224jIMZVRpenwoGrrBH3e1FIErL7r7oeGAkf1d_xtICj8Qtj_rbOzeqC1o-oY09pRh1xqqT634lUBKUU-tq-Z2Gj5T5V9Do7KBaA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.107Z","timestamp":1782646977107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/jW9QZwflPV224jIMZVRpenwoGrrBH3e1FIErL7r7oeGAkf1d_xtICj8Qtj_rbOzeqC1o-oY09pRh1xqqT634lUBKUU-tq-Z2Gj5T5V9Do7KBaA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 1eee5b579ff0aff5\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ue1REVo6QZCPMKIeu0AFkAqU8pkCCa%2BnY2X97H1xN3YqXOESURMf2sGy%2BfcALnbXOUWFq2DKQ0RtyTSlvTusQeXKiUXUnORLmM%2BbAvtFGqGUsXuueTr2TWeOveM%3D\"}]}\r\ncontent-length: 2234\r\ncf-ray: a12c6e56ee0a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2234,"size_decoded":2936,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1eee5b579ff0aff58fab2c2ad85960b3","sha1":"7d90747a7c633dcd467d7b29fb67626cae1dc6d6","sha256":"6296e53190879feffdabed8da071f1c66a92240fbc8ff2478d19b5f0f332125e","sha512":"790913873b23fa453bc9eb96dca26233cb295120e067f345e4d93a9238a01e9dc1d90633c79d0b84698a99365cb2c991248918ee862fec24a238909da4c8beeb","ssdeep":"","tlshash":"be412b35cc6bdf747539298feb201f7d5f60a8526a8c44b18db934253d51361aacd10b","first_seen":"2026-06-28T11:38:56.414262Z","last_seen":"2026-06-28T11:44:41.775328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/save.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.421Z","timestamp":1782646977421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/save.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlocation: /login\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gA2LlrM5qDyzPh3fiz3ayxRdAABijAriDE0WIpCch8EnJpVzMG%2BeYKuSEpwqmvMZ%2Bxsj9%2FDw06v8YJK3eSznqD4gpg5rlCW%2FO%2FjSkL%2FpKJ89Wg6p5AR8nLbjaVw%3D\"}]}\r\ncontent-length: 28\r\ncf-ray: a12c6e58ee328deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/tab.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.422Z","timestamp":1782646977422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/tab.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:20:38 GMT\r\netag: W/\"7c6b-19f05ce5f4a\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARXM9MdjcG5j6lYr3dxp78EbgjgK9OL7Rg6MWPXDq1ytj9GwXfpL%2BPJGNSw%2BWtznbglfsFj1CzJ3R7nCCTBXMYExGa6IXWPi8RV%2FtHWuQL1jvaKcyc6kHY4m4pQ%3D\"}]}\r\ncf-ray: a12c6e58ee338deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":31851,"size_decoded":4274,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (31848), with no line terminators","md5":"da451d757b4d733e52d8f60e2f854be1","sha1":"7e5cbafd9b452f8ba47fd77f319d33da5556e857","sha256":"6358f432bce6efbfb7c48436e36645f20386b19760e6367b63eac8b001e8522f","sha512":"703c222b2d5eeb6b77b072832832033cbac22206428adbf448ca87de38ecd92714edd80a618af9cd4e30cfc95027fd35f90fd02955515bb1d87e1ad13a2c1426","ssdeep":"192:bKRnOy+IkD9I1ILUsf33bXzdhGojFijTFBIg:bKRnOy+IkD90Ih3bDOEijTFBIg","tlshash":"b9e21d227c7bf10f10d51771329823fb88f69b45c6ce0a06768c9ea972ed89f266c5c5","first_seen":"2026-06-28T11:38:56.364568Z","last_seen":"2026-06-28T11:44:41.775878Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/image.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.423Z","timestamp":1782646977423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/image.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:19:00 GMT\r\netag: W/\"3e9d-19f05ccdfdd\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Sb1T4XTO74U9CjBh1LDDPdtk%2Bs%2BtRtvzTLzYKAad%2Br2vBk6R4DSQphjzSxPgmsIFtesNyeGYPhWhtnLQ7LavOjrAKd25SCxeNgPTJOG9Vv%2FLeJtzP8m11pA6xM%3D\"}]}\r\ncf-ray: a12c6e58ee348deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16029,"size_decoded":8054,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16025)","md5":"08d87376f8db5f29cb951bfda5067fd3","sha1":"762ecd7fa2e3ee53924fcd88ef80116862ab318d","sha256":"293f0582f63993b66dec15c6b8b8d3fcc207ef59ac124bea0daf1df9939a65ff","sha512":"99765e4ebff7522544929f8a5e5114603a15b5773b768f90954eba3423a710ab5ccf9adb58dc2d97e140002957d8f015b9a9b793d64017b06273d65fbc1fce74","ssdeep":"384:NKdbhXnjOnpJgsyRRu65/yXjbkNFdV9viFzCRQmM7HPCh2kBfSE:IZNRncXyFd3iFzvJ7HPO2kBfSE","tlshash":"7472c77557d13dc91e3ce18a7eb6897c0303a51319a699db92a27e9c3a1c87c34c0cb7","first_seen":"2026-06-28T11:38:56.416323Z","last_seen":"2026-06-28T11:44:41.776468Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/image.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/theme.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.427Z","timestamp":1782646977427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/theme.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:19:01 GMT\r\netag: W/\"19123-19f05cce1a5\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCfem9X6RHNLo03NvX13DD4IGa24D4JDoXzq2wwNtNf27rxxmyLjNfNjDtuEnmQqmFAe2hyV6a%2BPSzLanoweM6Vfn2KN14EX2KT3Buj4HxfauXtZoDGA%2Fd8S0YI%3D\"}]}\r\ncf-ray: a12c6e58ee368deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":102691,"size_decoded":41862,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"81622384c69d1aeef09c0f0716f883d9","sha1":"0a11ebf22a5d571d96cce57bfcb655b9629d10f2","sha256":"0075700f4ccfa2234459a6560dba2771246fe9ce9ab585839110d5ff97fa80b0","sha512":"555631a17d6a948b0630b26a5608c1c5417be4a8be30e3d9d73628203e34ae1598ae8e9efc903c5ec1773da6e257ca69828e7793f93a138040aba260af802c8b","ssdeep":"1536:MODR70Kr3YZp+CMOgWdO44mIDtB924/4KAsq5kckDzu2V4ioh4EB:JBN++Mdi9dOsqKu26mEB","tlshash":"bea3b77957ed3dc52928d54afbb58a380353aa010b92e6e315763dd8be0d4be34c0ca7","first_seen":"2026-06-28T11:38:56.36687Z","last_seen":"2026-06-28T11:44:41.776995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/harbor.js?v=202606151900","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.433Z","timestamp":1782646977433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/harbor.js?v=202606151900 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:20:38 GMT\r\netag: W/\"376f-19f05ce5c78\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23JByw5R5iQFMz%2FSHg1SBngxgXFrWWFbHXY6rdyG5JWd5gvw%2BO4aKH6cqLiZqZ4VcJA8b%2FZiEEsi%2FszXQisZonJQr8lLREvc2a1LmcDSpCSAX0qwyby5MFrxuHo%3D\"}]}\r\ncf-ray: a12c6e58fe3b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14191,"size_decoded":2973,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (14188), with no line terminators","md5":"f4505d580bb3a1246b57ed354d861af6","sha1":"2ffce25dd1da589e81918840461ffe59ad8a211f","sha256":"064083260a6260cf21d55613dfb276be24d9c0b98e48a35a4c5f02447507074b","sha512":"a856d41bed96522f8b8fd6ad5898e81c95587476c0d37588e2952f7f7f475491c8ff4b73eddc255b0e04e2b3fefe9b456a185cd88c2af0c3c6cc534aae799913","ssdeep":"192:pDUwpwh1vxHH8GBspQ1xU/cFeevjZgqjiWB0U/he6bue3W4lziwPhOA:lq1vxHH8GRx5FRe8iWOcqe39zvPd","tlshash":"09523726346be20f01da47b1369823e6d8e68d06c6ce610ab59dedfa70df9d7360c1c5","first_seen":"2026-06-28T11:38:56.36906Z","last_seen":"2026-06-28T11:44:41.777561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/sidebar-tags.js?v14","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.438Z","timestamp":1782646977438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/sidebar-tags.js?v14 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:20:38 GMT\r\netag: W/\"5683-19f05ce5e47\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I1KZntoivz%2FSteti8IH%2B%2BcdGE3L2cDVoVjQHhLO60WLmRGDhnoingCXpo%2F7K15FCXXHU7G6N5iyOte3sWAT8rc6zKmDr7Hk8FhBPvxeESSQYak5Aa5Q6HSl1ykg%3D\"}]}\r\ncf-ray: a12c6e58fe3f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":22147,"size_decoded":3918,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22144), with no line terminators","md5":"2e63ce2aff8d11d13d8538acf37a748d","sha1":"884968418c03db8ae20557af4e4051ca3b0c6631","sha256":"dd2f1927922120d5989d32b9b19b120bbef60c03d22ed1c8ad8aca79d990d7d2","sha512":"1aa82b65164dd90b6f02f89b35e6c63c296dae36f676f9cd522d3b03a5b82c79890379afc35745f1f277cc6067ad17bdade342908f66cfa9a270d0756d801087","ssdeep":"96:Z7z41TwUSSXnhfgZzNz4mZzDWO52h4zv5le4iVi4Ka674/Mh4Fvm4UpzqP42UgFB:15hMJB2wUEaxXhu","tlshash":"3ea25422b06be10f04d5c7b9354816d5ccb6dd46c68e4109b69cefea639ede73a042ce","first_seen":"2026-06-28T11:38:56.418551Z","last_seen":"2026-06-28T11:44:41.778165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/nav.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.425Z","timestamp":1782646977425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/nav.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:20:38 GMT\r\netag: W/\"2c2bb-19f05ce5d50\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122611\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qW8M4oc%2BqlUwSucUFVPHvlTQc8EMxlUnqIOg2H73wT55ICm4SZFr32XEXxGqAtuI%2BEww8Uj0Yh%2B7SGfbajb122hr%2BwP4LM06%2F3vlFkq4BOrI3kkjMn%2BzPgoXVE%3D\"}]}\r\ncf-ray: a12c6e58ee358deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":180923,"size_decoded":21393,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a03ac13821d301b6b19c2183505c8a19","sha1":"b6f211f1b6ea4432083ac247a10a69c9f49ad448","sha256":"d2f97aab298edc1b2cf9051b4e56d2de40a6771149149b240535369e5b6b4328","sha512":"700f54a4b99f7b3cfe204d93f6c25ec54ccb413ab61a8bb0774f825a9eedbd712ee11f6e2db6c09bd1d1776e71ae93674a93a713db0af509cd391a2382318953","ssdeep":"384:cde6YjtRVOXmsporhW0egsjOXshbQfBbBNMGRZN1LJicVrQtJkejqT6pawXEm5mq:4YjYWzJp4TWDMF","tlshash":"ae042c22786ff10f01d6477136e823e798bade45c6ce5509b58cdea9b0dec873a086c5","first_seen":"2026-06-28T11:38:56.331288Z","last_seen":"2026-06-28T11:44:41.778626Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.567Z","timestamp":1782646977567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Jun 2026 11:42:58 GMT\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-06-28T18:04:05.044426Z","times_seen":4889,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/yZw67nc91cjgQZtabY8n9m6pUhxaQnsCRZB2T_SnjgfWeom3GmIjOErpH17nTS9fQL4GNTGfenw3lPyLM9wXfAdzuXFqyE66zZ8L942W3x7Ahw.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.578Z","timestamp":1782646977578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/yZw67nc91cjgQZtabY8n9m6pUhxaQnsCRZB2T_SnjgfWeom3GmIjOErpH17nTS9fQL4GNTGfenw3lPyLM9wXfAdzuXFqyE66zZ8L942W3x7Ahw.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 7bbe78dd46aa05b3\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTdBrlxWlUFjyVHddG%2BMfkiyC4wb%2FaZ1P%2FmRjneu58OpvbjowMSL4luDkHsU0i%2FxGQCYt8zEYZCxzugKyRwGtT9la8PDGv%2FeDdH9JaNh5lGcnRnbzvDmR6lrLhs%3D\"}]}\r\ncontent-length: 4934\r\ncf-ray: a12c6e59de5d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4934,"size_decoded":5640,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7bbe78dd46aa05b3bea3e0f1f25caa4c","sha1":"6615f60d0c51b18db0b763785689f2c22b92b0bf","sha256":"a46c720680e0e4b1d562ccf9881e035c1ee39dbdf8f7d4c1f7449c78dab36c17","sha512":"f7e429c67a14a0673a3d87337ab7a3b672a63ed4784a4388656f7c7c2b32ddf70108523bcedfb70bc570c6c2a68ec135115da41d54e9583c698f52c2692f1a88","ssdeep":"96:j/+eJcFUyZWfsjWiTa7Y6cVk5QvWLNWEJBSPsnux30JO6Odn/dI1:j/rc6yZW8WOW64YEvSPsnuxeOdVI1","tlshash":"f1a18f6aabb354f20e095d417c7a410ffa87f835f64dd2589403fda14cd7465c24d2c0","first_seen":"2026-06-28T11:38:56.412026Z","last_seen":"2026-06-28T11:44:41.779698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/guD13wG9VFGCtEcPCzqh2Zd8xS4Qruj2ZhcAXD4JjUUZuDxqW3gC3ryA1-aKo6aO1z0QxPpPLe407MUg70LmOL-PHVOsYTedOJFBVlewCi6DhQ.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.584Z","timestamp":1782646977584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/guD13wG9VFGCtEcPCzqh2Zd8xS4Qruj2ZhcAXD4JjUUZuDxqW3gC3ryA1-aKo6aO1z0QxPpPLe407MUg70LmOL-PHVOsYTedOJFBVlewCi6DhQ.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 9da63585c0317d4c\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNMDoebfEK9Zti9xQGKDyLNi%2BKyBppE%2F5F4y8E%2BfN42DVMjGEHJzc7bdFMQcvMBe3VaSbX64nds%2FV28YXcfFMNyU6wnsS8iIk8lu3E575tfrA6T%2BTP1AUpXUXhE%3D\"}]}\r\ncontent-length: 2054\r\ncf-ray: a12c6e59ee658deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2054,"size_decoded":2760,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9da63585c0317d4c5712a831b4f62261","sha1":"42069392e5a9da2f265e476e3f819b716a10822b","sha256":"f413f8800113365b3f2c1e80a62653c36ae61cfc95f6a0f8692bc3e63a298e7d","sha512":"8b0967dfea31f8f8e03f0e41d143e00942455cc3c2a29f64b81e716878a9e3a74cbaeb2b7950f549a5415aa11ae4247239a7456eab8c724bb0c87229b13d9369","ssdeep":"","tlshash":"b441fa2a25f4c6b18f07d01562c02b0051fe86b762c6c642bccf73076ea5bb022dd61a","first_seen":"2026-06-28T11:38:56.34639Z","last_seen":"2026-06-28T11:44:41.770935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/V6HavDW0jawZewGfVQOYkrqKMBPcI9fvMDx7xJq8wFarzQNfvsgG5RVW3MQMieHeI-7eCmCdGSg9aZ8VMTCZRgF9yFOi9Sg82tYd7XPZ_2ZjlA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.590Z","timestamp":1782646977590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/V6HavDW0jawZewGfVQOYkrqKMBPcI9fvMDx7xJq8wFarzQNfvsgG5RVW3MQMieHeI-7eCmCdGSg9aZ8VMTCZRgF9yFOi9Sg82tYd7XPZ_2ZjlA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 7f94c374e76975a7\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLVBplD8Bx4JSWzUwJ8R%2FQsSL0dsCrTR8J2jUbyFQI79f7N7tUXS3jctWxb5UepbfjbXfESkw3QvVZLn%2F7Tu61KdqLh5qLMwXrBc7AdWyG9H2JmPbkC2VSRncIU%3D\"}]}\r\ncontent-length: 4116\r\ncf-ray: a12c6e59fe6d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4116,"size_decoded":4816,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f94c374e76975a7043fb42d52a54924","sha1":"9730567692aaeda1581e646efbbc9e912198f478","sha256":"9e18b5158dfa59ad69005b01eb54162da75874f56ab2323d1b63b4734f9b53b1","sha512":"2774e7d17c3ec941cf7dfe7c691da7fd70de84e7a18c77cfb7cd9970a3d8be030fbb563932bba727da8bb2bf6b0155cccb638066b465b148a1967ccfdd40f293","ssdeep":"96:GpfDjpmmd/Y1UZ290a7tFomoQNbbZMDsCbYqvIKcO:GFDjPY2GtOmJVK5BwTO","tlshash":"62817dc15a38b37d70268d2257810b078f54fd918e8850b668ae628326648f03a3bff8","first_seen":"2026-06-28T11:38:56.395764Z","last_seen":"2026-06-28T11:44:41.761164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/oVrLLNSZo0wqUMfMVwj6rC3gdU7Z1ayIGesXeimCzHATnWRggW1KObbAYRTDU7-nA6tYHG-TNvWgkBhmD7CBRxfPfOHHGlQiXOvHlk873ifPsg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.598Z","timestamp":1782646977598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/oVrLLNSZo0wqUMfMVwj6rC3gdU7Z1ayIGesXeimCzHATnWRggW1KObbAYRTDU7-nA6tYHG-TNvWgkBhmD7CBRxfPfOHHGlQiXOvHlk873ifPsg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: c71b2cb98489a1ca\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtK1CoynnUeS3geWr7lyG2cd%2BRIde3Vjoc8SBDyXcONlcRsoC4o7wCSk2Dc69sIHj8KuYfKh847OZbHGUJUHnIM6%2FxDkEB3pc5cSi0ZcW4tY0zC7Sibot0m636U%3D\"}]}\r\ncontent-length: 3340\r\ncf-ray: a12c6e59fe788deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3340,"size_decoded":4040,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c71b2cb98489a1caecc7757152af5a02","sha1":"a407d7c7b900ccdae7edab4703e87cfdd33412f0","sha256":"25b6fde7283051460a64b857128172d7e6b5d7df204d216d76d9930a5d333289","sha512":"45277361b85430f03c58a5c51b6cf32d54d0f493eaf6c0e1a3e96c44a096dee5d356fdb6a2d1832e198cda3a5d6d3e5e9bf27e08c0aeed16e3173b3df8b9bbe3","ssdeep":"","tlshash":"d3615e33acc2023eb42d95c32caab8f5dc0ce097dc2a551505f11bf7be69a6a63548d0","first_seen":"2026-06-28T11:38:56.378702Z","last_seen":"2026-06-28T11:44:41.780353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.939Z","timestamp":1782646977939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1490\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nx-served-from: page-cache\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DlC%2FUXheQ6%2FPTmovzP0NY1mafRwGUFGJQFx6mJef93Ydow8Fy6EPHbG7eELN8Q2j%2B9pufwxa5UVyr2r2GUx00krzo0gCe%2BNovt%2Fb7ews8tx0vCtcgMpU2ftff0%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12c6e5c2ed38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/9OOnKRLroINZQhdAYT_SLZ1sbMiGymfUfFAFBSqgPH4dqToTuz0LMzSZ3ui8U_GMvT-_ayt_13YAkvLJ4PFmTD3vwI3Lio35-hoyVxIdq3bXVg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.092Z","timestamp":1782646977092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/9OOnKRLroINZQhdAYT_SLZ1sbMiGymfUfFAFBSqgPH4dqToTuz0LMzSZ3ui8U_GMvT-_ayt_13YAkvLJ4PFmTD3vwI3Lio35-hoyVxIdq3bXVg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: d8061af67f2d71f0\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FM9OMcVrkVAfjgRkYyV%2FNm66Q0Wyb4ahu6XjvZENaeeBil4rglCfkRrbX5ytvoKn3e6nquQ66RDQJBaASz0LR077qCPXOyszaPWfpfTzXM5vj3RlIq1CRNSTXsU%3D\"}]}\r\ncontent-length: 7376\r\ncf-ray: a12c6e56ddff8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7376,"size_decoded":8074,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d8061af67f2d71f042398c55acd03d92","sha1":"b66f69ef595445e7539bae464a57f254ddff6475","sha256":"43b7b3bf46af2ab51a90f87fa973a7b8131fcaf25cf354f44604ba9ccc916d52","sha512":"c9af93449f5a5ebb76ba461f41213e99ae8d7dcdfbd418b9474cde7497defb70cd5ba8471a236d39483341d177704c2a077220adda760d061f336f98385b0bfe","ssdeep":"192:4lqWP5/ECDYSvfQnFWkA81uctLmN8Ktm3CL:0Z5/ESNwuctUs3O","tlshash":"49e19ec37ba77dcf85a34985647cfa005c4a3c56f318cd535a0b69686a7d5e2acf020e","first_seen":"2026-06-28T11:38:56.334351Z","last_seen":"2026-06-28T11:44:41.780968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/fa/css/all.min.css","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.568Z","timestamp":1782646977568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /fa/css/all.min.css HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2592000, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:18:56 GMT\r\netag: W/\"18db2-19f05ccd19c\"\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 122612\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMHkwRmLQWn2M1GCDuKmfhkjAXyeEEhC5DFYQiVR75gSTvyGXyjplZh%2BcIWG6oJi3U%2BGuTZDWGflNO7nbexWGb4LhYkD9MJICbgMiOzWkGih%2BStSNt0iRSVKiYo%3D\"}]}\r\ncf-ray: a12c6e59ce598deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":101810,"size_decoded":24981,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (52495)","md5":"b4f310b5e17c8104025e2ae530ec009b","sha1":"d83c9db8c99871ebc14071414bc8d68e249a1307","sha256":"ac8a2aa8a430694a8a1e5181cd3a2ace0f3e0ef18b5165239f9b5ffa33dbdd88","sha512":"d09d20db12655acd227befc18723899225cbbe58d75e9402b5c8a95d401c0f35bf2b50eb0bc4020fe27a625a2c8115f1671b22f17e6a8fd9ac8592c26c513125","ssdeep":"1536:JMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZC1:A709gMGFiyPGuZpfZC1","tlshash":"9ba3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2026-06-28T11:38:56.434995Z","last_seen":"2026-06-28T11:44:41.781554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/9OOnKRLroINZQhdAYT_SLZ1sbMiGymfUfFAFBSqgPH4dqToTuz0LMzSZ3ui8U_GMvT-_ayt_13YAkvLJ4PFmTD3vwI3Lio35-hoyVxIdq3bXVg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.582Z","timestamp":1782646977582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/9OOnKRLroINZQhdAYT_SLZ1sbMiGymfUfFAFBSqgPH4dqToTuz0LMzSZ3ui8U_GMvT-_ayt_13YAkvLJ4PFmTD3vwI3Lio35-hoyVxIdq3bXVg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: d8061af67f2d71f0\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzpo5LVW2ZduXVR%2B1m9qOY0447F5LdFhRfVA9sTecX7Yeu7EDX6EX0HIIWqtkrmm9Pm8eRilbCMbnJtMbxTe1nn0MOEVmJqLJefWZBxyiSOf3orC9nEJM3WVIa4%3D\"}]}\r\ncontent-length: 7376\r\ncf-ray: a12c6e59ee628deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":7376,"size_decoded":8074,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d8061af67f2d71f042398c55acd03d92","sha1":"b66f69ef595445e7539bae464a57f254ddff6475","sha256":"43b7b3bf46af2ab51a90f87fa973a7b8131fcaf25cf354f44604ba9ccc916d52","sha512":"c9af93449f5a5ebb76ba461f41213e99ae8d7dcdfbd418b9474cde7497defb70cd5ba8471a236d39483341d177704c2a077220adda760d061f336f98385b0bfe","ssdeep":"192:4lqWP5/ECDYSvfQnFWkA81uctLmN8Ktm3CL:0Z5/ESNwuctUs3O","tlshash":"49e19ec37ba77dcf85a34985647cfa005c4a3c56f318cd535a0b69686a7d5e2acf020e","first_seen":"2026-06-28T11:38:56.334351Z","last_seen":"2026-06-28T11:44:41.780968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.776Z","timestamp":1782646978776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lxlis.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 294892\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-28T18:32:00.036376Z","times_seen":221113,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":24,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/KxxGk18nFqZ-520T5bJ3W7XcZ1oDHL0eM5Y9b3pQhpF_dw-V8MF63Evm-3Yml8J6ZdVMJsaWq53cI6GpDABlWnqY1qCKEtNMw3nfql_9qP876Q.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.096Z","timestamp":1782646977096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/KxxGk18nFqZ-520T5bJ3W7XcZ1oDHL0eM5Y9b3pQhpF_dw-V8MF63Evm-3Yml8J6ZdVMJsaWq53cI6GpDABlWnqY1qCKEtNMw3nfql_9qP876Q.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: eb224c0a2c54cf84\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ze1HB7cfTpWmHoWhX1RcinOrCOiD8CKq6aOEDfy5njjszQUzgKGlqbSNog5DZfcT1eCs18mJ8pl5ZA276B6tMXjzqN8YY2R0sH%2Fhv7eaGah9IhXrLpbLIBRtDvE%3D\"}]}\r\ncontent-length: 2542\r\ncf-ray: a12c6e56de018deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2542,"size_decoded":3240,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eb224c0a2c54cf843581819be535eb7e","sha1":"94114bd4d9eb8fba7a8086e341d22204c5be1b7a","sha256":"5c283f27518b9b9a3d167cb0843756dac9d4ebcf37efe7809a06cbf9604b8300","sha512":"55c2aaaf231c5916aace49d78306155e6fe10c260872061f3b5dc6fbc740ce79bca77df32d6ae43f6130b4dbcc41510a8ba898771dfa8c5a0ad3e558bdb5df5d","ssdeep":"","tlshash":"2d51296e9bcb518101a65c6d6e137dfea243a0b7ce1021113024fabaa4573f1fea30e1","first_seen":"2026-06-28T11:38:56.393621Z","last_seen":"2026-06-28T11:44:41.767926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/ghCV1wc_8tUsnFf1RmTvcjq_a9QdttZ-YesBYxMMVmNy-mlTh6OjDjNYGKugr2xuiwIJNjaqVHq8R9SRG2Ra8aoQTunnZhE3Tyn98EROgb5ehg.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.111Z","timestamp":1782646977111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/ghCV1wc_8tUsnFf1RmTvcjq_a9QdttZ-YesBYxMMVmNy-mlTh6OjDjNYGKugr2xuiwIJNjaqVHq8R9SRG2Ra8aoQTunnZhE3Tyn98EROgb5ehg.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: abfa08402a03f1c8\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XUONIjsycb51CeKdCnTO20BxB%2BrbNm8ofyJMRIHHherNR6Lr0zM31I%2FwgbcMOgKtQyFSFFnOjcYY5IxKpglVvbDzuW6tbt7TSq%2Bs5sls4PKfaZ7YHHMS5fdZGk%3D\"}]}\r\ncontent-length: 2340\r\ncf-ray: a12c6e56fe0d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2340,"size_decoded":3042,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"abfa08402a03f1c85643bc75fb8549d1","sha1":"61d3795f133813a6cb343c10243c737a608cbbd6","sha256":"f7689bc8df502f1693a24083c4d408263d08cec448a92de6300170b6d2c9d61a","sha512":"bcf2442f6ec7a1fe2e51bb98d38a2ddc4929f4d3a7ed22fa1d217d1e2e06ecad076e5181672728ed176034461230e6bfc057683410cd338d37b09b8fa64f92a3","ssdeep":"","tlshash":"90410aeb3a929492e27b3ce1c19f6009f81508060865174bc0f6cd55f3e969bfc5d40b","first_seen":"2026-06-28T11:38:56.34846Z","last_seen":"2026-06-28T11:44:41.770422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/OP3gryCH26s5ei6xqVjsHeaDRm3F8ZGdCoP778CHdqSTJj5EmoTB02h6TiEpJ7fTdt_FAjyhMeFvVDbOMzEiSEfH8zGRqRl5daLR_kcBeLLdrQ.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.115Z","timestamp":1782646977115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/OP3gryCH26s5ei6xqVjsHeaDRm3F8ZGdCoP778CHdqSTJj5EmoTB02h6TiEpJ7fTdt_FAjyhMeFvVDbOMzEiSEfH8zGRqRl5daLR_kcBeLLdrQ.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 9f250b10772074d8\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIfcMyg%2BcGR%2FFOkWpejKZUmjT0cU%2F5%2BO8EpykDdEQUQTbpQGPCqgi7dZH%2BC0VOIhoNKX00LyYQLi6REsW9YCXfir3HCSshfx4sox7uAseHltOy8R%2BZRupabRetg%3D\"}]}\r\ncontent-length: 2354\r\ncf-ray: a12c6e56fe108deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2354,"size_decoded":3064,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f250b10772074d8f7e1a9eb89ee0d05","sha1":"a16aa9e7404bccb21c7fe94cf936429a5a35eaef","sha256":"128813500b4657907dc8ca6c686414064e395ee0047637c945fbdd99f269e87b","sha512":"74575c831090914b18f5117315f0ab59efe348719436633937372672ca38735efce45ee16b41e5671699ca3f6737797aea9e6636984691fbf377caf194c6a455","ssdeep":"","tlshash":"7d416bd92fe29422360a3746bd9606b688023bd03c42c94ff905e9fcc8342c677885bc","first_seen":"2026-06-28T11:38:56.422466Z","last_seen":"2026-06-28T11:44:41.782177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/1MugXSN-DAX8fbGmTm3XtDFEB0VFDFEdBlB05vq2-RCUEPVnAXq2C5JoN6CFH3UTqb0aiymtgQf6jwjY8CKao7xeQ2gipYHoQr_WRzxztzxa3g.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.569Z","timestamp":1782646977569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/1MugXSN-DAX8fbGmTm3XtDFEB0VFDFEdBlB05vq2-RCUEPVnAXq2C5JoN6CFH3UTqb0aiymtgQf6jwjY8CKao7xeQ2gipYHoQr_WRzxztzxa3g.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 43c3994ec7d44aa5\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=4,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3F8JyNQNE3vOoE4dXsHbgwyYUmwIJGgMHVCJ3MgMllr8wIN4Ebg4dzi0Nceqg%2F0IvGNvn5YYEzG0K%2BWWLRuniIdA%2BvYiQOOA4y%2FTHr3cBeQDXZI1gpAUmJ34zvY%3D\"}]}\r\ncontent-length: 6204\r\ncf-ray: a12c6e59de5a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6204,"size_decoded":6908,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43c3994ec7d44aa5febfcd9f0313015b","sha1":"10610ba6f4c9a7a9f56af81f18d572b91cd36a79","sha256":"240e3f306e66a1af34e3ddb681b46527e55d0a0c692ffc8710986ba5fd7b6e24","sha512":"fbd0249899567840a6fdbe04eac69dcdd0d6340e9f9131bb0c058b242be47c25fbce40b63ef6833562527a9c17268757fa852982ec4a1e8c0e2a93d1d4ccf37d","ssdeep":"96:KqwRCdSVR8t+FvBpMUh2PNdaFPTW0RBQD2EfNz0aJMQKTGm+/HlwBuS7FT7M5ORc:1VMB2Vx0RSz0OHKXOlwAdyBvRE","tlshash":"26d1a08d2912c4f935459687a85c0127e72af1032b0265dbfa02a6d6ec355d819927eb","first_seen":"2026-06-28T11:38:56.3711Z","last_seen":"2026-06-28T11:44:41.782715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/jW9QZwflPV224jIMZVRpenwoGrrBH3e1FIErL7r7oeGAkf1d_xtICj8Qtj_rbOzeqC1o-oY09pRh1xqqT634lUBKUU-tq-Z2Gj5T5V9Do7KBaA.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.588Z","timestamp":1782646977588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/jW9QZwflPV224jIMZVRpenwoGrrBH3e1FIErL7r7oeGAkf1d_xtICj8Qtj_rbOzeqC1o-oY09pRh1xqqT634lUBKUU-tq-Z2Gj5T5V9Do7KBaA.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: 1eee5b579ff0aff5\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZ68hgxqc0T7yK3z5ytVfzvr3p2djWdo4%2BCtUFtGxpHBAlDfgImp30KfOhDSBru2vsgXYr5Gk86Grdfu1na3kOyk6aMMDi1uSeE3ZiMKdquSrHwlCRGhJOFCF%2F4%3D\"}]}\r\ncontent-length: 2234\r\ncf-ray: a12c6e59ee6b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2234,"size_decoded":2934,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1eee5b579ff0aff58fab2c2ad85960b3","sha1":"7d90747a7c633dcd467d7b29fb67626cae1dc6d6","sha256":"6296e53190879feffdabed8da071f1c66a92240fbc8ff2478d19b5f0f332125e","sha512":"790913873b23fa453bc9eb96dca26233cb295120e067f345e4d93a9238a01e9dc1d90633c79d0b84698a99365cb2c991248918ee862fec24a238909da4c8beeb","ssdeep":"","tlshash":"be412b35cc6bdf747539298feb201f7d5f60a8526a8c44b18db934253d51361aacd10b","first_seen":"2026-06-28T11:38:56.414262Z","last_seen":"2026-06-28T11:44:41.775328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/d/UD0TDUckv3Nji-t9NHOr-Del12yQAfQfv64yPdX5YDZ1fAWNJGNFkBEYSqix2DnGauXQC4oALIZsUAok2IQkBU6PAU5E5j2teVoNqDjbHs9MbQ.bin","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.589Z","timestamp":1782646977589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /d/UD0TDUckv3Nji-t9NHOr-Del12yQAfQfv64yPdX5YDZ1fAWNJGNFkBEYSqix2DnGauXQC4oALIZsUAok2IQkBU6PAU5E5j2teVoNqDjbHs9MbQ.bin HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\ncache-control: private, max-age=86400, immutable\r\netag: dbb77c2af53da6e7\r\ncontent-type: application/octet-stream\r\ncontent-disposition: inline\r\npriority: u=5,i\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGoCb6iBNjVQahyyRELN%2FJngFtVi7rKc2begf8Lr4ledzPFklWtdD3vc4saoTiU9d1uc%2BAYbXWYqVPaDzlrkFp615uHWFydHfQCLKd1wQuBGCfi8U5d9PEXb54g%3D\"}]}\r\ncontent-length: 4688\r\ncf-ray: a12c6e59fe6c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4688,"size_decoded":5388,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dbb77c2af53da6e706a6777ebc5d58e2","sha1":"2d640d426b7ab09b130375398caa4c96b02b4e81","sha256":"390242ac63d2fd40e122e1a541714186c0a7ffb1d99adabf39b23cca228b9329","sha512":"f5a5c4401c62a2e9879f98f270938f846382c5be10f52ad07ef927030d072cfd6d089f07a641ae20d8debf34e108477a8ed7dea2205f11147d0e587e8daf47c8","ssdeep":"96:CeIXteRs5CXm5ZK0adK6eCNaV4klTvItZYUYwnPE/KqYHdQ+jf5ZYXlrE:ClXteS5CXm5UdEvV1Ubvq0dQkfYBE","tlshash":"87a18d4b877d412e9d7141aecaefe2a8f81c11ea03aa7c3030df1ca5ab09682033449c","first_seen":"2026-06-28T11:38:56.359839Z","last_seen":"2026-06-28T11:44:41.752974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/api/pgp-public-key","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.091Z","timestamp":1782646978091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /api/pgp-public-key HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nx-powered-by: Express\r\nratelimit-policy: 400;w=60\r\nratelimit-limit: 400\r\nratelimit-remaining: 397\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nlocation: /login\r\nvary: Accept, Accept-Encoding\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fqs0BUO13LpfXjWWpH3mf7%2BDtMA1HzCt6ptShorO%2FXK%2B%2BqGdf4cszcK3kAVyy0H7dHAbFZnODAAUuUedjTnMFmfnpkg%2Be9JVRDov6RmfvukokIOlckhZqmGBO%2Fs%3D\"}]}\r\ncontent-length: 28\r\ncf-ray: a12c6e5d1eeb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T18:32:18.418875Z","times_seen":16800512,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/api/sidebar-tags","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.101Z","timestamp":1782646978101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /api/sidebar-tags HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nratelimit-policy: 400;w=60\r\nratelimit-limit: 400\r\nratelimit-remaining: 396\r\nratelimit-reset: 60\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=60\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"b-hsI/cCKfmGSM41S6uHezTmNWBBQ\"\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrQub%2BIJjy59BDbq%2FtA9W6XRUH4pNJ6z%2BahTB55sCcyzgWBDMkFDtVDaQ4tGy%2BzUFiPLfrCXlLJBwGCkf1dAf%2F473GwlM1byNCxtVyYrs12eGO3yJ2xmrPxFBEg%3D\"}]}\r\ncontent-length: 11\r\ncf-ray: a12c6e5d2eed8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":1136,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b5a1a4d42bbd4d7cfe1a670d8134d026","sha1":"86c23f70229f98648ce354bab877b34e63560414","sha256":"b35b1ec1c0c72c4bbd16bd9d6c2cbcac8224272cd7e6ecf504a78f2c7e989b2a","sha512":"caa2f640f1dcf8e75be0319b8f93307e46369b89bc0ed740b8cb1f71f4a3e45de44f20b4e95278b949f9ae2bc23a97319f8102b69771436b361116b7e9c82c90","ssdeep":"","tlshash":"555000000000003003000000c000000c00000330033003f00c0000c0c3000000cc0c00","first_seen":"2023-04-10T09:50:46Z","last_seen":"2026-06-28T11:44:41.783225Z","times_seen":550,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/js/ui.js?v=202605121226","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.432Z","timestamp":1782646977432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /js/ui.js?v=202605121226 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Fri, 26 Jun 2026 21:19:01 GMT\r\netag: W/\"542c-19f05cce1e2\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\nage: 104463\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ardDiSWCg%2FrqnYcvuRF5n8Rhuge%2Fl5BmGUh3w6xmocAzKSx9hjqng46w8tx48j4M9j7bDBgDSmIPQ1a5wFTvVUk2K7DK83G5iX3%2F2GRWqdwTI7OJShRYm4MR8sU%3D\"}]}\r\ncf-ray: a12c6e58fe398deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21548,"size_decoded":6894,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21544)","md5":"d4c952ce1e3eab48fe4c8dc2b4229cdf","sha1":"b865aa0226f6e837edb6936f1b523257047591e0","sha256":"6c318d7b5098bad6860a3b33fce90dd3e99cbc7ae5987db819ff28534cba386c","sha512":"18037ad887b2cf96ae4d74d2bc339538d6f8750dcbca0fa0ec795893b60b2ede006cc3a30cd6f1d6aca134ef49c41fa391122fae6106ac798f24b2f979797b1b","ssdeep":"384:L20v6Mwk8WdSp4eK9YIM0HYVZ+Pp+fdvwJRmZ4ihxNZVYPPx0XLXJTX2Q:L20v6M9CSM7XOMxNZMPx0XLXJTmQ","tlshash":"55a28632cb833bc68aa53760bb71eaea1111949314604ac7a2551ecd2f1a9cf07d5ef7","first_seen":"2026-06-28T11:38:56.438409Z","last_seen":"2026-06-28T11:44:41.783729Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-28","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"lxlis.cfd/js/ui.js?v=202605121226","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/fa/webfonts/fa-regular-400.woff2","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:57.865Z","timestamp":1782646977865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /fa/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lxlis.cfd/fa/css/all.min.css\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000, immutable\r\nlast-modified: Sun, 21 Jun 2026 03:50:44 GMT\r\netag: W/\"6174-19ee84d5a73\"\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 11:42:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 121983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VbvdELKpOXuZPfTNfVjVIki6NuDH7luGDKQjLm2VeNyaurU%2BYP%2BCHgRRdefPfHijwp%2BZMgIByUoVNRtUfTOS%2BVGpiRtVtUkRmrwHzEmDpM9l%2F1bNXf4Bn35Bnw%3D\"}]}\r\ncontent-length: 24948\r\ncf-ray: a12c6e5baec78deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24948,"size_decoded":25698,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24948, version 772.256","md5":"61f30b79daf5b31f0d254a31fba66158","sha1":"fb363d27cfdfe71a243fa2ac3dab2815232b9b7e","sha256":"8e7e5ea1b15f62ab14dbd41768e8fbcd21cc859a4ea5da812457ee714299fb35","sha512":"db6f82dbbfd0c77d1b34074ed2eeaa8659924ab1a4320fdeee93eec36ab98516fd92836765ced03f0acb70d153ac14c4b50b7dfcc8f105a995fc4e65bffbdcd1","ssdeep":"768:E5ZyQM6ylMx2k3xyF7RwyXb3QoqKGENDWteN:E5ZtSMx2VhR/bACGEv","tlshash":"6fb2f12c52f0ffb7d4c74a2ad8b84f2218e2b030e5f19111b44ce8b5da4bac8945a327","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-06-28T17:28:54.646715Z","times_seen":9582,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lxlis.cfd/home","fqdn":"lxlis.cfd","domain":"lxlis.cfd","tld":"cfd"},"ip":{"addr":"172.67.131.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lxlis.cfd/home","date":"2026-06-28T11:42:58.103Z","timestamp":1782646978103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lxlis.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 22:07:00 GMT","end":"Thu, 24 Sep 2026 23:04:05 GMT"},"fingerprint":{"sha1":"2A:4C:E5:F6:F5:CB:FA:03:03:82:E5:D0:47:C6:80:A0:07:E5:49:20","sha256":"D8:29:03:F5:67:40:C9:DA:87:FC:C0:50:E2:FF:BF:2C:F1:C4:94:C6:B0:3C:BF:45:E6:E4:97:59:A5:75:BC:7E"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: lxlis.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ACj_H9arj2LpJ3YZ_ENObJ0a-pzJIRvx5.txx3lvcJWKN1yWrFlJA1NqM2ZzuA2F%2FlR0C7CM4dOcM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nratelimit-policy: 1500;w=60\r\nratelimit-limit: 1500\r\nratelimit-remaining: 1485\r\nratelimit-reset: 59\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(), microphone=(), camera=(), clipboard-read=(), clipboard-write=()\r\nx-robots-tag: noindex, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: private, no-cache, must-revalidate, max-age=0\r\nx-served-from: page-cache\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hz%2FaMxjTm1sjMcLwC4mbrfhpyxOyas3pmZ9bj1TPw7j8seCkOZw6gCzgFCGYeFFAjk3Xvrr%2FiTJ84wP2UhB2mSEoWZHF7unQQwNsNINtylTnOHs2RvjHBJ8AvxA%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 11:42:58 GMT\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12c6e5d2eef8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":804282,"size_decoded":114026,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13095), with CRLF line terminators","md5":"87f0619dc130f0839df5376abd31c2b5","sha1":"c8e66fcec4a6295b9da44ce7f2c774e0461dc7f5","sha256":"33bf9660950ea95a5674ad3757aa13b71933607eba8e54b2adaf03130755f13a","sha512":"2cd875109387ccc78409e17c31153c000d81d78d7f807ffda8f2e409c990bc970c5ec158f3d70b4883dc39764d6570d00a06762184266771344dae2072294a37","ssdeep":"3072:lmiuVu3JKxM7Wgic9g+d0h9zgXEXUqYKJCpYvceHMxB:V+Sp7WgiUg+d0h9zgXEXUqYQ07B","tlshash":"a705dd62b0b7f12f41a787f53598539aa4b2ca09cacf0518b6edd7f423dec9679081c4","first_seen":"2026-06-28T11:38:56.383582Z","last_seen":"2026-06-28T11:44:41.76428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}