{"report_id":"e56a3857-efb6-482e-bfaf-6b77f306c1aa","version":6,"status":"done","tags":[],"date":"2026-01-27T13:36:32Z","url":{"schema":"http","addr":"xcrecacuold.digital","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"104.21.46.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xcrecacuold.digital/","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"title":"Helvionex","dom":{"size":133576,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37038)","md5":"97b991515cd2484a7734b375b46daca4","sha1":"d16debd1c11c5c4e0ccabb5331e5fa78f5c7f167","sha256":"3a888d286263d398e8bb90ab42be3afcb447aac9355420d0787b8d1825c0dd60","sha512":"d36a3ca4968d944661b1231c5a66caa21e0ef30e5224c048cf2355c030fe7aceefa0a0de6312a23b7e7fa251720c751bc6b01082afb098f7b15da29c41a79595","ssdeep":"1536:/oJVjiR7QeqF2PtsEJPjQBq1Wixx2aX38RCmF4ybK1nLtU:FLqYH8tX0q","tlshash":"49d3df23056a34221533cad431aa5b37e2aadd4bf9970a003fecd7e65feac90715721d","dom_hash":"domhash17f4ea4f95e31ac8320ea9b155b62a2e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xcrecacuold.digital","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"104.21.46.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T13:36:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xcrecacuold.digital","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":294,"request_count":49,"received_data":1536435,"sent_data":39498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":4,"received_data":384048,"sent_data":1953,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-01-21T11:31:32.920055Z","alert_count":0,"request_count":1,"received_data":2476,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/global_lpn_1_2/validation.js","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5ec8fab2fe5f2ea37688e53ac17e107","sha1":"7fd97c718f4c7803166ac1651d08ef44d41baeb1","sha256":"0ebd806817fa3379a90117bded52cd86259e5b8168eeae7b7dcc1ee95bb33ba7","sha512":"a0063ec46538d44fd21bcb65c2f6027f67f129401e5e30b146a986dd16414d578f71490d0cc29be6b52d81e5e36cc367b4e06d9f42126714c496a70357777c03","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrSjWDsknMOPOQ0hnu4oGW0s3ALOwu:WOWLdUpFVkda+pmQrnRhrSj0BmQZvGto","tlshash":"90b173e870f10519693356fd26df510669d9710bec45d98e3ecc83800f568e8ee9a3ec","size":5310,"data":"","first_seen":"2025-04-18T11:50:01.200675Z","last_seen":"2026-03-21T18:18:01.318425Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-07T02:34:18.150961Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f59d21e779d859a183266e5546e1ed5c","sha1":"367ee33932e71dc189d4a624a1d87c7b6eee8883","sha256":"963d5a4b9e56bb5b169d7abc9e3b30dd9509121604348045115e3e6dfa34c62b","sha512":"13d6e890bafde92538eb8ac2e8a3ff601e24589ec44e37b70c95dcf88dec5629bff22775a7c82c0fdf3c8564579ea2cdd89dc9437cdc19b533d2a977e0ec1b48","ssdeep":"","tlshash":"62e02b2b45b504b1026b9666e7cbaf85e272004f5445660abd4c4b3a3fd0dad24f1fd2","size":315,"data":"","first_seen":"2025-07-25T14:18:50.902408Z","last_seen":"2026-02-19T19:52:17.587985Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-12T13:49:54.211301Z","times_seen":1514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/global_lpn_1_2/default-integration.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/global_lpn_1_2/default-integration.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Sep 2024 07:22:34 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 11:20:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 8142\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0C5WLOcEdsPYbJ7CEMwRyQp6lQc9%2BytASgGBwod9%2FkvRiOeN7stvD%2BfpgWIbh09NnYLCFNp2Hld1ooY%2F13fwEwlw6kKDUGs2D6dUsMGFKjC\"}]}\r\netag: W/\"66d6b93a-3db\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a331fe26b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"241d8b07cc198e58411536bc5db6f958","sha1":"5455523aa41adb2e115d789756c59cde2bf84c76","sha256":"32469ef50810a6569bdf5e0407f68787312b5dc86beb0302827b46e00fedaa15","sha512":"6ee3112bb2d0199f4c52375a1fe98ea7607ae1ddfd8bc30ad848cdb1a549af626e5e504fca8ddaebe9602272ffc2cdf48acf41cacc18e72dc7b45ad2c29b6741","ssdeep":"","tlshash":"1411eb160a660a35a41bd2b46a653a2573191843770fec3b26a728284fc619e127fbe8","first_seen":"2025-04-18T11:50:01.196685Z","last_seen":"2026-04-02T05:38:09.365454Z","times_seen":348,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/left-cloud.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/left-cloud.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3922\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-f52\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwH9kNQJ86UbZG%2FiZX%2BJX22ixom5RxrLE7ix3aD%2FCiXaupgaMvwFHSrqahMmHxDiTvxKw5Rk7i8Hb8XMyrBBwom51jK61nrI5un3OonhwS%2Be\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3320e42b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca9ed4984a864a05ebd30aea613ebf28","sha1":"01d794a21d7a686984c8957f097a2daf712662a0","sha256":"6b99013d6c7c74fda8660bba4d50b6c3c3cb9fc98c0567a5b6f5740ce98d4c13","sha512":"da260ca32d91f048c134f89bab9252053a9e4500799cc7b8e0b0460437bc8f32f875d8c358c600b02c692496d7096c0ca11d8c9f4ed40b1668bfb1b35ca6ff4b","ssdeep":"","tlshash":"40817c4d3a2e901fb7981c5aa2f30afdc134840b6621ef70767135e5cb2aa29459d4e5","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.846281Z","times_seen":74,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/coinbase-icon.svg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/coinbase-icon.svg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfCJcvn7K3tjLaNTgAf4jempJFGg7y4ndq6cyfMMmBt9O9HKGOzFRjAA6rVi2Ut6r%2B1vETM65KUF442%2BMRlcwlu3D4kIeXPjmG%2FyBg47julL\"}]}\r\netag: W/\"691f1ea3-217\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a3320e4cb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb3ac288a680748e699accb1bbc27b8","sha1":"d6321eb04ab71067912af39be6f475400cfb27d1","sha256":"d40f2d37d800e32067b898b9de2b755c20a6ecd44dd4ffd511e61978a3470118","sha512":"cc807103bdacfd5cc1620c4df5575a6bdda6d96d054c340fde1f0ba2c0044450fb319c37a6476c03dac45de49ceb93c08b56d06de190cb8a137fb1d0dd64b374","ssdeep":"","tlshash":"64f0244aa7445a646f2c5e16192494ed03dbe7e9dd8e8368c68c9f02b1d1e867c0de44","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-03-22T13:12:40.843039Z","times_seen":135,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts-1.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/fonts-1.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/popup_style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iv%2FX%2F4U2qaRLeVteETN8g3zdG3i84932DLt5O%2F1wIIefNmtQ%2BwyBxFOIW7XCniQbCbrZPNPwM%2BCjuzgnSnnijNFFL9m4wNrpkpAg4WGOkuJs\"}]}\r\netag: W/\"691f1ea3-1e8\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a3333f8bb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (488), with no line terminators","md5":"0c42fd0911414b46f3fa9de49b0f12c4","sha1":"81a9c16b375b0f8811c9d46345264a37137fece9","sha256":"28ff97dbbc84ebd2613a1dd24b71998d559d990a3fa34530948a3b0b6bcb5b58","sha512":"39684998caee5ecd207bbd39d79d4d1b4ad91a4b1606820dd8c6b82838fa96ac36b1a4859fa5f0a2d61d917dcb856a26dce30e2ae45cde723c07f7dc36c6bbd0","ssdeep":"","tlshash":"4bf0f8a885add202b5325d9271cafa123d4ff4ab00715db6e81e4c14ecd6ca306e0f3c","first_seen":"2025-06-15T17:52:30.428999Z","last_seen":"2026-03-22T13:12:40.819994Z","times_seen":71,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/like.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/like.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1006\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-3ee\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HEOPyeTfv1uoAPYaavNke30S3NrAw4vJNvcl5vQ6KKhgPM7dmAJRO%2F%2FEsbtlgxEODaTLXkVdz0i9WYSzWwLwrZ%2BO4Wv8We2o0NIoLqfLDrcn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333e84db4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"656c29963c192316ed36c229427f892c","sha1":"6818a1b313fc5c1391b85d73ab865e6bdcfe4455","sha256":"fe6686f8ced6bf62edd84be94433f25e51126be873f67872ad13f652ab492fae","sha512":"83ba767078330da60da23c23fd3b31dd92cf5679bfc7bff628d2daad03045c4671006861b097187fa766e1597a781180190d659b0bc3bae7ec7f040b35ab2c70","ssdeep":"","tlshash":"84110c185dc0ad43c43330f9edd9f440def715090b4a8f1c635342e51188c43c882477","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.822675Z","times_seen":121,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/newikonflex1.png","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:11.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/newikonflex1.png HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4348\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=6,i=?0\r\netag: \"691f1ea3-10fc\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEP0dysMY%2FVvw5aPEMxPOlfK4tIThk0OeYTrz4dWN52cTTj%2FqawiUL8s%2BGI6f2vZJvscU1wnC5Fe0UZauXDYt8R64LYHakYU5vLqEvG0obZS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3368b74b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 188 x 220, 8-bit/color RGBA, non-interlaced","md5":"87664523a31fa7aa19c2f29ff77cc266","sha1":"c98d8463384182e70ba3cee2002edde5a98091fa","sha256":"7a134dcb7290a780a5c25b43fa0a3303cfd2b850190f1b32e424e77a8768eef2","sha512":"12419c9bfe6c2f7a9f6f6b35377b91b031a878ee6e123ce4251231492f170afb5604fbc060adb3c1a264e95e0d9239716aa5abcdb58f9ea31fa7f658169ffcfe","ssdeep":"96:UD0JBZppPlaYoGM+ESfPrVvxAfD1cuBLQso4n38x0o:UD0JBZ3daNGM+pr14DzEso238x3","tlshash":"be917db7fbcbd815a712976d7324416629bdb427180cfb4f5cfd484ea204859cc05767","first_seen":"2025-05-05T11:26:06.414517Z","last_seen":"2026-03-22T13:12:40.820592Z","times_seen":70,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/adaptive.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/adaptive.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1ea3-482e\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6FkAq7ZA0xnP1sVjp4LmDXjuR08cZ0Jgc%2BFJhhMmEC0rfot5jXcaTsMn%2F6IZ3Sl0u9mdNpwcRg%2FVU6J8AbMTUOHAGyJmsXRfMXA2h3Xz3AD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe25b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18478,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18478), with no line terminators","md5":"2c008cd3b71b86df805a25338e1edefd","sha1":"8d1dcac54d69ae5958e4625653c60c213c070110","sha256":"6cdf3842992d1134b16d942f9c976c50e6c85e47a4aec28010074542be261472","sha512":"442e4e2caab6741dca9648294dbd5a1fdcc02d612ea9a86e17b64e38aa6fe112238fe25b90e965854d0e081546cd85a8dd1f1c3ad28bc6bf07b49a01162fd58d","ssdeep":"96:d5NAlCGKLw6J+3usFpRJ6OTDVRgAmvt3suYovjm/vnvUZyAfbSNhRJBNlRR0qGCT:FiXBJJbfwtdYoLA/cf+hxR0BCEMU4cO","tlshash":"c0822f133a1524b8b00f5e91bea591e47024db35b35721fbef12d932e39a3a247b174e","first_seen":"2025-07-25T14:18:50.870543Z","last_seen":"2026-03-22T13:12:40.840831Z","times_seen":60,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/popup_style.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/popup_style.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1ea3-12d0\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2F8ycV932u1VJQSeYxynaRb1hBYiHbzmYA%2F2Thr3UQEg1IMU8yRmZVSL0VfzL64%2BKaFuslZ2QRZDk9ThUWFfhxPXB6pvhDKuHmO8xnmkWe4V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe30b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4816,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4816), with no line terminators","md5":"b4e5ebff7a0ab81dc3509cb31bdfb123","sha1":"26481263e97f1ff69fc5ebd2bf10f8d6abaffac0","sha256":"047159025d850958056cc8d353458c80042c36a7d39b001949100d99c8df44ef","sha512":"1d9adae666bd3029b7dd675f13ecc02265107eedef281d69c1814d852379eb88c37ac89112273803d53de8924ae403f3bef69f166bc258e507673ef2a98817db","ssdeep":"96:JvisNBtaGoIA/F3cVYLkMjIJAVJmg7jGrwBI3wrHvqxZ4T:J6AtGHlciLkMeWJmejGrxwrHSm","tlshash":"aca1fd33e274fa68b52fd466e053256c3028850ebb77ddb6da50ae3ac1d25a3172433c","first_seen":"2025-06-15T17:52:30.410039Z","last_seen":"2026-03-22T13:12:40.845692Z","times_seen":71,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/small_coins.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/small_coins.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13166\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-336e\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTH4M%2B9b8wcetgcnNlSNXwG%2B%2FHR1GgDxY962DMoaXBaJm9AyeuQTZcdsbIW2pRWJiG%2Bwk5ZTB%2B4Ix%2BaCGGhBIFIrtJOcW5bk%2F0pdPfw19%2Fd2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3320e4bb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1b172f58a4b8d5d2a9d41ed6f2e475d","sha1":"209c75f12005726604e59a5a5ae163ce8200dc8c","sha256":"e7b2693ebe1e3652e4f15486da5a44825134f92978c7f324f2ed0d12cffb5c72","sha512":"ec7fe1946f4ab071379fd358e3f1c9ced372d006b14258fdd8efb3e3bb79e848349074da201e7c6acee088cd741e043d39779ed16e4a9c6ff0fb04c060ff6188","ssdeep":"384:V+jPReXigExu4K3Lh8+CooooN78+07Ybp4c9Gt/1FQWxf+08:qZeXV3Lh8+CooooN78FYbp4c9Gdf+0","tlshash":"8342adb0bd88fd6fed3e9631952ade44ca47fe380711823ca307373695af1969469809","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.842483Z","times_seen":74,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/global_lpn_1_2/validation.js","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/global_lpn_1_2/validation.js HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Sep 2024 10:37:59 GMT\r\npriority: u=3,i=?0\r\netag: W/\"66d83887-14be\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5QcI7kmMuM32SNqZihMG9OxCti3guOLEQkPILhl%2FOxMLgU5%2F2u%2B2eqK8ncZt62uAHwKu7AYyVf5wyjXbGdG38jRzQ%2BXT5kr1Z8knQr5Z6N0H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3321e66b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f5ec8fab2fe5f2ea37688e53ac17e107","sha1":"7fd97c718f4c7803166ac1651d08ef44d41baeb1","sha256":"0ebd806817fa3379a90117bded52cd86259e5b8168eeae7b7dcc1ee95bb33ba7","sha512":"a0063ec46538d44fd21bcb65c2f6027f67f129401e5e30b146a986dd16414d578f71490d0cc29be6b52d81e5e36cc367b4e06d9f42126714c496a70357777c03","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrSjWDsknMOPOQ0hnu4oGW0s3ALOwu:WOWLdUpFVkda+pmQrnRhrSj0BmQZvGto","tlshash":"90b173e870f10519693356fd26df510669d9710bec45d98e3ecc83800f568e8ee9a3ec","first_seen":"2025-04-18T11:50:01.200675Z","last_seen":"2026-03-21T18:18:01.318425Z","times_seen":233,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/Montserrat-Regular.woff2","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/Montserrat-Regular.woff2 HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17208\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-4338\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WnoE5CxsyGiJ8hbwygE%2FU23u7QS88r7ie93Ahkr4dTrQkwDwOmLrt8k8V5O6LgXc3eFuV05e%2F1UvIGrIOwz0gs1%2FHUDaZkfCWdVHzeHkJs%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a33448edb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17208, version 8.0","md5":"8f29bf9c31654fa1d8faa28ea1e9caa0","sha1":"133bc9f8a3c8bb8dc371478319d3493032719c64","sha256":"81e1ca9dd83ee44f626853012d9ab80c2a02eda8d83ae7de2d22b3c10135c540","sha512":"d81bf62cd2aebf030a1f2ac6b8fff93edb44d5f290d963a30425bd2468a90b1120ce0e32744a5f4f9db62e583fd558cac189a5619b377b0ebdd2d3b56ca49b95","ssdeep":"384:Gjclwwm+ODcu+Pv9G9WpsgXWnWOhf7OzM5YoElBXd:IcBu+P4wsgXWnWOIzM3IJd","tlshash":"8272e1974e5e3607f1a6bca1a2b75239e6656c62802b33a27342c7109df04916f4bda1","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.837657Z","times_seen":88,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/TTFirsNeue-Black.woff2","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:11.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/TTFirsNeue-Black.woff2 HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30904\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-78b8\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if5SnD5lZXUfhhKlsqxq6vekIJhWBOd6btnb2UqKuhmhrx8NXrUUcvLMmVTVlxInfB0eV9eTmVljCpfUMugkqCIkaS%2BwIz9NAC28LiReof4%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a335faeeb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30904, version 1.0","md5":"f439d9e3c02a3c401605e206eaa0dfeb","sha1":"1a668350a1f9602c6c4d2ab17ed4881372d6ef2c","sha256":"fbee3fd150c292c81f25c4fa0fba2b21dfab16241275615e94d292cd7e8dd140","sha512":"e790dd365b43c8e02139b0bf770fbc997c5a98799f94cbf80f848e10b327653a9de8fcdc3fd03d20e409609a6f91ec0f2ccb3662dc50696ca06f01dabf23dbbf","ssdeep":"768:h/2BNsbFnVEg34fGbYHaumeqzHjxLqH7ar0ZIw/exJkB:peNuFCgIPqH1qlWw/WJkB","tlshash":"ddd2e105da1daefe79ecf4c892e7552aac9db228b946d09e0df0888540333d0f67d8c1","first_seen":"2023-12-27T22:07:45Z","last_seen":"2026-03-22T13:12:40.823183Z","times_seen":75,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/fonts.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1ea3-24b5\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQUezZj55P%2BE0kbkp2RD51LhkS4lLGJoOgHJGbEKVSp3AU7STY8QHQb4KsCAEuuv8HrGV8%2F5l6JcWsCX%2FbQwPOEZPp8gbQZ%2B1NZTL2I13a7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331ee1bb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9397), with no line terminators","md5":"c3ffa3b68260c70f2883a1ed1895d19c","sha1":"8320106bd1a86011b40004a59299837c99ffd08f","sha256":"453d493cc73f25ae8afd407302d2630ac7f220428d445d6062d839193d9826ea","sha512":"7973449b46af767f2d28882857cb94028a930f32808614cdee2a0140b889cb66b4e2c92766cc6d73fc6851ea7c5f6b2f3464d54717e4f126c3f997421f1b74b6","ssdeep":"96:LzghChlpcQROUGfGmi+6rEjIhXA4d8hiNm:40PClUGfGmi+6rEjIJfd8MNm","tlshash":"d412b976685f604b7063194936cf7f19af0f317a10285832772dac14afebb9646b1f28","first_seen":"2025-06-15T17:52:30.465287Z","last_seen":"2026-03-22T13:12:40.835738Z","times_seen":69,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/checkmark.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/checkmark.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 153646\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-2582e\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyOmeGgplqvgf3EsmhgoArV9tLwsH9LdfNjnz24fTzLyK1RNZngXhQ4fpHP3cOAh1B5MKCpdUutKmwPlDeabUYyBY%2BcjH4NMEGqJQ6vPOPfR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe33b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e37ee29032cbf67b3f333b0a982f74a6","sha1":"ac78fc7ef6fac82073e7037f65cf30d23c53ed80","sha256":"a3a8a42c8dfbf339de69363e9de57e1f3176e31b4672a983ab82576e98add699","sha512":"71442b4317f97916c1199b50470f45ac8c25d977d9050eb88bc1a94d16ae15cd5856086487d37b9610f03c16297698634352527adfd3c50afe90cb5c138e0b56","ssdeep":"3072:iJ9D5KxpU/zO0yit9zkeh2VgCY7NgtzkhBDfEjOfbQnEf2Zd/Dl:iJ9DkxYyitJkfVJY7WlkhBA8bQnbZ5Dl","tlshash":"68e302024824ee2dcde2e33fbc185e14d43d601e826ded63b7ad96725f66e4a830f591","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.824205Z","times_seen":88,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/right-cloud.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/right-cloud.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4446\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-115e\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgaDaUfjvbwjqRJHOiePq6I97MEozFdzjonj9EYsVAGgxDeaZGMqk6%2BDUa4Z56cXx7N2dnVa2iSpLQnLbKxrovzTwX5kWDrskedW8wT%2F%2B21n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3320e43b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc8b2aef19a3556a7800df5f10425a85","sha1":"1ad245a9704a2cc8c9325829998d9f1a619fdd58","sha256":"368b6de7041c0b66e143d3fecdbd824fe9df33c06558ea19d6c5baac13e77b88","sha512":"42f19970a8611c8d83f6b12dfa63c07f8cec4e1430e41f145b9680969bf652e8012db2671a826a1afff4f8dcb8d2d85092af884eff50f72037ce419fe63b6d89","ssdeep":"96:kZSn2FJbyji9MpcvcBvngjPD3A86b3Xc4YFTluZzXQvPWjJDp:eFJbAiexvngjbwHb3XcFTluZzuPWVD","tlshash":"50917cc1836e8ab4fac3a170b2cdb402f541949616ede577b4a1ec0074ceaad50e727b","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.818779Z","times_seen":74,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/comment-img-2.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/comment-img-2.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3532\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-dcc\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MA42DoZoSmsXvY9cnFwKbyYl3f%2FUO9vlWr4GQTLv%2FpkEJ3MSzB2G0RBB2f2eZl6zvl6tpx%2FwC2A5UPLjP1sdCmcQOLBK83FCQiulfCIt7klU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3321e61b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5427d8d0f390062e9705b575b6399e22","sha1":"1f6da8fc91bd474dad2dcea9120d990afb24aadb","sha256":"36bbbb2f60ba7000ea85eb69fc64bd516dc12ae494c4539239b4efbb29014b2d","sha512":"35d506bcab9631c04dc46e7d5e8ef16c05299ef1929693bbc92c7909552340c65191c446723d8fe318482e6f7347f9fd1dd39fbd678c910932c3b940776811b2","ssdeep":"","tlshash":"06714b209bd18ef0cd90c5ae7b1634c2cb0566d915648d6aa9fb8cfc0831b8379b704e","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.836554Z","times_seen":74,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/wallet.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/wallet.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25548\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-63cc\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvlL%2Bx6iTs7JwAZ2UCVbRC3rVyGocbe3oYV4f7nJEPbE%2By%2FhBf1Lej6guYRFD5HVmIGzxH2ziVqO4S88a9h%2FVHyT7GczODI1Uu3MAN4Xr0Zq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333d82db4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64192283e8148117c0c5435122f47ccf","sha1":"b371863471a82a9afda7cd973086573c4f694db5","sha256":"8905794925d7cb9d67978d9672f78652b58bd350942b8e78146b46dee59780f8","sha512":"c1c7f85bd1381f7c7f450531399130f90fe9040309458a4ac1514489c565a348c8fcc9f285b09aa8eb047fbcf295eb1bed7ea92c30feaec3faa5d9058f700e05","ssdeep":"384:IoVgkDJE1EkRIrytQTqYDOZcGMkH0rO24keE7+mMQ:IY3oEkRgwn0rO2LenmMQ","tlshash":"d2b2d1942c0371e7e42a347b278fe68209584387dc8f21825c32d5fbf6915e4917636b","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.822173Z","times_seen":73,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/karol.jpeg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/karol.jpeg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 472987\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-7379b\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78ElnJYVb9JLdAuyGhJxPnrgkLxt5JJgyTK5Md0lsOU2xhX5rU2p2rVPsfQFt2n3JUL%2F68gvuGrjjXQ78DOzEDCoJyVDrYtperXlWbxzxXAO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333d836b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x800, components 3","md5":"d5173a34237348cc45c30a9a1c1f729d","sha1":"253be21689f7b69f4d7e846802953e19ae887be8","sha256":"52c3cbbaf29fb0fa419a8d80b395b83c7e60fad750b81809d7ddc04a87506f1f","sha512":"20cca248411dc5646cb572f5f40bb60e8cef7bac5f9313c0a993ee7b0c90ce9a80a9a26e2e8a16ff09bb4c222d1615b60530886e636cea6564c4c1197c4424aa","ssdeep":"12288:2LaidYuY6oSacay1kuyU73Zhn0KtKIwJJhaxmn:2LDGRWR3EU24x+","tlshash":"7da4239856ff191ee69fb0b4a02cab3d573e968d4ac3dfc48803ef59b6650bd205c811","first_seen":"2025-10-13T05:26:18.271467Z","last_seen":"2026-02-08T14:58:15.855886Z","times_seen":42,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/dialog.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/dialog.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6474\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-194a\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nM3F0Vjkkj0QVusaQVjj0l%2Fj1lqW2LTN7uo7RVvIY32lNuQRm6aoJ%2FtXwKzyaGXpPawqjBBP4bAnYTQUO7M%2BkamSWXCnoO3hMUOoILjAlgTV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333e83fb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e7d837b6aaa23cefe10613a5fed586d","sha1":"1c92707f9b98a193cd29a2c3e63c794d9fd886ba","sha256":"707fdc89b331151425486e4c142bb8d61c99fa94bcba2608fd9f2ebae02fa748","sha512":"033bcf65d07042da98e51050a3f78aa716a1e218e679150da752b58dd829ecab46c96ffca2b8da3bfadd4265dd4126d50f15fb0a5b85c3194b858aa748efb193","ssdeep":"192:IXyBR7KPBOTSnaA0tVUO83Kz4I8mCbFWCk:I4KUTSn6JCFI","tlshash":"43d16cc148bac83bec257a932d156103d2cb335ab919d53f3223659d7bf8c49208ece6","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.837068Z","times_seen":73,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/TTFirsNeue-Black.woff2","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/TTFirsNeue-Black.woff2 HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30904\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-78b8\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdG7HMrqsMxqu8ssUDYeEsK60TvOoorvrQ8hMTisKa%2BVMpSDyLTQ4HI9brkAOYDkJAQn1rvalIDBPEJSbDMDNxnuWleC6TT3m4sdoxGqcYoI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333f862b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30904, version 1.0","md5":"f439d9e3c02a3c401605e206eaa0dfeb","sha1":"1a668350a1f9602c6c4d2ab17ed4881372d6ef2c","sha256":"fbee3fd150c292c81f25c4fa0fba2b21dfab16241275615e94d292cd7e8dd140","sha512":"e790dd365b43c8e02139b0bf770fbc997c5a98799f94cbf80f848e10b327653a9de8fcdc3fd03d20e409609a6f91ec0f2ccb3662dc50696ca06f01dabf23dbbf","ssdeep":"768:h/2BNsbFnVEg34fGbYHaumeqzHjxLqH7ar0ZIw/exJkB:peNuFCgIPqH1qlWw/WJkB","tlshash":"ddd2e105da1daefe79ecf4c892e7552aac9db228b946d09e0df0888540333d0f67d8c1","first_seen":"2023-12-27T22:07:45Z","last_seen":"2026-03-22T13:12:40.823183Z","times_seen":75,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/bootstrap-grid.min.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/bootstrap-grid.min.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1ea3-ca72\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIMtLoQu4Cx7XIszXbT8KYnCr4qIvcmWvZj0tKjwDEnan1S8gLF7FcDnd2445V8QBI3GuN6UX9HbicZHtVl6QXqf7KP3FGKt4PUX6XByi85%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331ee1db4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51826,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51590)","md5":"a37d8f6021726be45fb8404012308dc9","sha1":"4912af4d6fde81ab4ea7b252c779e3d75423d607","sha256":"c705a3e5aed3b4130c154ec89363bbbe76616b64318ee271f1e4ee1d556dd335","sha512":"7b742a437f089d43cb343410dc43cfb0063ef4a35abf14cecc7b9ac5fd9700b13920d98a00ef451f9ae35ccf4567ac99705ddb9164bf3662a7a4cc2d989f4832","ssdeep":"384:C0lptoZygtFjmx/G1Nf+pz600I4jh7GY9z:C0lptoZygthmx/G1Nf+pz600I4T9z","tlshash":"743398c7f9d2284cc592c245c0927bbc4cbf9949a352bc9ba0177fba4b457db08a2d4d","first_seen":"2023-05-17T16:03:09Z","last_seen":"2026-03-22T13:12:40.825445Z","times_seen":78,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/reset.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/reset.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADxjkD1W7NlaxTimIrO2C3dagRtqusdvWmEzMcuiEsdfBJGdtNjagPyLbUzrCkPPFFrUNUfrUrLG2I76U6RJqX9sUTvGBqL5UA70TSnrDorg\"}]}\r\netag: W/\"691f1ea3-375\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a331ee1fb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":885,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (885), with no line terminators","md5":"48da51bf25f21a48efcea47615938987","sha1":"d15dbbb5ce15e151fe4ca811a6e53b0af7785447","sha256":"922267779105ca6b060b9448934bff4526b2de07cec3c9e957cd0b92b6875371","sha512":"ce412ae1d353556cabe00ab1f1a67405312172b94fad0d35060a51e7eb527a3c8dbb099104323e76fe876c96de4c96493ce8fa8551cdb5d7568d840ede6c2038","ssdeep":"","tlshash":"9311446122003cba7527483c2be903866c716650d872619ab42ad1b00e590ed87b8a77","first_seen":"2025-06-15T17:52:30.439931Z","last_seen":"2026-03-22T13:12:40.840278Z","times_seen":71,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/style.css HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1ea3-5069\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBrylJ4H3Qq2m21%2BN7I9MGNxKpPnAZG927%2BnGieqRLYzi8Zd9ig0YWhVo7PSTC%2BGkJLJ1RTGdTlmxHHaPTPyWfybar9yMljLkGHhgWFciGWn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe21b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20585), with no line terminators","md5":"5889f6fc40da7191dd1837fe9ec5a274","sha1":"bfa593d39d77e1a64b1b211b5e9d705ecfb37dc9","sha256":"2b9797ac70f78d0baf5f8ece0b4bdb8e4d5e7eabd3cdc598d360278ba8a35da8","sha512":"2f2f1f7553499622742839752ce4d24f6d438573d9973991b59dbf6940e460a0fdffa50bec15e9552ce09aab17c9a937004a84d6dd115e5aa39590ef58bd75cd","ssdeep":"96:5bgXvP0P9vSVwMpRoOfI1Ge47C70PM39MNJvjdHurovG8Zpt7ZaM5zVHW5+pZlGN:iXH01BS5QMnN6opN7wcVpZkexI","tlshash":"73922e3361a13748f027cde0a78873aa1028c127e55727fdee65b935cbc759607a278e","first_seen":"2025-06-15T17:52:30.407071Z","last_seen":"2026-03-11T00:33:34.513185Z","times_seen":62,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/review-img-1.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/review-img-1.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29522\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-7352\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1Pi75axUcXAT8PFsjdWw3UUUeF2whIy9e3yLtOaFVVn%2FiE2e3jxRyjjcYToecLP46YjXjpUGI92d0H4YJ4PlbcCMH4uUNpK9xE%2B8i4DGjkT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe34b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 660x660, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46417a733e909af1f2a48a505103ab70","sha1":"0ee3545e567b27a2f70700577cae9e12de49eccc","sha256":"1fe63aa1a246a6d966edcffb393d444f2713031a7ff08cc70e96912590d984ed","sha512":"1e1926775ea528e4c0af6d8f8edb7b6a9a2d52dd6948cb9eaea4df3312e74c4b30459a9f143a3533eb7ea6da4f2d68fb5a49d965af6da7cddca49a061fad6259","ssdeep":"768:xPAI7NTVgdUZ6pVru4YJKfi5rrxzY+SCFR:1AILgdUwphnYEK5rJpSYR","tlshash":"3cd2f269edb4d383ab3cf775947963abe4a12f16317e98ad7130d9250a4c3dac70404d","first_seen":"2024-08-19T23:05:10.087218Z","last_seen":"2026-03-22T13:12:40.841926Z","times_seen":73,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/review-img-3.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/review-img-3.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66718\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-1049e\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrjQ2A8D97k9TYHS5wjlXFDY3TOztCCTlNmQwIyDmQ49kBTK5sgF51OOKzX9Q57T44ClhgFO0EoQptgtFKsqOV5UrCbUjbAuFctLVwSwkN7I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe37b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"512988da50b59527631aa065d9a51769","sha1":"3b7ca8dd0e30bdae6173b8606af24b00ed66541c","sha256":"f9b44ed4236a4d5dfe9207ef923335aa8ef441838bc8e50cb763c8233d378721","sha512":"e32eff9720b86d01fb578ebbcc3c5c0ce08ac65795eac72bbca5065a581f685c61d298a634471ff150c4100c59083df88f080db7ac6c8738d0d9c6b5da9339f3","ssdeep":"1536:upfumY7tQDheOKRAdWgN8nyPufovlYrWE1JcOhGQ:upfun+eOlr8fozE1JcOhGQ","tlshash":"4963011524d5425d95e408d2ef7ec29e11dbbc0e657e768cb26afe1c323388e7b2109b","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.826931Z","times_seen":76,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/table.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/table.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1076\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-434\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7HGjaXWVdVFzo%2FWjQNWvCna9F3TyCOKg%2Blz%2BoS4GKktIlMsVVI9CEQl3oxQFT1QbMrQu1P4dapwfdXVUYn%2FrV9YwffOXLofFT0ZM18BEBws\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3320e3fb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b5943595a996a0a1e2221e1eca8eb38b","sha1":"f309e274d7f0beffbb46c6d5ce92aee159b1dc28","sha256":"3ef1bb677a806593458c582777c686fe99c0022e14009da5bf1d66eb0cecc0fe","sha512":"ccd6e692da2be188b5d44e0c6928013abc17594eb9fa3d4c4589c2a2a62135714cd0d6a021d3a96e1f89914a3dc9d1760c26120f6d77a0c5cd2154372927a8bd","ssdeep":"","tlshash":"bd11b965a81fc4e2971555bf84783e91485206cf4ab13b889534588ff02b7603d16593","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.829645Z","times_seen":74,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/kraken-logo.svg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/kraken-logo.svg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4zYU6y6Z6MxrodKDTOin0R1vzijGyIq1mBdvVn1W%2B2uffylbC1Y3FcZlWZ0FnH7wUAItxz1cV5h9CSZakkY31ZBrwu4VMEv8OcXeagWWOvg\"}]}\r\netag: W/\"691f1ea3-5de\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a3320e4fb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46e7b488513f42a1567a35b8f5d63d17","sha1":"fe75f4d0667c578c22e62b8f71555c5dc11a2d5e","sha256":"8a3e8cc45c5d9984bba9d10f4b3bbe8ab4f9ea84b0446b85fdedfbdef720a521","sha512":"fed574d12a6f8c0f056055ae12a9bff89f4ea2c2355c41946474856863810432edbf1d23632029a90656dac6d0f1aaf4aee9f507218c1fe594239ca49cbcfa87","ssdeep":"","tlshash":"e4314b6cf37343e6a66452f0a53f45712fcb08fb56996634c3549c14bc9e56088afbe0","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.839232Z","times_seen":74,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/poloniex-logo.svg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/poloniex-logo.svg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXj8%2BBK2O7iCAy5bmJJ00s0UGAnST9oPaeptBxJyEr4wY0wzP03LmGTzt7RkyaB7ftjK%2B5FCsqDFzbLU5BbGCBmgX4VuoAOs%2FUNPAgAYn5%2Fv\"}]}\r\netag: W/\"691f1ea3-25c\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a3321e55b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d34ede3cefdc2f816cc357d65edcf5b","sha1":"a2316a1c2d9cc2b6558996f64fce2111153c0bb2","sha256":"c694d1f6baf5b932a0d5efb35e3542dea9bf99e914fea4df54fdf5c85bb4d0cf","sha512":"a63f05b24a83c9a44eae82f57e330fa6c0c0a5adae68822d499295d163275705f45623968ed0353ebecd914e7af7267028e8182c966e3f67ab1bbe89fc483ff3","ssdeep":"","tlshash":"04f02db8650d996d9840cf1b2f6d713d2472f1edb1960644fc653d0934025b68e617d9","first_seen":"2024-08-19T23:05:10.096477Z","last_seen":"2026-03-22T13:12:40.832884Z","times_seen":73,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 3384\r\ncf-ray: 9c48a3320ebc120a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220078-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 8406700\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xLieqm1O2KcHkew69Zl9q4opxxYEZzL%2BPPCItHjj5aMWjiBl0K0LmbOCjuKwEzrqit7prGiVm4xWO9EgeLFXQjt0zIBJZwvxW2z%2FRX9Gh3Orm8bFBpq9x%2BCmJC7J8zz%2F0PQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-04-12T18:15:38.064266Z","times_seen":808,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":9,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/newikonflex1.png","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/newikonflex1.png HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4348\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-10fc\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIG8jn%2FX05K%2BZVuFMFzbKqbWrkWZwpaq3VbTx%2FO3AISmqxcgWJujAm5SKk5qG53jzmx9IHtWUkZBHQcYthMdaj12izf0m7iusuvMtyA6koYH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe29b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 188 x 220, 8-bit/color RGBA, non-interlaced","md5":"87664523a31fa7aa19c2f29ff77cc266","sha1":"c98d8463384182e70ba3cee2002edde5a98091fa","sha256":"7a134dcb7290a780a5c25b43fa0a3303cfd2b850190f1b32e424e77a8768eef2","sha512":"12419c9bfe6c2f7a9f6f6b35377b91b031a878ee6e123ce4251231492f170afb5604fbc060adb3c1a264e95e0d9239716aa5abcdb58f9ea31fa7f658169ffcfe","ssdeep":"96:UD0JBZppPlaYoGM+ESfPrVvxAfD1cuBLQso4n38x0o:UD0JBZ3daNGM+pr14DzEso238x3","tlshash":"be917db7fbcbd815a712976d7324416629bdb427180cfb4f5cfd484ea204859cc05767","first_seen":"2025-05-05T11:26:06.414517Z","last_seen":"2026-03-22T13:12:40.820592Z","times_seen":70,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/call_symbol.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/call_symbol.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4912\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-1330\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zY%2BQ3fJzrE219SDIsecVK%2BEmIbQKir2xwiDK4oI%2BMlA95tVHfD0iSl3hb5WSsWCI4hI01t4nxna4WO8b4nF%2B%2F7Ze0jBbq0c3jAc3JcKEJwfg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe31b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4912,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4be5c611bd86d8bf83d52c6177ae07d3","sha1":"b063a6ff4d56b58fbc7ace83a171d496b3739d4f","sha256":"33ef0a31645afb94ce4731d73c27094a3eb265f47af3e68015c7a6da29ba5d51","sha512":"f50945e673186b8ccbff3fad42ade1417d56c722d54ad99761542d39ddff0394e5812589afe42d34e4b410c74fc6a1ac64e17b4185a7721f52023300cb9ed7ac","ssdeep":"96:bwHyzqDwVSN1/mEwkkrySptIhWWfrjvE9gm+4yA9cam1nlMLA:rAxWEfk6hPPvE9gm+4ygc9ln","tlshash":"87a18ef942de9e781bb84a2ccd1a6458c59b11216a304e318f786042f6266cb762a046","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.8291Z","times_seen":88,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/bittrex-logo.svg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/bittrex-logo.svg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwYDuOCSgD6I000ZecgPYp1jJzRsO4QjF97TSJQyjIG5MqlOZhL7TXuJsOPQr3JN%2Frng64uMsHcqvOUiR7Qu5nrTj2X1DtEcT%2BiblVh37AmL\"}]}\r\netag: W/\"691f1ea3-269\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a3321e59b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"859504fa95fe120b78e146c3d3ba21d8","sha1":"8cdf73201d1036a2452f9169d9a06ba162a143a6","sha256":"f761360cc7120aa80b15e23ac61c7b6aa8807a6632896aa1e3c8d408fccfa17e","sha512":"7a4915ca13571bbdbf539fb46444fa8512eb0bad5176e6d8c100407ac7883264dcec85f41f85f2a7c39d9f77f8f811cc45ee65e38ed93a937fec27b7a16f96cc","ssdeep":"","tlshash":"80f0a21cc3c9ec6974b9cb107ff5cd4b5a1830e7c1d094dad4e2787ee115465160a5c4","first_seen":"2025-05-05T11:26:06.460435Z","last_seen":"2026-03-22T13:12:40.841312Z","times_seen":72,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/comment-img-1.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/comment-img-1.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3446\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-d76\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18DKhH7i4%2B24cHv4dyWfUYTEIHJCuTEdwZbOj3ePmRGYqNHnuPgR%2FslGeQCdpGL23LJIVBnYN%2BBFxDPSddvMQBVqz4z08Iy%2Fs7j3HIL0AZll\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3321e5ab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b40b30364262b93596b376a0b5c22bba","sha1":"73773cde89881dcae48b67536f0ef75a59c79c97","sha256":"29e62cfebe88b3f23acb8f05a302a31696c8427c7e83a7ea6541dad7e38988ab","sha512":"f6d5e8c8998c5c97b1dbc5c9281a5cd68de1127380b0f74468ad5b7cffadf3f0d9a4dd144a67221e5248fdc3e451635a6e5a446ad45c65ef2789c943f5c66017","ssdeep":"","tlshash":"ed614eaced19815bd49d295bd85ce301c415c3da447cbcdd57776c91373173ab0a3aa0","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.839752Z","times_seen":74,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/comment-img-3.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/comment-img-3.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3052\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-bec\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GP5%2BTy1bslzMfBEBY4S%2B%2BlqNTWnr4kpftK0azXcsN699lSCQ0OqgDj9FZOTycpzKf7iqCEvoRao42NmKESabmGZyU2Qbrn3V%2FEDAaaNsOojP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3321e62b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"157bfdff07f139fce2fced03db56a651","sha1":"9353fa8f27877c56a7c1133d07343e420bbea28a","sha256":"6861623c5b89cd7792ca98bb1e71301fe19bfcbc91b38aa117789a0cd0e0c1e3","sha512":"943d84a59e8ee217dbaa0d5b57bece10471b0e930bb7d926f5b52f17e9718ff08b69de130250b0198df5183257fcbf101bce46b94a294ca3a966b57dff20451d","ssdeep":"","tlshash":"6c518da0bb8009b2ea24777d0cbc7fd38604cf528167d88e360a35c3bcd04b06a11a81","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.833387Z","times_seen":74,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11469\r\ncf-ray: 9c48a3321eed120a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230084-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 4595093\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ep%2FOWn1gQY2kvp0K0yro9mx2KKucdGWPDO5CSHGofeaY%2Fm%2BIhm4BFYivUgtESWxhWDiCPoT5cXgwNM8skgI02iD5GWiqjRpfG6bh81EEhT6l4ybB7j1W5tSX5J%2FKGBG%2BfEY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-07T02:34:18.150961Z","times_seen":391,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/coins.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/coins.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25344\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-6300\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDZQtaD1Qk6jstlBeM4%2Fn7puBLiC01fRo4HQjbc2tgwSbAOvLWnw9MahdOv2NZoA49xiAhtCsTTw3lIlTIj2KRi5HzjiZNHs73kHwCYVCzob\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333c827b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"739902735455271102d143bcee7f043f","sha1":"f6360b0ee63d04fad62a4e0d9423c523414e35da","sha256":"12d452933aa1fb24db6c758240e546c1bcaeb6649bf75d21cde277b953b99d6e","sha512":"7074378638f5fb25e394f3f9d8b4e318c246de5e7c6331ac8af681c8f9fad43d0066d9cef318e3210591c32e46354eade0026091c484af3794213f5ef62a76af","ssdeep":"384:zsqDpSF4LQHT+GDmQVv+4xIpLxChUpDfx7tiqQxougqt3I+jS5HEHu8:QqD7caGDmQM5xC+xfNuE+jkHwu","tlshash":"42b25d05aa49c9f5d84c71b0f7e387dcc6f7cb9e67324ccb8ba565d9288e0614e96038","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.821681Z","times_seen":74,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T13:36:10.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2%2FbBWdsgbUJeikter0uTko%2FpH2OPyo9vqFArOhW6FkRwnq43au%2FYj99RkJ%2FTuZ60xofV7LXra3JDZxnhwxNF9NG2DTUDLCPkskuuOKz5yLa\"}]}\r\nexpires: Tue, 27 Jan 2026 13:36:10 GMT\r\nset-cookie: _subid=1sjos4f1viiom; expires=Fri, 27 Feb 2026 13:36:10 GMT; path=/\n9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; expires=Wed, 28 Jan 2026 13:36:10 GMT; path=/\n_token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361; expires=Fri, 27 Feb 2026 13:36:10 GMT; path=/\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c48a32f9a5fb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":55769,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9b1a5c007b50d72024b441e54b9bd40c","sha1":"b60402ca8822dbc4a74256f2b754bd4017999e86","sha256":"812e179ad0e8e0473f43b6d617026fcc7b1c9b577b55703ddc8d1ae9e99dfd1b","sha512":"14d06dea5c728fdada3bcb289d7061b5ae646537c790422db8e936beaf24a25b87932fab9419c50c0fa8c3b2e3d8e245cd6a5e740bcb32850db9e149dfc093aa","ssdeep":"768:IoJVjiR7QeqFZxrTUZ623MCWccw/J5baacwMILe+42:IoJVjiR7QeqF/K623MCXFJ5bJ+IL37","tlshash":"6943505918f70051b6039ce97bdb6b222aa8d003d006d9247ffc2798cfdbd5686a379d","first_seen":"2026-01-27T13:36:36.897196Z","last_seen":"2026-01-27T13:36:36.897196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":30,"dns":12,"connect":1,"send":0,"wait":125,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/graph.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/graph.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2564\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-a04\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0K2zraEA7OKhZ0eukeli63Ci6Uj53dVSxGGqJD5YLz%2BpLgczgRwDs95%2Bl4Y%2F2NUb0ZrEhbaq57l9cu68goU34cTbDKCaVDwKhXBJvH7ULwC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3320e40b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c10c8a2c624fc380ee8829ac8e31d43b","sha1":"df71a8cfaf2030377705e4db2a51d9323a937680","sha256":"fecd66156e578d8292354ea0120b9808d6dcb0046d37a8bdd5fa10030598163a","sha512":"79f6767d51eaff501bb7b6eb32ebac1fd1b507f800b056e2a6f2d8f5ad1cebc515c0192a835d00b6cb2f6d8dc7d319511c5213d859a5783fa28b4e5e3bd5a546","ssdeep":"","tlshash":"a5513a9b018078154ee099a9762885da7f8c61a0b5d86c52ccca13ddd78729473b7f74","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.832385Z","times_seen":74,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/stars.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/stars.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3288\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-cd8\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQiAXq0vRIkSf5J83KXaGvJjQurn2%2BUWAX9%2BEkbpPT%2FxN9CFLBD%2BflfI8WFBKDgCF8TTanWXWm%2FRR%2FRg7F73xIb1rjuZ2u0W39E%2BGdrxRgD%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3321e5eb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b79dfc4c261ec7743cc62d3a6b95f37","sha1":"c02dacbfa208f6c3b89ea94e4a31419b3acf4f51","sha256":"83df6a36b91ec560a0e45b4a4cf760f31f5c71a5a5feb88c9769fe89787a8677","sha512":"f0484b6a6167b0629b80c55bd50fc3c5a7a3f42990a5b1ed5d5b050fa34c9cc5fa9cd280b46b589001d62ee1412082a440c0e63ea847586cc16608830359924e","ssdeep":"","tlshash":"86616c2dd1cd728a9902dfbaa0ebcf2c55c7cc93c6b389e74adc01914568a19f203d54","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.819358Z","times_seen":74,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/pattern.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/pattern.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98268\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-17fdc\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=176lMTRiOIXSj%2FRFiAJAzDIAxMrfSga4er%2BgBvAkJugM2YdryPs%2BcFuKFD5mVgEmVI2pNxmjvW4b48NlG8VrFm0%2BbpbpVj2cwlC2rUrtqIBG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333d828b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6219fdd4991008a31f57520443e5ca03","sha1":"8e6df9f45164655404db22e6634c92680999e044","sha256":"bf0722b0221d47f1109e78a741dc7f7d8cd097a441fbdf9781db63e3cf41729f","sha512":"68cefa703f5bddcee0ed016d3ae0bea075ae05cc7f019c0c577564ba35b89d20a4b7ce43895439ecc3a0ebb333d165355e6cd9be9874325d75dff7342539a5a4","ssdeep":"1536:YOpXurDJ1HO0lOI8gZ1OuE7dSztMH8V/69Y8CvQW94+Fo3vwwT7XwuEOiPrYTsGR:YO9uXJ1lN8gEUztMHWfoao/wwT7XyDri","tlshash":"06a31256730bd708e6d81afd7b7941bec4c04e774abcb49f020b932e1f8965a9530c99","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.834693Z","times_seen":74,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/left-arrow.svg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/left-arrow.svg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zInrFj7ut9cXa97NAuj8mADTuyqVxAH%2B0yBskdC74DvF%2B8OCfsquEl2yugRdLjArzBDGMGC2BtVfQ%2FdKb2fH2lQinI%2BegaWvxPj00Y7tQhE\"}]}\r\netag: W/\"691f1ea3-201\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a333e842b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":513,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30b00f723e61133156fcc1bbb18323a1","sha1":"6ef866e5053fb892af43ff6a6ebd9083c41f4b71","sha256":"5098981bd2c231a36e16bb6c856bb2498fbeb5480ded56b4dc3176fc2a374575","sha512":"d2d0a8f1fc5b1e8c2c63733eea6dcf1f90e67091e5cd998ff79f9e492b5dd1659815719b7d7c120b3c6524d99af207e95758aa84f0390cdd0c3ca5bc1a8858ff","ssdeep":"","tlshash":"acf0e9f7e684b9c5ca08e360750018153c5afdf718a795e550447e6bafc44ae0b12c8d","first_seen":"2025-06-15T17:52:30.413119Z","last_seen":"2026-03-22T13:12:40.844571Z","times_seen":71,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/right-arrow.svg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/right-arrow.svg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=755LMFkT7eXJkZNi1rF%2BkJ0kZ9jNqEiZTAdLe8j5Jh2NnuAiLQux%2F80NQezCk%2BAFoHF9gKQ%2FrO%2BP%2B0aSj7RB1WLU4pUnULUK6FUkYoxq00ra\"}]}\r\netag: W/\"691f1ea3-1f2\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a333e844b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"301c750e82558b2cd6b04949ecca6d00","sha1":"f93f0c0289e488412fefd460ae8a0b51e40fe72e","sha256":"062cf842ffd1e31b56eb52e217ab4212489da62aca8cec3223a7d1cb6e15ee53","sha512":"3e28ded57d72d8accf1f87553dd8eb9cb4ec17bf734a29b37639731e2fecd159e56b2bae7d5b7894d3603235ed8e5f3217180b54c8c46811b114d3f9eb46c4f4","ssdeep":"","tlshash":"5ef0590f0b4adbc4d484ab608e06ae2935883781ac2484da0aa53a06ee8500dbd714a4","first_seen":"2025-06-15T17:52:30.397316Z","last_seen":"2026-03-22T13:12:40.827947Z","times_seen":71,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 12:14:55 GMT","end":"Thu, 19 Mar 2026 13:14:43 GMT"},"fingerprint":{"sha1":"9F:6D:86:C5:B8:42:73:79:95:D9:AD:A7:9E:37:F2:54:CF:A0:9C:90","sha256":"C1:37:01:B7:C2:DD:54:62:A0:93:A6:F0:05:9D:5A:0C:55:E4:49:78:D8:DD:C8:9D:B1:B8:6B:75:83:70:B2:28"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcrecacuold.digital/\r\nOrigin: https://xcrecacuold.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, OPTIONS, GET, HEAD, POST\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://xcrecacuold.digital\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9dA9JGPSKzPxHEe%2BB7PP20Z29POpCx15KEJQLG6BQSAiQDaKjVFm7fQRgDTwiwOAWE6b2zVIP%2FzW3PMWaz0Nk3T4GeW\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c48a334ec6f569d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"460b460d57658b5fd29c5e4934445c33","sha1":"24a724b25ef1401657cafa588835edfb9f7ef1f7","sha256":"93eefe1243dfce9ac06bf199cc9962e610bab6bff4f096662a357d27c9aefa70","sha512":"127d42078b0a87c6d0a70bd359dbcf50844e871ae9e98875a63f2303950b50bcc04fdb72df3f2e157dde3c019355fb67791147d38d6c3c570e1bde1d3b8f31c2","ssdeep":"","tlshash":"a9012428e4680e7b88b80358b4286a07122422075f16354e7fd4878d0f8d8bf20b124e","first_seen":"2025-12-17T10:03:05.72606Z","last_seen":"2026-03-25T09:03:12.863773Z","times_seen":3067,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":47,"dns":33,"connect":1,"send":0,"wait":226,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:11.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xcrecacuold.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 56438\r\ncf-ray: 9c48a335a9fb568f-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-bma-essb1270040-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3392925\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2C81%2Fg0LH%2Fukh244xtk9j7%2FvfDjeiHfrdzVOhFqaZse7wzltE2xRGaW560kqcaw6phGgnsEW64WEV8zODT0FAMMnvsLPOE0%2BuIdMAPujAZ%2FVyJHGHP5MacvsOXsSoXc88aM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-12T13:49:54.211301Z","times_seen":1514,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":9,"dns":1,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/review-img-2.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/review-img-2.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36474\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-8e7a\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFPMs8ygsMhDIJ98h3FbtPdft7X9wEip8%2FUDiRoqSulcYpxyXLcNscRQ9KE9DcCG%2F0TFGmwlkgnxLpYzNttteLdWpJG3JrcThE1IZFu%2F5iIj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a331fe36b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"27c267b0eb6dc6055032f11655f7b1d2","sha1":"18e2a8a90f1cc457e07b4800893416b0215803fa","sha256":"e449b5ef44c2de4ad44ea2b84b956bd2ba3af1fa3a0ca51fd1b2bc8a54040b33","sha512":"601b86ffaf6dbb9e95ca53b816ec9afcc09be595827615ab54003fde3604a42bdb039134450b0f1d66eea977a3ebfab050f348ac5de6fa4af258b147bdbdc1f4","ssdeep":"768:k9+b/xsH/sLp0CAGEaIN/9U+VLRqVZJB4jQ:0s/a/sCvaS2+VLR+3GQ","tlshash":"9df2f13cb7cd26dae6467e19630b910d8cef3fe7570b5109902457285dabac069fc2a3","first_seen":"2024-01-30T12:09:04Z","last_seen":"2026-03-22T13:12:40.831889Z","times_seen":94,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/lock.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/lock.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1292\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-50c\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BT%2BpESF5tk8g2JmfEjtDiz0aJfkHq3mu0XfNGIQMFs4iQM%2BMeGQi7oOo3mQTXqKHeQnOHDi%2BDe7mwJlHzSZCknYzi2lnmzOnUlSInzewt7F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3320e41b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06ef05e19d3a1da104267c0fc84ab98f","sha1":"563d07b02cc7dc621704af4d55913cd12f3aed37","sha256":"db43c596e982c91a62c4f1aeb2151ce68d268982aca4a0545d311310d96910a0","sha512":"1eab7750329308cebf7ec2da03d41afb7b860cc851b81868d42201275e9959c60019ffbf462b0d84ca310ef4fe6e7cbc3c0975933c84ab262c016916f56a1383","ssdeep":"","tlshash":"1e21e77b037519a3d212223dcdd52ab45593a28be210c321805db700d9d714f5cafb23","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.827424Z","times_seen":74,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/phone.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/phone.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16388\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-4004\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Pq9fG6xD%2BgQo11%2FG6CVF4CETTtAgU%2FTQVYYWEKdvJNS57MamGNKh6ucDM2QhAuO8t6jaSd%2FGglAdb8HdhKxJJ1%2BDn2aarLQw8rwJtCU8tRw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a3320e4ab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6c093c66267e5a680c51ff88ed32baa","sha1":"9fdae24e07cd2e6308bf4bfc197a875ce46eb931","sha256":"9046cc061db6a7452f042710a694a5e14cc9f482d82cb695c29a278bbc25c415","sha512":"9289c747ec8ce046591de0fe158bbd3732b1e8779a6e792e24d33eb6598cf18c5307857d79d2c6ae8fce72a9d8eed9522557b1d6fc7a1850ff915b5d92d96b36","ssdeep":"384:hXUXfrNyh9m2eUbjQASm1MeG2wdUgNi9EfxFL16cPPj6:hEXUvRxQASmMM9ErL1bu","tlshash":"6872d01546e321f26f1f815a856a9119e0206aa3f70f14caf2360f0dc7def6a34ca724","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.83018Z","times_seen":74,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/binance-logo.svg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/binance-logo.svg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G047MNam7AWJgVf1sDqbxRpzjyZKFVOjp%2FpiIZyHxZ9XIcvK1mE5NPIQ4cQ99hqbLyqVHM3Afg1qozymh3bhFwg8JyBB%2FwS2w8L0gaVhRrsr\"}]}\r\netag: W/\"691f1ea3-23e\"\r\ncontent-encoding: br\r\ncf-ray: 9c48a3320e51b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cc45dec6cb0baae2385156dc4cbd88d","sha1":"77d3ee3b7e456f5376a30fdb59d9ea56eafb4cdf","sha256":"159ccc071ae8ac125368240e859acc201eb5ecbd4de740050f89b50180946afe","sha512":"043ae542f4c2aa2039371a35b987d0b22a9eb1a2c7b98c7a8ff9361449cc62d8756b40df4db59e087633c4d0df4e80df65d76c9c20e57b08c7a7279e2f450b9a","ssdeep":"","tlshash":"89f0fcee1c54e344cc0efa60b315636d3463789b3b359969c7483909dae4f780921bd1","first_seen":"2024-08-19T23:05:10.102901Z","last_seen":"2026-03-22T13:12:40.830851Z","times_seen":73,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/michal.jpeg","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/michal.jpeg HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 180237\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-2c00d\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11VMbH7k6wGLR4laQJKAP4wmfTK1vOIBvv77thInpZrgfvFw2ADW2z86ZcLeGBJXxZkO5FR2%2BITz9fDhVsTrV3CHM40ofaTFSZskE2kV%2FyMr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333d839b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x857, components 3","md5":"64eaa0e5cfc2af6258ac303f359845dd","sha1":"6781d9e3f31a296975e0fc24f86235e448c993bb","sha256":"7919eacf07824c30c08f6711e3f3dced3137a4a2a9bb0048f556e0da5268cbe6","sha512":"6d8da25b41a802bc9aa0308eb18ea89996f427154fe294a8e823a58348bb6f466f3ccecc83e9c6d22da1d190cc5a01ac9428317e3e9f87767fac4961408892aa","ssdeep":"3072:gsGwQBI5d9wLmnvaIPj4ecxLGOL5LtnU5ORNnxRE9524EXY1NBVwtzam13OxOotG:JGwQBUQLmvhPncxiiLuunjE53Otz/3OK","tlshash":"540412549c678fa6a94c7cb049ee78f3538dd0688ce8521f60da74dfae20a34736056f","first_seen":"2025-10-13T05:26:18.141896Z","last_seen":"2026-02-08T14:58:15.862348Z","times_seen":42,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/comment.webp","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/comment.webp HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/style.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1176\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-498\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZDlf7%2FAbofMYErb%2BGpNP%2BdsIkN3T1ILXt4yMwaFX85bq3%2BHovFIe3jJ%2FCqi8U%2B4l0VJ0au2X15aA8bwm8C%2BFimmVYPbO%2B1bO8cCw0EWqAYV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333e84eb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc591b5ad4dd026b67ae9de42ea50f1c","sha1":"34808c1636d75722e25fd98042c67d67fed28939","sha256":"73a69f9155c9f46890b7f4d984f8efd4826dd3b5af075394e9adc9a4b503c714","sha512":"78f0c5094b2a8530a5aa83bfd99126c9e368dc5a89d52ed53426a39d7c7b9040b561cefc8587475ad19a1546de7ca8baf8e75ae18829f9801b796ce2c726f809","ssdeep":"","tlshash":"cc21d7891cf24184e84698929e350b13244cbc1f072c89ebf6faf849007230961c7de0","first_seen":"2023-11-28T08:07:14Z","last_seen":"2026-03-22T13:12:40.835189Z","times_seen":121,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/TTFirsNeue-DemiBold.woff2","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/TTFirsNeue-DemiBold.woff2 HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31000\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-7918\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6w0JPv4y8mWEDu29aaWYpqfpIw3MpegzzoC1WZtxAxbeUR%2B3IpHUPWXjYl%2BXZ1QBqnghoQU9KlUF4MfuwugVF7ciC2AET69y8q7zn3LMWXM1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a333f85fb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31000, version 1.0","md5":"5a0c49c8eb2cb5601886f27e71d2969b","sha1":"8f39776dee7cd263367c4830f1899c22814cd45f","sha256":"42e9a88202200bf1160ab0c5fd3d72b1df139725528b460d3b6f4ad81bf16a19","sha512":"6bc20d4ce718924dfbfb5a34138c312eb13822dc1fe07c458856a154f5d41a77d11e5c15c8fbe2770f7d892305f208e22c5c25d1738e95e9f9b6b4361df61bb5","ssdeep":"768:adNc9Lk69QGxCjXF57DBXNUSrenETFMsispqb+g8/W4ulyE6Lf:UNcJk62XL7fU6+a00qiW4uY3","tlshash":"62d2f1441b92f00bc64ad6baf127d3fb971955694a3ba337924ec1264cdbcc932ed580","first_seen":"2023-10-29T14:17:32Z","last_seen":"2026-04-11T18:09:05.544869Z","times_seen":166,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/Montserrat-SemiBold.woff2","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:10.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/Montserrat-SemiBold.woff2 HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17236\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-4354\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJ4XNTRHPVUdzhFa8iszMIuujm5nHdToOtoZj0YvEP3%2Fvt0Ytwqcfpnwq0ReEirEsyb4LbtjQy3oGg%2B0s9SU0Vc5M%2FHonv9yuXw7HdEIFOXv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a33448f1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17236, version 8.0","md5":"e151fbc6fa6d9631c3a59ee119bf2a64","sha1":"79edbc6424c6f1de040e8894d2d5e989ddb85e8b","sha256":"5a9241b508281799adcaebf0780ac9e1e57b87aa9341e81dfaffb84baff78177","sha512":"96c07a508148fcdf3f788d98ad854759f2b4a38de5561bba9655537f3176c1cdc83a2458c0864c3340092958bbfd72b9f0b21678c1d698ce7026c48694e905dc","ssdeep":"384:z1qV20ERICtaYyrefk5/ez5PCI9ZlTMmwBCygL6+:zEiRIY7yrefcHcPSM6+","tlshash":"3e72c0de83c4ab48d174443d2de083b2057345b134ed77653e86ae3eda6885ad80e6fd","first_seen":"2024-02-05T12:03:30Z","last_seen":"2026-03-22T13:12:40.838216Z","times_seen":79,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xcrecacuold.digital/lander/pl-helvionex-v3--yez-/TTFirsNeue-DemiBold.woff2","fqdn":"xcrecacuold.digital","domain":"xcrecacuold.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:11.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcrecacuold.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 10:01:01 GMT","end":"Mon, 06 Apr 2026 10:50:40 GMT"},"fingerprint":{"sha1":"9A:A8:71:7C:EA:5A:38:36:FC:57:28:0B:01:37:49:8E:33:36:A0:AA","sha256":"0B:36:32:C3:22:D9:16:0D:34:4E:E0:87:43:C9:DD:B2:36:0F:F6:C9:4F:43:54:D1:49:6A:8C:95:2B:ED:C1:E5"}}},"request":{"raw":"GET /lander/pl-helvionex-v3--yez-/TTFirsNeue-DemiBold.woff2 HTTP/1.1\r\nHost: xcrecacuold.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcrecacuold.digital/lander/pl-helvionex-v3--yez-/fonts.css\r\nCookie: _subid=1sjos4f1viiom; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUyMDk3MH0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUyMDk3MH0sXCJ0aW1lXCI6MTc2OTUyMDk3MH0ifQ.WNtUhlcpv5YN0TkfEXXy6e4T_dhNtizMmNTwApbVJdU; _token=uuid_1sjos4f1viiom_1sjos4f1viiom6978bf4a3cfdf9.89314361\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31000\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:59 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1ea3-7918\"\r\nexpires: Fri, 06 Feb 2026 13:36:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FbA6cE1ABpHkK4dRh7KvcAaVg7l5Ijc9KZWYSMV5g5fxQVKeflHbW8cgK5z3vp4U3Xq6tA3dkyYyNba59HAXNzAN05xYBg%2BgYVEEOLRq45C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48a335faedb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31000, version 1.0","md5":"5a0c49c8eb2cb5601886f27e71d2969b","sha1":"8f39776dee7cd263367c4830f1899c22814cd45f","sha256":"42e9a88202200bf1160ab0c5fd3d72b1df139725528b460d3b6f4ad81bf16a19","sha512":"6bc20d4ce718924dfbfb5a34138c312eb13822dc1fe07c458856a154f5d41a77d11e5c15c8fbe2770f7d892305f208e22c5c25d1738e95e9f9b6b4361df61bb5","ssdeep":"768:adNc9Lk69QGxCjXF57DBXNUSrenETFMsispqb+g8/W4ulyE6Lf:UNcJk62XL7fU6+a00qiW4uY3","tlshash":"62d2f1441b92f00bc64ad6baf127d3fb971955694a3ba337924ec1264cdbcc932ed580","first_seen":"2023-10-29T14:17:32Z","last_seen":"2026-04-11T18:09:05.544869Z","times_seen":166,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"xcrecacuold.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"xcrecacuold.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xcrecacuold.digital/","date":"2026-01-27T13:36:11.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 13:36:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 70325\r\ncf-ray: 9c48a3368e15b4fd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220158-FRA, cache-bma-essb1270044-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 9501396\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mOT3z6Q4Sj69riJ%2BBIIikOJhtuJaNQMB2YI0IlB7E%2BfszQwxHXJ%2BKWQBAb0akCZPEvrQ7d18maP%2FlAmLDeDD3ViD74GPL%2F9RouzxA7J24OWIqh5Azsm6iNwMMjc2WrnBjhM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-04-12T18:15:38.048539Z","times_seen":5115,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}