{"report_id":"ea9d8528-f6db-4b93-9dde-fe2eaacc210f","version":0,"status":"done","tags":[],"date":"2026-09-19T22:41:21Z","url":{"schema":"http","addr":"xonabloxeon.site/","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xonabloxeon.site/","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"title":"Xonabloxeon | Profesjonalny blog o finansach dla konsultantów i agencji","dom":{"size":33465,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14986)","md5":"32a28ece17a133b974d7e7c400980827","sha1":"c0503844fee433f4b2e4696befd5cf43773192ec","sha256":"e8ae47e0542f7c05e00e4f08ed9b2cb431acee33dd53ca33f1e7186e05df78c1","sha512":"263ecade9a82122713e60f24532feeee27d5e59e95c79bef7cdf4529dcde2e7b2267d3ae7b043803c04151a0b86aec2f1b8cb92ac8cd0b56b00fb257358b8e55","ssdeep":"384:5jSuhL7dae5Uzw/W+WbQPIso2KPJ6SHBnie9ChXSCv1/bOdD6:xDhnIj1+WbQY2KPJBhnie9CItI","tlshash":"8be2d81432b0016f2d5385e5f6d0bb6dbd1ae2c7ce3f8a68b55e5210afd6da68c87304","dom_hash":"domhashb2ee632ad8a07b713e48c1e079e148d2","first_seen":"2026-09-19T22:17:26.805461Z","last_seen":"2026-09-19T22:41:25.748082Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xonabloxeon.site/","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T22:41:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xonabloxeon.site","ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-19","domain_rank":0,"first_seen":"2026-09-19T22:41:22.988593Z","last_seen":"2026-09-19T22:41:22.988593Z","alert_count":40,"request_count":8,"received_data":1153626,"sent_data":4090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-09-14T09:51:27.827912Z","alert_count":0,"request_count":2,"received_data":408697,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xonabloxeon.site/","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"934b6d2c5339e628755534a36b4122dd","sha1":"4ee232a628fcefa414f8c861078a92a5be2e7af9","sha256":"3809104378d69977817314dca829fe70399eece9debb0d376a9069f685b25ff1","sha512":"f116127efaae186ed55ab37cef8a4b2ec00be8bec6d31011bd7f3ffe264fed818fe16fb31907ada6d397d2e18634c85930dd528c00770039ceafcd823188829b","ssdeep":"","tlshash":"ece0c94e5bb525234216b464059e4851a21651df9c1d3c6ebb4c55501f4c41e4175b1d","size":304,"data":"","first_seen":"2026-09-19T22:17:26.826278Z","last_seen":"2026-09-19T22:41:25.760132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7ca027b93c7bf22ddba526654adb3a9","sha1":"837187521e36116173345a849be850f110e2b552","sha256":"b396a49832b6ff2bf23a56c4c3ef87641c533acbd3f05de65e5df4195967a6b1","sha512":"cd135f5c41b41c141326f0b956315b898f4e97c1f6b8899cc978ced920f37dbdf745a8fa4963acdeee8ba61f693258cf5ff87391984ff5026d06bfd11e1ba15d","ssdeep":"","tlshash":"b4d0a7272392997805ffb7aa164bdb44345044479c8295103dac8e894f1ed9195297d1","size":237,"data":"","first_seen":"2026-09-16T01:28:26.635525Z","last_seen":"2026-09-19T22:41:25.761146Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"998cff3821cdb912b70ecb74757e30bb","sha1":"a471bfca0b58f803bac03262161514c4f0ce2795","sha256":"896934c9e2882a1e9724e45a567b91c1accc761fb46fe8fabcca6f1c930fedac","sha512":"16df4164b9dcd0eda63a634a0322fc299d7628a0edc4fef9f09ff877c0d856ccbf3f1b8489826d5b756e415cf2f6be50ffacad71f393c4169ea851ccd8252dfd","ssdeep":"","tlshash":"a5f0e18b3ac06f7104cf68a330686b9e5d3740146e095a10cb24c8600c34c4fa5bbcaf","size":581,"data":"","first_seen":"2026-06-25T02:50:50.896253Z","last_seen":"2026-09-19T22:41:25.761783Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-09-21T01:56:08.191303Z","times_seen":55443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-21T02:48:52.255694Z","times_seen":436959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"xonabloxeon.site/","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T22:40:50.899Z","timestamp":1789857650899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:40:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-store\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7fVWI3AEROqkmZe0Kk4Ljw6nXh2mmx8lBigKZitZtf68OrOLJH4MVrz1GNn7ffBtgWRgh4FDKGnEuH3esKM1gRh6ypji28xu9U62d2oKUPJyQeWP%2BVUF7DpOzHTqDKHH4w1\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a3dc182e7d00b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":18804,"size_decoded":6429,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1609)","md5":"cb226566868fb146b647297e496d7923","sha1":"28f541d19a541d16e447ea8992da8886b3f87a8b","sha256":"752411d6b4cfac9af393a62003a5b0e587f72f2e868e03c6ce58d5a7471f55d4","sha512":"e36e1c3f97191f1c61391fe4c58fda6cfc487dcd70c4f2b2084b58c1887d51cd9bed0bf57a6c3e818919e5f843032d1a625dd434e1219e6952ae7be312618531","ssdeep":"192:F5FhaDTXgNso2KPJFpFXnYGGSGbNGH6zbXbLpH4gONQg5NPQ9xyq4CusIpoUNpVw:FXUqso2KPJ+pHBOJe9xEVsSCTKbJhdDC","tlshash":"b282c62031f0166f11939ab4f7e07b2a5dadd68bc62f8d18b27d52a06fd6c94cd87308","first_seen":"2026-09-19T22:41:25.750378Z","last_seen":"2026-09-19T22:41:25.750378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":29,"connect":23,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:51.753Z","timestamp":1789857651753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sat, 19 Sep 2026 22:40:51 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::7pnl6-1789857246062-a91ce58a0973\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 405\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGSg%2Ff7kdaBxB9GqdSLfCtSqyaeQEjQydr6ZR91UiaBZIx%2FpGm0PfAFwtXCM8MiGEtTTtOGma2pJBT3RcaSlO8nA0YNVqIbmTcZqgZEPTNSZO0fW38F0xZQOWxa3A3EGNK4uK5Q%3D\"}]}\r\ncf-ray: a3dc18339f3056be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T02:48:29.131091Z","times_seen":18577312,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/img/case2_LTe6O5HQCX.jpg","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:51.761Z","timestamp":1789857651761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET /img/case2_LTe6O5HQCX.jpg HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:40:51 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 14:22:00 GMT\r\netag: \"6a85bc08-154fd\"\r\nexpires: Sat, 26 Sep 2026 22:16:47 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 1444\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyfuvuyuQs%2BAddOoSIC5ZfVigiQ59qCwkrAc%2BAr8eCI5uDbGklBn6ETTwodY3BIxktJTF426JF%2F6Wy54bfJBc1VooC5a4LXgs1egb01r8E8wC78F%2B0YAx4XD6iLAEZip%2FDnK\"}]}\r\ncf-ray: a3dc18338e8cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87293\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87293,"size_decoded":88037,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3","md5":"ca79c76486f8b959ff483d3800dc8993","sha1":"1ad49870f53a4ab4a86ea126788c7afa2809a5b1","sha256":"08b97c6d1c396f18771ac0ad2b305530ca3162e45aaded2c4d48aee3ca6a9843","sha512":"ec1389d33bea8b0568582c6fbc2c3d2099830d758230374e1b771ac3a9da4a2970337d1311cf539e36b665a5ba70508950d65362c851c982dab11428f77c84b2","ssdeep":"1536:S56XFeL+EuQehhUQYwpccXb/P6pSBFFe0zSM/nU10x5H+:S41eyEuThvY6c+b/CABFFGMs1sH+","tlshash":"0c8312885a4d01c9cd90c5f36afd76a10e1e0b1d958ce0219196bdec317a70bda2f16f","first_seen":"2026-09-19T22:17:26.816505Z","last_seen":"2026-09-19T22:41:25.753033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/img/header_emmbdPGDAw.jpg","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:51.763Z","timestamp":1789857651763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET /img/header_emmbdPGDAw.jpg HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:40:51 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 14:22:00 GMT\r\netag: \"6a85bc08-9538b\"\r\nexpires: Sat, 26 Sep 2026 22:16:47 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 1444\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlpVHMPAusbmHgJVjGkh04IskLRfzu3oFqh960aKniXIgJb4lfyd1LxpAgsjQapN7l3QPYi3chU7X3DgZMZYQnWRex5xciyHjwyfmxWCxtkmBVxHMPwb11Ta9yG3CQYPA3w9\"}]}\r\ncf-ray: a3dc18338e8db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 611211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":611211,"size_decoded":611946,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x878, components 3","md5":"e94031df5c28086468787298c3678673","sha1":"7e4eeb8cfca9a2083da7cec1cb03a67d3b69cb49","sha256":"184dfc12181c9f3b56b33d24dc364906561d3a0d4ba70a46b91efb2cb8402971","sha512":"dd1ea0fcf206f021f60a6fd5cdd3b8509322aba510fd8466ca8123f50e774d6e2870b3e337a72fad1d1b2928f62e2869e52c4c7b99e134320ccdc1b690dff1b4","ssdeep":"12288:wWqZ8OsdETBTS+5B96puzrFf9SDiRpXStnwGm6uiHj/:oPwETpHC0p9I0pXcwGm6tr","tlshash":"5cd4236b46a601d5c7f7f321a1e70a177633570bdfc8627492bc32c0adde09ad12c66a","first_seen":"2026-09-19T22:17:26.809983Z","last_seen":"2026-09-19T22:41:25.754639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/img/dir1_7ee6jSsDJl.jpg","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:51.764Z","timestamp":1789857651764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET /img/dir1_7ee6jSsDJl.jpg HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:40:51 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 14:22:00 GMT\r\netag: \"6a85bc08-4dc79\"\r\nexpires: Sat, 26 Sep 2026 22:16:47 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 1444\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LlaXTfISYMRlRld79GQbxoloPRRROaJf5cTF0r%2Bm8Z4wE2XVFpNUOX3eEytCYrcCtp1zc%2Fdc3hDP9GTcA8De42EKaxbjloLUcPbPRls50c0Sjn6HGfQPDzPOal7HZde6Z0%2BF\"}]}\r\ncf-ray: a3dc18338e8eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 318585\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318585,"size_decoded":319326,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"4750946d3a24ca39c325f8ba653cba55","sha1":"331b42d8539ea852e90707f8da27121305aa8f65","sha256":"d2292bdbe41e783f7022007b2716c14427e8c4e961bd9c5a253773ac433b37fe","sha512":"ea8e7ef9b64706b2f8e16aaca679da4db8330c8eca6960c7259c8a837750bf493e7b53ada500fc6ef15b67892901a231ed87d1352b54cb8fcd47a6b0ac566534","ssdeep":"6144:PeKNQlojsXHThEdDXUC/WoIQGdvqwJxlCa6LicC7Nxj7ILoC1NWW:DN6oQXzhEtk7oIQSyEXCg577IL2W","tlshash":"046423a3492b83d4e0dfd0d8fcf9773d841073bd6aadd758b98ea67e610a0694374224","first_seen":"2026-09-19T22:17:26.811871Z","last_seen":"2026-09-19T22:41:25.755778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:51.807Z","timestamp":1789857651807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 22:40:51 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 4697911\r\nlast-modified: Wed, 26 Aug 2026 11:24:44 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hdph%2FyW49NR04Z6CVMhDYPEca9zXsiLOx49nh8bwnImfkKtU%2FXCEKBCd3MmNSeB3it3KZtK34LYYt55pNcVzyzTwD6r1xDtzUhpEILkLXTypmqw9TZ4kAa0rbUw5bAzPgpInuYA%3D\"}]}\r\ncf-ray: a3dc1833cf5956be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127118,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-09-21T01:56:08.191303Z","times_seen":55443,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:51.756Z","timestamp":1789857651756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 21 Sep 2026 22:40:51 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=up7pRdlkHMAKLW7AjSRW%2FZ3JNBrwnOuXhal6bMrMnlhmcGLETtDIHzPJUItD%2Bvj7%2F8Eop95MDiO6ATAv5jpQgQUg0pvpWe6XozyaYxXNkMuqdYm0eoz11%2FFeKlf%2F8ogzMm7n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 19 Sep 2026 22:40:51 GMT\r\nserver: cloudflare\r\ncf-ray: a3dc18337e8bb1b8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-21T02:48:52.255694Z","times_seen":436959,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/img/hero-bg.jpg","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:52.144Z","timestamp":1789857652144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET /img/hero-bg.jpg HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:40:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 14:21:58 GMT\r\netag: \"6a85bc06-198d7\"\r\nexpires: Sat, 26 Sep 2026 22:16:51 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 1440\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7N5ogwxcFSHUAIwpDAEyX3R62d7D8UUSqAYnWqkhd89fJwILpqfe%2FqxD6SvOuVCPWSswQGRLJ1Tl0mJW83XrH2gujS9TJqD2NHt3DkZcEM78fW3sAZXV5sEXFMQp9t%2FqNdF9\"}]}\r\ncf-ray: a3dc1835ef01b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 104663\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104663,"size_decoded":105402,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 768x425, components 3","md5":"7a7aed20c997474dbe8ba2ffc845f0a1","sha1":"669a9b4d5b2cd823f0904895c187c8e50df7a481","sha256":"d719792dbf6a58fa2446d7ac17715cfe7029467d62eb0012b33e60b02cbc8b51","sha512":"65db2e9175c3803c0436b4e9ce2f8ea4a650ac4a815b99c4f648cecb32f975a8f7d0daed3c5c66f0e3b956ab25bfc575051ad213c4182ef9c2dccae2b723289a","ssdeep":"3072:StJQlSkX+wCUf6ZjGc4BUMLZKwF/rwvuPVZRubfOxB:SQskXvfvcRwb/rwvauS/","tlshash":"45a313a895208acded33c26b51353e63c07c9c75254c90fd7896949af193bebb4da8c3","first_seen":"2026-09-16T01:28:26.629304Z","last_seen":"2026-09-19T22:41:25.758176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/img/apple-touch-icon.png","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:52.192Z","timestamp":1789857652192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:40:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 14:21:58 GMT\r\netag: \"6a85bc06-1652\"\r\nexpires: Sat, 26 Sep 2026 22:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 1442\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQJO9%2BBr7er6jJyPzqfZQoiJJhUim6SAhP%2FzdCFBnHuG4Nb%2FCPmiyc6RgDy%2Fq3JDqiIDwfSRBDB%2BXbzOQ%2BJEjTj0Oa1wZuqEljb6b7bTL5mQJRadZh94lJus5M%2FUnPHLm0TM\"}]}\r\ncf-ray: a3dc18363f0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5714,"size_decoded":6462,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2d6b2b9de96190eff15c0c4562595aed","sha1":"5d6cc6c8e0bf26808440bebd8e6e734dc3f55177","sha256":"f10b81643c06bc685a03ce402249f0dc8ffad9bf0b291411b689492883615973","sha512":"f96675cdce9103d21d794dff22d810ff837313bc134f048a7f2cba967f18750205ee13081298a0a36ca0b4ae505addc73a74ded0689d03d83880f6c23ccb5890","ssdeep":"96:Kr+s8wlpMW/qsNoevn/68obIqM9GD2PsXG4+Z43/943SX+rKb71Wt5pTSbSr0EXa:K6sbl7/qsNoev/688ICD2PS143SOl5yL","tlshash":"6bc18d1c81debde4e7b6c6c86334a4bdc4593c2de82d695798e7c1da8715f0434c0683","first_seen":"2026-08-28T23:12:59.600194Z","last_seen":"2026-09-19T22:41:25.758809Z","times_seen":9,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xonabloxeon.site/img/favicon-16x16.png","fqdn":"xonabloxeon.site","domain":"xonabloxeon.site","tld":"site"},"ip":{"addr":"172.67.218.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xonabloxeon.site/","date":"2026-09-19T22:40:52.193Z","timestamp":1789857652193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xonabloxeon.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:42:20 GMT","end":"Tue, 17 Nov 2026 15:41:06 GMT"},"fingerprint":{"sha1":"3A:F4:C5:BF:2A:41:46:CB:0C:57:FF:AA:C1:96:09:24:81:1C:59:1B","sha256":"B5:5C:BE:13:3D:16:B6:B4:FA:3D:FD:FA:64:55:B2:B8:EE:97:6E:45:DE:F0:39:E1:95:50:90:BC:DB:DC:27:0B"}}},"request":{"raw":"GET /img/favicon-16x16.png HTTP/1.1\r\nHost: xonabloxeon.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xonabloxeon.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:40:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 14:21:58 GMT\r\netag: \"6a85bc06-19a\"\r\nexpires: Sat, 26 Sep 2026 22:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 1442\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PmuZRr51mGTtKMw8syi1ikEoRBvbCx1G8dvLg6tJaD67hVR7vSJ9ouDru2GtnmMKqbYIUjGSsg1lL9JD3BP1Bo1SdORRDk%2BOPsXVmm3gUkP%2BAUpMCFCjDjk%2FMN%2FVCdFf38B\"}]}\r\ncf-ray: a3dc18363f0eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410,"size_decoded":1150,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"da284c7f162c7d2664c3992b292cbfae","sha1":"b7103e83b1f9147af239189640f09d175273bd74","sha256":"3b61b5924471aaf7156bad61fb581a797a914189553ec5b9b190c7fa44cdc574","sha512":"1e48747cf38aed9fe3d4a8790d97d8b8fa792fe9309493b5d9ab0800df16cda75d452b3a1d6b756825095d9fb89448ce45577175c284b51419119b2950c5bc86","ssdeep":"","tlshash":"6ee02b880db1383ad84212a34c0ee062bdba52148ecae95c0828081e16e028220a2bea","first_seen":"2026-08-28T23:12:59.594164Z","last_seen":"2026-09-19T22:41:25.759471Z","times_seen":9,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"xonabloxeon.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xonabloxeon.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}