{"report_id":"ee7a2b8b-f790-485e-bb15-3776ab84b428","version":0,"status":"done","tags":[],"date":"2026-09-14T14:19:43Z","url":{"schema":"http","addr":"oxgexxcexnb.com/","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"104.21.93.64","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oxgexxcexnb.com/#/pages/login/login","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"title":"OXG","dom":{"size":433787,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62824)","md5":"19f3f1d336813758431079f9323251d4","sha1":"ce153624153aac8c8f67d8a6e481eee179f6c184","sha256":"eefe76ce8fea5b26df275644bf98e15c5ea1ee0d1fffed4de0fdf7a50b1657f3","sha512":"e677f510044e4db3ae95dc7fe6022c134be18031c3488c2bf852fdd2fcad50786a23e79ba0b4efcf8f6bacde27e818f63ba1f57314e8ff1651ee0e6b2ffb55fc","ssdeep":"12288:QUu0l8+33GtuENtFEI8nAvMEUqn/NXa9au:Xnl4EIUsY","tlshash":"72948d33539e178e722bcc105a80a6c5dd28d223d56116f9f6582a3ecfcbf90172979b","dom_hash":"domhash3c9583d0b1095875d1e306b5ca03fd28","first_seen":"2026-09-14T13:52:34.276069Z","last_seen":"2026-09-14T14:19:50.630858Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oxgexxcexnb.com/","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"104.21.93.64","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T14:19:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.120","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-09-12T03:33:30.20867Z","alert_count":0,"request_count":1,"received_data":576,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-09-11T23:01:28.138051Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"oxgexxcexnb.com","ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-04","domain_rank":0,"first_seen":"2026-09-14T13:52:28.171453Z","last_seen":"2026-09-14T13:52:28.171453Z","alert_count":20,"request_count":20,"received_data":4211976,"sent_data":9396,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/7303.909bb2f3.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca8df02103ce9d3af755bf93822f05db","sha1":"cc36bd1752b28d9806e3c12b770c0600563e5913","sha256":"6be6c47224713bafc3d9d45697ff8eeace59561a1fdc87e075c560de039a88a2","sha512":"3161c4b5004566d36b322c126865433d55720ebb52810faa4ac8e87b5cd69559c7d7060f6407d0825725805080f7de0a32d5b1e35d0ac6e7f9eff104f2c8af8f","ssdeep":"96:66K8luxu3uZTGoTtg8B5vAB0YpM34PTTcJqRsohO03Q4glMBa+at70n9Rtv6:6kuxSuZTGoRg87AOWTTcJqRsL4glC6","tlshash":"6ae14244b54f1c911bbf850a05c9430a81a9b6a3192a468eb2d525df1ff3ae42331bef","size":7124,"data":"","first_seen":"2026-09-14T13:52:34.30769Z","last_seen":"2026-09-14T14:19:50.646614Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/pages-login-login.d221ded7.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"148be9e716fa4b833ee053f8cb687135","sha1":"f9ca30ce1002ef4ba8af4899645e8d1522685fff","sha256":"d54e079c1c8d69f52e5c88b0588893ed70115d58afe925c28787b9f02309928e","sha512":"3c371fc23986f066590746f0a6f9290ff5b7d02a4b6b763c45bac88e8d2670e6230416cd76722ee2da4498fc2a9d133c1419d75e3a748fd64cad2d17665b6cbc","ssdeep":"384:LYCiUk99TYqr7OWBA/NIdukgynZVZYdQTouFA/k29Tv7grIY:LMJ995rqWU61wdQTk/k2lsEY","tlshash":"9e82d88a768f338d96238a34001721a1723a2e22904a55fef576dc218e5e5477e37ffd","size":18301,"data":"","first_seen":"2026-09-14T13:52:34.321563Z","last_seen":"2026-09-14T14:19:50.664505Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/adapt-pc/pc.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e34e391671d276077526b61b787b2732","sha1":"5ba51045caae89278cdd44ff7c5cd74da5138270","sha256":"bd2c3b504298b59dd8f6dca00b04fe20bf9f33e4d4a20f7d9d78d70bf875f149","sha512":"e7cc91ae598913f48f6b547139216762259b646891225f40f993cba5b09b12dd89386cb8233febfb6d06f1305ce3119a11157cc3727a27477eb9429f716b935d","ssdeep":"","tlshash":"14d097a280402a3684bb079bb361f3cc3cb1016a71069002a40c8500b57cd878cc3deb","size":253,"data":"","first_seen":"2026-09-14T13:52:34.282038Z","last_seen":"2026-09-14T14:19:50.653607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/index.658b41e3.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"875f289a6fcc4c081f965012465ba77a","sha1":"f38dbac2f54f3d978ead9db365c3119b3bbc2cf4","sha256":"7a47c054a3aecdfeb7ea6e6b57c77bcc065f0cea07e33c89763ce525dd593c46","sha512":"10bb3d1f32f4ab98c19f44b465f33961773681f701bbce19847b476fed525f6e8055d3118e59959462f06f891ef91a00e9827b4936a73bd7409638ec1706d31b","ssdeep":"12288:A8xlA+33GtuENtFEI8nAvMEUqn/NXa8d6wdmv6dDVEQwR6jDfqpkj9e5kL442GMg:A8xlsEIUsECdDVVya4tl8KmDN7I/nY/","tlshash":"5f759d3b23cd37f8164aaa06e1463936e9784eb3f752f1e044e8752912defd5c1229b1","size":1669641,"data":"","first_seen":"2026-09-14T13:52:34.327306Z","last_seen":"2026-09-14T14:19:50.670291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/188.d4f3350f.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"838f42d9d9d2f9481138a5ecd8c38ec6","sha1":"fb641ece7f3e39285e002e59dadd962b486b0021","sha256":"031114eebfc054a4187cbce8e842d0098310beafcdb12eab87ce4410d556f45a","sha512":"c3cf360b62ea4fd147fa3ca30bd8a305233f5369d42131ffe86b9259ef6eb86ef349aa6ada604716db99b0c17ad8c09832e4fcb01d0b65a281ed780935f8f386","ssdeep":"384:F1uF1+MkBn8ZDWmKWq4YMq4jY4GB42042:zuF1+MkBneDWmKWq4YMqQYpB10z","tlshash":"3562d956b15f3c5a06a7c044663a810af3263b09a170c690ebf9afff45d7f960369f18","size":14711,"data":"","first_seen":"2026-09-14T13:52:34.318933Z","last_seen":"2026-09-14T14:19:50.666547Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/2378.b6783d25.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fef7070c18ac9c9dfc62e66dfe0e874","sha1":"b691e3bdc7eeceaac39588d0f0074b60f99dc4a2","sha256":"06cdf003cc04b6132299718d0340dfd5ed010b6250fda922b1ff84dc2ee8de89","sha512":"f2569fd00cf1082b46d2e384ff94219e9003d2643e1d1257de9ce7c670a561aec708cd1aea7c400a2118e8e12e0fd6bd05756f32af3c4385b8715ce358ec08d2","ssdeep":"6144:Z8vkkfhFTq+h8nAZKw4h7s4enZ/O8pBgI6ED9mgevLQxktddC/1LdU+:MhpqsYAER7s4en5peI+gevNtd+","tlshash":"a1645ccb250bfea3971105a5406f3e2a9d3c1ba9a44e9c11dd92e5c6b830d7c8376b7c","size":336816,"data":"","first_seen":"2026-09-14T13:52:34.309759Z","last_seen":"2026-09-14T14:19:50.64869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/7846.4d32a921.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cecc160d80602b9d9c18fd091ae43133","sha1":"9314b282d68111dedb26fca688c6db20043f8ae3","sha256":"ec93f2906250a056cbd06289ea1258a62b3dd19b7baf6d3fab931e2973b63a1a","sha512":"ae544fb8288dfd7b813102855c71d0ac15fb090faf1bc8e1940811d3aae88a590c749ba7590861af102a660c1b589cd019c352efdc80405c3a556281e5bcb5eb","ssdeep":"192:jIVF58Wh/DC691tPiu9g6K3OaycozD1JiqRsrMt2f:jIVF58WlDCU1tPh93cozpBqf","tlshash":"ee02c72a719e781f17e35860203f0109613b391d6671c3c4b7fab8f2999264e6b3af5d","size":8926,"data":"","first_seen":"2026-09-14T13:52:34.314208Z","last_seen":"2026-09-14T14:19:50.658699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f05128ace0fbdf8a6512e08eef4d26d8","sha1":"947868fd5801b518c3164925113a8a29b51c6afd","sha256":"2d0fd3fe69b3f4bddd727f0145484d337f6033def01c76e41aee7740ab112c39","sha512":"48be08a9af46d65e227b7f4ec9cb9cc001fd29d534d4d76adb6bdf0e05e87310d25e26d4846ae594f3812dabfa4d63d915290266180d55d411c6d6cf658a1f3e","ssdeep":"","tlshash":"50f05c42506e361c12208005351bd50777e94477eeda5c901c99376d9fb7e4bc56d859","size":440,"data":"","first_seen":"2026-09-14T13:52:34.32364Z","last_seen":"2026-09-14T14:19:50.672364Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/chunk-vendors.8e269a42.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb3d0d6a11c9ff4d77451e49cd7275e","sha1":"a866b471ae8eefbe0a43a9ca26e857bb898143c5","sha256":"5585561a341d37df9afdeaa4ef4e447757d0b193238b53756ee658e814c2553c","sha512":"d121a059871b08b0bbeb2cd8b4dbf9e3f6d4d36364d9be98075f49b8fb5dad1e42f01d96cd2c045edbf72224ec23488bb9f238b7cd30c1ad72dde06708c6f1db","ssdeep":"12288:BG2Tk7sLGfgRI+Gvkz/7oInKhC9JK77tjy40GABGKs9h9aKU3st:Ef7sLGfaI+BzUgK77T009Tt","tlshash":"8965288db282b07607e760b5403f120bb23b7959b40a8598f675e8e56d7c94e613bf3c","size":1487886,"data":"","first_seen":"2026-09-14T13:52:34.325614Z","last_seen":"2026-09-14T14:19:50.682708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/6752.78cdb884.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de35126e5dfe902135ba3c679a98ccd4","sha1":"d3ffb0f7f4ba28164828fd59bb1af989af9e36ee","sha256":"728fb830cc19e72072d97421589dc3c3139a92b8dadc9f411e5d9640eaf428be","sha512":"e58b14dd233219e92e7993450f7a2aa25bbea6df370ee3e188bc9eddb9be8908b53c27583d262b354e6dd8ef80787b419817dd84807dfc037baf5668f5cbf4a8","ssdeep":"192:tncM6hWV2X9HT+29AI84COcBTJFE1je5Xar1t0m07qRsVQ6G:Nf6/XhUXxI7WuQdG","tlshash":"2832416da0cd9db37fd868c8408ea103638e6a01dde07d42a27a5f95cafe641121ff64","size":11273,"data":"","first_seen":"2026-09-14T13:52:34.304769Z","last_seen":"2026-09-14T14:19:50.663117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/5842.10780bc4.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d571d9c19d6b72dc44aa3628b44cb15","sha1":"59e000db68673ccf3f0dd1e52c583f6b51996046","sha256":"67383e7c3aaa125632914d36c810c28c73785c53d4055e19d71f4aed6d7a4695","sha512":"1cdd8e39bb41964a978f03fbc099f5ee4b386814a0440ee1f33aa9bdd6fa899f4d607fe0aa0f0685c2a572537ef8b68a41a42798cecda1560e4b765a48a4898b","ssdeep":"6144:ShZjwdge67q1szEgF3OonewfrgIc67bPV+MffBqoZ3R/:SMVszEgF3HB","tlshash":"b214d6d4fb25601952a3a179423f1507b336365ee44b86a8b16ec9d92cbc0ca3677f3c","size":208988,"data":"","first_seen":"2026-09-14T13:52:34.287422Z","last_seen":"2026-09-14T14:19:50.665524Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/pages-index-index.f14f73b8.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c7686d0944e65a58ab2b4c161d86fb","sha1":"335f209f16e36ffd4b95cf413a364b0afc94b3f4","sha256":"57f8d5a9f365fb41a447aacd80bc187173c6f072deaac2b557742c8f9153a1c3","sha512":"d66da574605cb8f3b26cc02c08c865282beccd510a6ea0370845157415dd39e8550f427b6941c9009e326e70ca5ac9118dba3f1517b392e758ebf4f6ea5f942b","ssdeep":"1536:MZ42IAAbzCZ+8X31XaUYkf5hjPrQcSgmNTrt9lBfVJxPpp+RHzURTedB9tvK:nAAK+8X31KUYOf2/zRPpp+RHzURTedB6","tlshash":"6c736b39719fb81f46d34424605e1159ba253e235021c2c0f7b79eb6caeaa87373af4d","size":74565,"data":"","first_seen":"2026-09-14T13:52:34.311902Z","last_seen":"2026-09-14T14:19:50.655174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"App Launch","filename":"https://oxgexxcexnb.com/static/js/index.658b41e3.js","line_number":1,"column_number":43854},{"level":"log","text":"App Show","filename":"https://oxgexxcexnb.com/static/js/index.658b41e3.js","line_number":1,"column_number":43990}]},"http":[{"url":{"schema":"https","addr":"oxgexxcexnb.com/","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T14:19:07.935Z","timestamp":1789395547935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:08 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flu9dc8%2BG8wObEXLrFYnJMA2u47g4SnceFaDdz7LnMSz178W1U99wZ6k1kWcfjb9eiOq1OekvU%2BIbHYKhWeYs7KOKsi9pV7Zpm14fY5Pn0ApHreGphEId4lwkGn09b2EhaA%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b0065eed7cb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":922,"size_decoded":1133,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"6949d278d45a4d1d9142564cc7a7ca36","sha1":"9d3958992107e90f209fc6d6797250fed41ce8f0","sha256":"d2af45f1f2839b34990d558664e973faf21e1c407d48f58ef598e3f1511c6bab","sha512":"79dc2d484fa7c520b4f3ae75073b692898dd62135d695071cded1dee1d99b24074d990fb012f2b34e5da00ed2941c6b78fd49075f12eb6f17e7596af3b78b94a","ssdeep":"","tlshash":"231104824c19d11c07708505382be61ff5d98879ed698c503de53ab88af17cbca2d800","first_seen":"2026-09-14T13:52:34.301052Z","last_seen":"2026-09-14T14:19:50.639249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":16,"connect":22,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/index.149e085d.css","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:08.703Z","timestamp":1789395548703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/index.149e085d.css HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYBbUp7tDDvsx2MJmhwbr39MVJB91qvcrSbycia7iNMEyRPSwWmLTZzJVNuetAu1DrZzxpvZTElH1CWJqYDmb5PetTqUy6M3qhILtikOAJyvhKIwmwvwfzmLv21p9P6IsQY%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-17f86\"\r\nexpires: Tue, 15 Sep 2026 01:51:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1646\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b006636dc8b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98182,"size_decoded":27810,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"53c6b28515f1a1c3892442b7b843d596","sha1":"488401227bca1ed6806285fecbdbc89ec3f147fd","sha256":"f62bf853d2338897e8c298109becd21c0f3a9b14462ccf7f16f70c3cb7a5efe8","sha512":"69c4e2eba91328677cea49a96b90196e4f89af5539443603ab9ed6a616a89c227cb8741c5cb01215318211f9251f2c5fc6ce3cf1cb9b05c3dae555313b864829","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGgv7eh/nLhlvbc:hApuK7hmV+S1Wu3iGH1nLPI","tlshash":"f5a3f73719012e39e52bcd26b6c1ab5a1e60c033e15307adfbb476288bcf9c9167b745","first_seen":"2026-07-04T00:29:50.545322Z","last_seen":"2026-09-14T14:19:50.645163Z","times_seen":59,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/7303.909bb2f3.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.255Z","timestamp":1789395549255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/7303.909bb2f3.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6zoTAuMhquQelXHJXLBWKxXvX6edWJC0Ro5%2BPU9EHw6gx4jaIbMvhX3uwApxT4GdWCWZYLHy2qgh4dNI%2BrTW9wpHU32FBQ8J%2FDxqOJPrJbvdEiL37Zn9yf%2F%2BumEtnMvwkY%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-1bd4\"\r\nexpires: Tue, 15 Sep 2026 01:51:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00666de14b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7124,"size_decoded":3294,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6498), with no line terminators","md5":"ca8df02103ce9d3af755bf93822f05db","sha1":"cc36bd1752b28d9806e3c12b770c0600563e5913","sha256":"6be6c47224713bafc3d9d45697ff8eeace59561a1fdc87e075c560de039a88a2","sha512":"3161c4b5004566d36b322c126865433d55720ebb52810faa4ac8e87b5cd69559c7d7060f6407d0825725805080f7de0a32d5b1e35d0ac6e7f9eff104f2c8af8f","ssdeep":"96:66K8luxu3uZTGoTtg8B5vAB0YpM34PTTcJqRsohO03Q4glMBa+at70n9Rtv6:6kuxSuZTGoRg87AOWTTcJqRsL4glC6","tlshash":"6ae14244b54f1c911bbf850a05c9430a81a9b6a3192a468eb2d525df1ff3ae42331bef","first_seen":"2026-09-14T13:52:34.30769Z","last_seen":"2026-09-14T14:19:50.646614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/2378.b6783d25.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.256Z","timestamp":1789395549256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/2378.b6783d25.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5CwCxiO9C36WGoUX9Qk7UYmXoKFtZfa6M%2BUhxS7CXmfrDeN4HVOIoebo9y%2FXKrG%2FOA7oti770o9YHSiwfJLjHS%2FOKlBjL59eCIHKFGpZRfVKZ%2BI5M12lkK7GIw%2FpyAuRL8%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-523b0\"\r\nexpires: Tue, 15 Sep 2026 01:51:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00666de15b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336816,"size_decoded":80159,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3430)","md5":"3fef7070c18ac9c9dfc62e66dfe0e874","sha1":"b691e3bdc7eeceaac39588d0f0074b60f99dc4a2","sha256":"06cdf003cc04b6132299718d0340dfd5ed010b6250fda922b1ff84dc2ee8de89","sha512":"f2569fd00cf1082b46d2e384ff94219e9003d2643e1d1257de9ce7c670a561aec708cd1aea7c400a2118e8e12e0fd6bd05756f32af3c4385b8715ce358ec08d2","ssdeep":"6144:Z8vkkfhFTq+h8nAZKw4h7s4enZ/O8pBgI6ED9mgevLQxktddC/1LdU+:MhpqsYAER7s4en5peI+gevNtd+","tlshash":"a1645ccb250bfea3971105a5406f3e2a9d3c1ba9a44e9c11dd92e5c6b830d7c8376b7c","first_seen":"2026-09-14T13:52:34.309759Z","last_seen":"2026-09-14T14:19:50.64869Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/img/wallet.png","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.317Z","timestamp":1789395549317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/img/wallet.png HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4VHZNrSDxy6ROr%2FC3HgdiXNSc3ASWyxvxwNAV%2BlDJVa%2BOIm%2BsJQ03XKb7xxA7litEAk3dSnhihrcXa3IXamunue%2FcL2ZC32VrABTlwWBgy0G9U6U0EtJcnI9v6awE1oz0I%3D\"}]}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-1597\"\r\nexpires: Wed, 14 Oct 2026 13:51:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b006673e24b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5527,"size_decoded":6001,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"dfbd433e0f2b89d69508b4c69d34eab9","sha1":"89e4dcd5ff18a69b4dd38881f65ad813bf5f04a7","sha256":"366360095db3556d3d4692da71159ab33a0d0888798d81f71254cd73d76f15c5","sha512":"8e02054117be7bb46fe75ad0e154e72745b0d2a0624cea0ad897fcb47bed0f5eb008aff5780b19c4fa06f098678cca6361ebf29c057a0d3299b9751583ac81cb","ssdeep":"96:bcQllcHitlIxv9vk7C1+I4wWHLihk/xT8VbQUw1DP0Z7gCFyaA+JKrv27qN:bOIIHUCD4waow1DcZkCFyaxJKjh","tlshash":"82b16e88f5918446518e959a30ffdc164b7f8a80a2d5ed35edff820f4a30bb01d229c7","first_seen":"2025-08-29T02:09:30.900744Z","last_seen":"2026-09-14T14:19:50.651094Z","times_seen":19,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.120","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:11.811Z","timestamp":1789395551811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 14:19:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 14 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBACe2qoAmFvf0KRA6cLAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACe2qoAmFvf0KRA6cLAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACe2qoAmFvf0KRA6cLAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":576,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-09-14T14:19:50.65254Z","times_seen":20485,"resource_available":false,"data":null}},"time_used":1764,"timings":{"blocked":0,"dns":3,"connect":216,"send":0,"wait":433,"receive":0,"ssl":1112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/adapt-pc/pc.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:08.713Z","timestamp":1789395548713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/adapt-pc/pc.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oZZeR04RP6B2OK3sMqyBkqwuTCWseGRllZw%2BImuLGpvJPZU47yycoS6MnrfNOY2VoL47lklZvf5elaneT4h%2FUn0q4t9%2BCoZfbJzSPXxSQpI31YQzJlFIntrTdZRLarF8Cs%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 15 Sep 2026 01:51:42 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6aa49c1c-fd\"\r\nage: 1646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b006637dcbb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253,"size_decoded":914,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"e34e391671d276077526b61b787b2732","sha1":"5ba51045caae89278cdd44ff7c5cd74da5138270","sha256":"bd2c3b504298b59dd8f6dca00b04fe20bf9f33e4d4a20f7d9d78d70bf875f149","sha512":"e7cc91ae598913f48f6b547139216762259b646891225f40f993cba5b09b12dd89386cb8233febfb6d06f1305ce3119a11157cc3727a27477eb9429f716b935d","ssdeep":"","tlshash":"14d097a280402a3684bb079bb361f3cc3cb1016a71069002a40c8500b57cd878cc3deb","first_seen":"2026-09-14T13:52:34.282038Z","last_seen":"2026-09-14T14:19:50.653607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/pages-index-index.f14f73b8.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.266Z","timestamp":1789395549266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/pages-index-index.f14f73b8.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djCZoTKMA3OETpKhnxZLSwn0pmOeVKuuxUErvAbS1mgcUnxi6Mi%2BVR9%2FdHInr7PmKxwmfWGbjSAekKgdwIiiLvzIB2rW7UwF74NNpc0dNZ3Kp4edZogUWtH5d0KENo3dQ9w%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-12345\"\r\nexpires: Tue, 15 Sep 2026 01:51:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00666ee19b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74565,"size_decoded":19045,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61779), with no line terminators","md5":"78c7686d0944e65a58ab2b4c161d86fb","sha1":"335f209f16e36ffd4b95cf413a364b0afc94b3f4","sha256":"57f8d5a9f365fb41a447aacd80bc187173c6f072deaac2b557742c8f9153a1c3","sha512":"d66da574605cb8f3b26cc02c08c865282beccd510a6ea0370845157415dd39e8550f427b6941c9009e326e70ca5ac9118dba3f1517b392e758ebf4f6ea5f942b","ssdeep":"1536:MZ42IAAbzCZ+8X31XaUYkf5hjPrQcSgmNTrt9lBfVJxPpp+RHzURTedB9tvK:nAAK+8X31KUYOf2/zRPpp+RHzURTedB6","tlshash":"6c736b39719fb81f46d34424605e1159ba253e235021c2c0f7b79eb6caeaa87373af4d","first_seen":"2026-09-14T13:52:34.311902Z","last_seen":"2026-09-14T14:19:50.655174Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/img/home-a.png","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.314Z","timestamp":1789395549314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/img/home-a.png HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkhBBLmxGwwektWVfpy6qfldy%2Fr9OUQwuLbylB8Q%2FSNN7j59Vt0AaTmWe%2BQR9gelg1A0J2M5QAyPWFyKh3%2BpiRLPfWcysrldr1LLH4NxlxAf3C9HJ1lqnmzzJSoSjThuBe4%3D\"}]}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-13fc\"\r\nexpires: Wed, 14 Oct 2026 13:51:45 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b006673e21b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5116,"size_decoded":5571,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"78860f88f3de9bde6fbccc396a9d4869","sha1":"869e15cec3a99f857e7b75cf4872317261c04433","sha256":"6a45ca2e22567b26c261b57c50d9650e2f55b1ec99cc24481f29a55f4ac851f1","sha512":"f9d8bc60d247232bfcbfb010773e2398c8de7886d41e536f1703eef248ea75b216112a8c3157e6b0005adfcf5b6937715eb1b8ce59fe2b7e7e92f09e8db63d19","ssdeep":"96:bcQllcHitlIxv9vk7C1+I4wWHLihk/xTJ6bQTqSO+02oU0xqXBZq:bOIIHUCD4waZTXBU","tlshash":"86b15c48ad414901654a8b7b28bff5170f569ac059c8ee18bcaec21f96349a108ba6df","first_seen":"2025-08-29T02:09:30.925614Z","last_seen":"2026-09-14T14:19:50.65668Z","times_seen":19,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/logo.png","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.401Z","timestamp":1789395549401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/logo.png HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FCeR1QJm3FvE6NNiw6w%2B3vRhOgeVATQq%2F8KrclyqLDjqECAGZ8CLSOl7WvsvvYUmFRhOCIOjPZYEmIFuQA%2BgPkZfw8Je3RnKBPSXGZroWWrUTATh2dnjPLsMQQJZ%2BXb2wE%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-1d0ef\"\r\nexpires: Wed, 14 Oct 2026 13:51:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00667ce2eb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119023,"size_decoded":119380,"mime_type":"image/png","magic":"PNG image data, 675 x 614, 8-bit/color RGB, non-interlaced","md5":"e2384a8ccf18f1bd43403ac954118315","sha1":"e421062f96e05c6b7ac11bfe273b1d297caa2b01","sha256":"948d0496b74cc786b725fb6de65dd243d5c5652231e2d47baf782121dfbc9ed7","sha512":"c061cd317d76bddcdfe943152a690ac325aa932b18112c0479440b449f4034888da6dfe39dfd79d4b8e7361bb8a237ec60c2194efa69ed2c446ad5d66653009a","ssdeep":"3072:4ckX3rhx5a4E8h1DH2r2ytYs/0Ftjv/HP93vE+kGq:49XbhnpEM2ZO1P9/3rq","tlshash":"59c3131606408758fd1e73a8963512986364dc63ff4e3b8c852f2ad25f9e28e146bfc7","first_seen":"2026-09-14T13:52:34.297578Z","last_seen":"2026-09-14T14:19:50.657553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/7846.4d32a921.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.708Z","timestamp":1789395549708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/7846.4d32a921.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URocO8eBB3w5pXzTAHkYBK%2BF1CbmSrbfjl5N3esqS3uGRH3VvdIwnMHRG43ZmS3x%2FIhweN0cNTuqefIOPzW9LG1Uh8LghHJYZBAlZEvIl%2BQ2sKXbieAyI0BgwBf%2FxV0TUos%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-22de\"\r\nexpires: Tue, 15 Sep 2026 01:51:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00669ae44b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8926,"size_decoded":4104,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8432), with no line terminators","md5":"cecc160d80602b9d9c18fd091ae43133","sha1":"9314b282d68111dedb26fca688c6db20043f8ae3","sha256":"ec93f2906250a056cbd06289ea1258a62b3dd19b7baf6d3fab931e2973b63a1a","sha512":"ae544fb8288dfd7b813102855c71d0ac15fb090faf1bc8e1940811d3aae88a590c749ba7590861af102a660c1b589cd019c352efdc80405c3a556281e5bcb5eb","ssdeep":"192:jIVF58Wh/DC691tPiu9g6K3OaycozD1JiqRsrMt2f:jIVF58WlDCU1tPh93cozpBqf","tlshash":"ee02c72a719e781f17e35860203f0109613b391d6671c3c4b7fab8f2999264e6b3af5d","first_seen":"2026-09-14T13:52:34.314208Z","last_seen":"2026-09-14T14:19:50.658699Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/logo.png","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.818Z","timestamp":1789395549818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/logo.png HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kTe0EA9hLzInipUSwU79tyLo7HfRY%2F9UoUOyhKVsX0%2BaAPMstVjNMDEpiHs0yXOCdPcGZKxqWhuLI14XZLHiwSc5dJGvmB2C66A3dEeYJUGti4Kf3fgyCpttRsZpyrqn6LA%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-1d0ef\"\r\nexpires: Wed, 14 Oct 2026 13:51:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b0066a6e58b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119023,"size_decoded":119371,"mime_type":"image/png","magic":"PNG image data, 675 x 614, 8-bit/color RGB, non-interlaced","md5":"e2384a8ccf18f1bd43403ac954118315","sha1":"e421062f96e05c6b7ac11bfe273b1d297caa2b01","sha256":"948d0496b74cc786b725fb6de65dd243d5c5652231e2d47baf782121dfbc9ed7","sha512":"c061cd317d76bddcdfe943152a690ac325aa932b18112c0479440b449f4034888da6dfe39dfd79d4b8e7361bb8a237ec60c2194efa69ed2c446ad5d66653009a","ssdeep":"3072:4ckX3rhx5a4E8h1DH2r2ytYs/0Ftjv/HP93vE+kGq:49XbhnpEM2ZO1P9/3rq","tlshash":"59c3131606408758fd1e73a8963512986364dc63ff4e3b8c852f2ad25f9e28e146bfc7","first_seen":"2026-09-14T13:52:34.297578Z","last_seen":"2026-09-14T14:19:50.657553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/adapt-pc/pc.css","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:08.700Z","timestamp":1789395548700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/adapt-pc/pc.css HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:08 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lgDoDK7qEFdrKomYwhir1gnaYV1Kw0cR32a1Aqpg9aGqKld4PZfSRW9rvzooebIQUJzHHwWRezSqJu4W3Y7jlJ3WnZnCW40E75Z%2B4BKSUA5LZzIxzN0hTMgk7z5rkUz5oM%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 15 Sep 2026 01:51:42 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6aa49c1c-226\"\r\nage: 1646\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b006636dc7b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":1023,"mime_type":"text/css","magic":"ASCII text","md5":"3a42709e49f75392a1c76efc0164c535","sha1":"f3d4d4d31275080f6e0a37d5c3047d13edb9b91b","sha256":"171cc690bfe465e02f73a3b02c5ea20f69d8d2c7cd6ea98d2db74ab55c88e092","sha512":"98ce44b525395b9f667fd78a6d664c7e2f147e75489a71cf6c5b313007fee83c7eeebb80b7275d92e9342337926b968486035460c16e95656ff212bb83b6abc6","ssdeep":"","tlshash":"0cf050352bb4a445d1299599197cd7447fff4500b70f8d267db9791183cf1d204e918a","first_seen":"2025-08-29T02:09:30.923938Z","last_seen":"2026-09-14T14:19:50.65978Z","times_seen":14,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/chunk-vendors.8e269a42.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:08.705Z","timestamp":1789395548705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/chunk-vendors.8e269a42.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wIpnjoShEL2YNKnoN7hRI68N%2BxWjOLrL6OLwrb6kAIN3uNBbX%2F4DVi8zc1afrqMn5Z04RFASl1vNoEKwwIIOyw1w83Tg8JN%2FNbLcv4BIc1dF8%2BI3uRTDydtfUC0CZ5Il0N8%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-16b40e\"\r\nexpires: Tue, 15 Sep 2026 01:51:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1646\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b006636dc9b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1487886,"size_decoded":469350,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65192), with no line terminators","md5":"ac20a1ee8db8cf455a17dca4a44809b5","sha1":"806c79261011518a7814e4e8b495f5df3bc3c56b","sha256":"94ae7eddf745af066a4ef64fa310fc84ff6f3b773f568193b75007c6edccbeca","sha512":"7e239da46a41357503e3ce8db1f3303936b2b1de0cabe5c7e437cc1d085c9ebe743f792c3dd56ddfdf63fab0907a09526ed0478e77ae676a911924f3739259cf","ssdeep":"12288:BG2Tk7sLGfgRI+Gvkz/7oInKhC9JK77tjy40GABGK6:Ef7sLGfaI+BzUgK77T0y","tlshash":"0c25398db286b07607e720b5403f220bb2377959b40a8598f275e4e56d7c98d623bf7c","first_seen":"2026-09-14T13:52:34.285091Z","last_seen":"2026-09-14T14:19:50.660453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/index.658b41e3.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:08.707Z","timestamp":1789395548707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/index.658b41e3.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=le2GK2FtufTN6CmZ%2FYCFbj6XLiR%2BmPXbC8sDMsgo%2BKSWDS0FZl4eoVfoXV01Ohc93p45NPQADyZQLiZhM0hDJ8x0chaRxFyL%2FL8ct6rAVTnT7oTmRum6MsyFaVbv8IeERgM%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1d-197a09\"\r\nexpires: Tue, 15 Sep 2026 01:51:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1646\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b006636dcab4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1669641,"size_decoded":595809,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65484), with no line terminators","md5":"377c098029fca1a3748841f417600a69","sha1":"d7da2b93fb6d84ba842cb41f789365424511b12d","sha256":"3414e28eecb8866d2ffad3962123be42f9ff54c31af4698773598afc0e8f203d","sha512":"9cf102b93c30483c382576f86e2af8a02a321be495837262147da89a8a5b4214c0a0b0ef52eb9a982eb89195ee3a7eb4797732b49144c942ecc0c6dc89ac42ef","ssdeep":"12288:A8xlA+33GtuENtFEI8nAvMEUqn/NXa8d6wdmv6dDVEQwR6jDfqpkj9e5kL44u:A8xlsEIUsECdDVVya4D","tlshash":"33559e3d63d977b41a8bba45a2472932d8388e73f346e07198edb21807cfee5c256171","first_seen":"2026-09-14T14:19:50.66163Z","last_seen":"2026-09-14T14:19:50.66163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/6752.78cdb884.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.251Z","timestamp":1789395549251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/6752.78cdb884.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8ktu5rLElRe8eEg9UXkVob2ZL21mPmyxJUICi958QlKrCMBsLiRkjzj%2BBsMTS8AJDCqqErC4A2y8pF9U4I7lYGkcD4bh%2FPz3uAefCC5PuhIfwiFYUkQoNg3CWFdPIBF2rw%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-2c09\"\r\nexpires: Tue, 15 Sep 2026 01:51:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00666de12b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11273,"size_decoded":4697,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10355), with no line terminators","md5":"de35126e5dfe902135ba3c679a98ccd4","sha1":"d3ffb0f7f4ba28164828fd59bb1af989af9e36ee","sha256":"728fb830cc19e72072d97421589dc3c3139a92b8dadc9f411e5d9640eaf428be","sha512":"e58b14dd233219e92e7993450f7a2aa25bbea6df370ee3e188bc9eddb9be8908b53c27583d262b354e6dd8ef80787b419817dd84807dfc037baf5668f5cbf4a8","ssdeep":"192:tncM6hWV2X9HT+29AI84COcBTJFE1je5Xar1t0m07qRsVQ6G:Nf6/XhUXxI7WuQdG","tlshash":"2832416da0cd9db37fd868c8408ea103638e6a01dde07d42a27a5f95cafe641121ff64","first_seen":"2026-09-14T13:52:34.304769Z","last_seen":"2026-09-14T14:19:50.663117Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/pages-login-login.d221ded7.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.711Z","timestamp":1789395549711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/pages-login-login.d221ded7.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5zxKh6a63sTSYtzFuepsv%2FAORvBqDmPhBmev2w4VpuyEy6CZp9MhAcgaXfPeKWZRd1l%2Fo%2FY6Cx%2FGlfstQIZGC3vzz7AO3PIjWCh5ZC4D9Iucv00AexQvAqlAD1waD5SMwc%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-4799\"\r\nexpires: Tue, 15 Sep 2026 01:51:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00669be45b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18329,"size_decoded":6662,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18019), with no line terminators","md5":"148be9e716fa4b833ee053f8cb687135","sha1":"f9ca30ce1002ef4ba8af4899645e8d1522685fff","sha256":"d54e079c1c8d69f52e5c88b0588893ed70115d58afe925c28787b9f02309928e","sha512":"3c371fc23986f066590746f0a6f9290ff5b7d02a4b6b763c45bac88e8d2670e6230416cd76722ee2da4498fc2a9d133c1419d75e3a748fd64cad2d17665b6cbc","ssdeep":"384:LYCiUk99TYqr7OWBA/NIdukgynZVZYdQTouFA/k29Tv7grIY:LMJ995rqWU61wdQTk/k2lsEY","tlshash":"9e82d88a768f338d96238a34001721a1723a2e22904a55fef576dc218e5e5477e37ffd","first_seen":"2026-09-14T13:52:34.321563Z","last_seen":"2026-09-14T14:19:50.664505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/5842.10780bc4.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.258Z","timestamp":1789395549258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/5842.10780bc4.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXO%2BRfD5e2a1CaR797j%2F%2FDd7vtU0XtEUQmUDlhS4XPV%2FkxOs3Qk3dv3wywBAJiGbrS49cuHaX56AqdQQ3NqXl8CDeZcu26WEfyjLBk66KIpgwzolRB0w0E07%2FHfNNQx%2BqG0%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-33060\"\r\nexpires: Tue, 15 Sep 2026 01:51:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00666de16b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208992,"size_decoded":54528,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators","md5":"5d571d9c19d6b72dc44aa3628b44cb15","sha1":"59e000db68673ccf3f0dd1e52c583f6b51996046","sha256":"67383e7c3aaa125632914d36c810c28c73785c53d4055e19d71f4aed6d7a4695","sha512":"1cdd8e39bb41964a978f03fbc099f5ee4b386814a0440ee1f33aa9bdd6fa899f4d607fe0aa0f0685c2a572537ef8b68a41a42798cecda1560e4b765a48a4898b","ssdeep":"6144:ShZjwdge67q1szEgF3OonewfrgIc67bPV+MffBqoZ3R/:SMVszEgF3HB","tlshash":"b214d6d4fb25601952a3a179423f1507b336365ee44b86a8b16ec9d92cbc0ca3677f3c","first_seen":"2026-09-14T13:52:34.287422Z","last_seen":"2026-09-14T14:19:50.665524Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/js/188.d4f3350f.js","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.260Z","timestamp":1789395549260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/js/188.d4f3350f.js HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qc1vaSTkX3SOaO7iAkwdjOEknsC5ULnIs0wSBhHyMRRCa9Lq6YbwMX%2F5rhDb3zU2jGxL4z5rbT%2BEUYYN4zk67ua766cMj6EPZWkXzDlAdor4sc7jUNtSqHqiStyXBxJH8e8%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-3977\"\r\nexpires: Tue, 15 Sep 2026 01:51:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1644\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b00666ee18b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14711,"size_decoded":3983,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12735), with no line terminators","md5":"838f42d9d9d2f9481138a5ecd8c38ec6","sha1":"fb641ece7f3e39285e002e59dadd962b486b0021","sha256":"031114eebfc054a4187cbce8e842d0098310beafcdb12eab87ce4410d556f45a","sha512":"c3cf360b62ea4fd147fa3ca30bd8a305233f5369d42131ffe86b9259ef6eb86ef349aa6ada604716db99b0c17ad8c09832e4fcb01d0b65a281ed780935f8f386","ssdeep":"384:F1uF1+MkBn8ZDWmKWq4YMq4jY4GB42042:zuF1+MkBneDWmKWq4YMqQYpB10z","tlshash":"3562d956b15f3c5a06a7c044663a810af3263b09a170c690ebf9afff45d7f960369f18","first_seen":"2026-09-14T13:52:34.318933Z","last_seen":"2026-09-14T14:19:50.666547Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/img/kefu.png","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.315Z","timestamp":1789395549315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/img/kefu.png HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxtls%2FRUBD5gRKv%2F6ygRMgF5Z3co9yNYfUjDTEP6VdLFGcTU9xVA9TRAeIQk5EoELJ4lEIRw7q4GK1fyCuPgE874MLl2idyKH%2BaIHNQ1jBFxs5Hrmqvcp4RegfUAVkxGrCc%3D\"}]}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-1160\"\r\nexpires: Wed, 14 Oct 2026 13:51:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b006673e22b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4448,"size_decoded":4945,"mime_type":"image/png","magic":"PNG image data, 105 x 109, 8-bit/color RGBA, non-interlaced","md5":"fb03453293a0ea4d66f0cf3e21dea0c5","sha1":"18533086f1e0457a62eb75c6a79fa6462acbffec","sha256":"1aad5a92c54388b93944af4196a7c7b218763d61ffbc8b7f2efa8240bed1d7d3","sha512":"b6b8f6a3d713a52a72512554ad312458c5bc93645639632b8b85802571f3f2149064064f86c17a5fd35ebb840ab0c42825b676ce6cbd221ca4de57745016836a","ssdeep":"96:pYR2PmJDvzeLQCroo+4/Ps7gTS0nIf8857sA+KezUEdvdtMw9ETN:S/uVru4/Pyg20nI77vTezjvdCTZ","tlshash":"0f918d56941abd41c489708b60e35c2bbec3ca34a6ebe481cac5dd3c10104b4f3b72d3","first_seen":"2024-08-19T15:18:11.498561Z","last_seen":"2026-09-14T14:19:50.667896Z","times_seen":48,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxgexxcexnb.com/static/img/trade.png","fqdn":"oxgexxcexnb.com","domain":"oxgexxcexnb.com","tld":"com"},"ip":{"addr":"172.67.206.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:09.316Z","timestamp":1789395549316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxgexxcexnb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:19:30 GMT","end":"Thu, 03 Dec 2026 15:18:06 GMT"},"fingerprint":{"sha1":"FD:DD:2D:FF:AD:F8:C9:E2:FA:3E:A1:5A:7F:60:CA:9E:05:D6:69:F2","sha256":"AD:98:CC:61:24:36:CF:AB:D0:0E:F5:0E:1C:31:7E:A7:62:0E:33:02:7E:97:25:4D:E0:E9:8B:7E:F8:76:E5:2E"}}},"request":{"raw":"GET /static/img/trade.png HTTP/1.1\r\nHost: oxgexxcexnb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 14:19:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Sep 2026 00:26:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8g70CYqL1gwKmMC0DjB060l%2BMo7jUvoxt%2FjiblSKxRyYZ8Zjq7RnVWy%2B0dQmI3rzGxLvDtdpRbbZLgE7WDdfOORlInTG6wfG%2BWuOK8d0z20bL9EN5jNwAJnf%2BKw2fe5LmwU%3D\"}]}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa49c1c-1680\"\r\nexpires: Wed, 14 Oct 2026 13:51:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b006673e23b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5760,"size_decoded":6234,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"66dc6578ec8db03fcc1b42c9f317b9cc","sha1":"e4acb2a1337f945518b5a356ee09bfa59094bc75","sha256":"18a8354cb2644a4b5c9261864bb7fa4e206c6f820b8c6e84f9751fe74f4ef173","sha512":"a8233e00ddd390afafe316a6bc804a8d798215ef7fb985d4170fe25d8758ca1b6c8a6335c5bc4eb3912414eed0fc7477a1847ab0c47201055a19170350cc7fa9","ssdeep":"96:bcQllcHitlIxv9vk7C1+I4wWHLihk/xTunbQZiVC6VWA1nsn8:bOIIHUCD4waMQ6V1a8","tlshash":"f2c18d4ca4934805414d8b196cfb8a174367df809ae86e28adcec41b4b30bf018b56e7","first_seen":"2025-08-29T02:09:30.913604Z","last_seen":"2026-09-14T14:19:50.668589Z","times_seen":19,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"oxgexxcexnb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2225171_8kdcwk4po24.ttf","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oxgexxcexnb.com/","date":"2026-09-14T14:19:10.069Z","timestamp":1789395550069,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2225171_8kdcwk4po24.ttf HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://oxgexxcexnb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oxgexxcexnb.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T00:51:03.403439Z","times_seen":18468264,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}