{"report_id":"f4c35197-331d-45c2-8855-5328e2834284","version":0,"status":"done","tags":[],"date":"2026-07-02T13:28:34Z","url":{"schema":"http","addr":"dexcore.online","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"dexcore.online/","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"title":"Raydium","dom":{"size":29261,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (860)","md5":"62b715fda89f4a13aa1629a197ef7057","sha1":"5fe47af02a1a15309054599b403fe7b30a89e0a6","sha256":"44fdf31d5ef68b45b157cfb9c0b017c0a51476dd5a2a277839077e5a22328086","sha512":"44fd9d3e55383a458b526c94f6516d8cef339dad0dfb20810f3c88f82f82258178da215267149792393bf3b379379c7d53b04620ae70356dc4e068f29ec623cd","ssdeep":"768:+KYY9y3RLUJW6T1vTfD4269GI2LBvgzc2bs+c6dj2cPL5OSZ:+VY9y3RLuW6T1vTfDz69GI2LBoDZ","tlshash":"2bd287215603197f259b44f17332bb6a7084fa23da07e41873fd13986fcacd68ca6b65","dom_hash":"domhash02ee536ed9023da7851d55bd20203eeb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dexcore.online","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-06T13:28:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"dexcore.online","ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-07-02T13:28:35.609192Z","last_seen":"2026-07-02T13:28:35.609192Z","alert_count":24,"request_count":24,"received_data":1264255,"sent_data":12216,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dexcore.online/","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"48360fe1bad132be25c1148a36450276","sha1":"92bbe7d0b7c17779bac23df2a0f7620bd0de9bb8","sha256":"156af9c20601fe37bf55b03ddf6596e17515819ceb504fd2bdb33539c8f967d8","sha512":"500c6ff105612446825b063918d786eea12fc42a6d1f89cd2c8c85345a342ca7c296ef67c52e5ef870a9f3ffcdc82ef1b570cefaeb96152150d038c90c3e93c5","ssdeep":"","tlshash":"3bc080909578ce60096c05dd6335878c60a13c6c916760dac5fddacd544de840789c5c","size":181,"data":"","first_seen":"2026-07-02T13:28:39.27221Z","last_seen":"2026-07-02T13:28:39.27221Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/M_MGGM9r.php?s=%2Fipfs%2Fib79jOp7ZdBZEaIHGvPaeA92d33f623448b3d069d8112a42282e92%3Ft%3D1782998889967","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"55f4deb7eff90bb62d4f73bd0e603532","sha1":"962ad4edf35de758654fa81430e053da5401f485","sha256":"25e901e528e0497ea06d74d7537e9dbf75398aabc90ba44d17b7a72987dc6874","sha512":"b53b022e40a920e625b2733e83bac270f879b66a3dbb6a420b891b3b1a2b7af00c3f99d7b65f6369ee514a572b3317f86a6edefcc2b2096842bccf5bc4e46099","ssdeep":"6144:Bh5gDyQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsyQDC6m7hFqa/J/","tlshash":"e1d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","size":619162,"data":"","first_seen":"2026-07-02T13:28:39.262965Z","last_seen":"2026-07-02T13:28:39.262965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dexcore.online/home-pool.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.858Z","timestamp":1782998889858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-pool.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:49 GMT\r\netag: \"31f-6a37e711-506e228dffc246b3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 326\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":799,"size_decoded":769,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58f1f44bc06b7a01f3ee3df362b7a90f","sha1":"ec36fca5494419c82991ae151d25e1de61324352","sha256":"f4af9d79a49a6dce8c8fa2098c09ed354557bf3d93b8285343e06211993f56b8","sha512":"d5d1ea15b47f36639295d0394cd2096663890964c4bb83c9b97daebaafd0d7068f4254a4e2c0d15b27017df6aa91f5cd864fbfe3f02cb0f902b4f3d3691cdd2e","ssdeep":"","tlshash":"720104b8e3ecd743b88e4b5014931830d06734964186d6b6babc99d5af44cdd0de0c80","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.254167Z","times_seen":156,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-acceleraytor.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.859Z","timestamp":1782998889859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-acceleraytor.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:46 GMT\r\netag: \"411-6a37e70e-3fc9405ebf8d5149;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 503\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1041,"size_decoded":946,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4b054d65db0d9780e5fc181b59684a2","sha1":"ba8892cb0d89d218b1ec88f2adfe68b19ec2cad8","sha256":"88ed50a56f860e0fc20bdff5516becf92c90765c8f1d53a1f4bfe6d0e22addd3","sha512":"49d476362a6464f36cafb491cbbde8277cf1e96d42a9427a8bd06a22fa21764e45fd17ccc74a6f8f7980401a41f00c6333d0b1f7b04972db61430d14ea5ffb8d","ssdeep":"","tlshash":"521136f793e6f645c02bbf11a4b32d45648f30709e9b8a8291f35164ae95c08d67cc88","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.255037Z","times_seen":156,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-bg-element-3.png","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.998Z","timestamp":1782998889998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-bg-element-3.png HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 13:28:49 GMT\r\netag: \"1a15f-6a37e711-261a85563700bd30;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 106847\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":106847,"size_decoded":107246,"mime_type":"image/png","magic":"PNG image data, 1435 x 640, 8-bit colormap, non-interlaced","md5":"829d54060f0b24427b5e52f048431d1b","sha1":"6686c3a249cca06d598b1a890bbdd8cf62eff8b4","sha256":"9ca4bbf09503d26b093a81a470af944eb6e8a4ef68ae76df6638815500d44529","sha512":"35e1a2c38b520f3ca003e45f01aa22640496495343552ef5fb936581a50b0b982220802dd8abed64461a86cff8a12ad43de52c187780ab1bcbceb18dad5be4e1","ssdeep":"3072:73q2Wi2s6o6KrNN6GG9dDfuLr9qHcMn7Ho:DjR6Kr18cyHo","tlshash":"64a312866f235976fc4821bd39c7e485f70ba6ac91128624ad5430f9a0eb85e73c5f0f","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.255757Z","times_seen":84,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/SpaceGrotesk[wght].woff2","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:10.041Z","timestamp":1782998890041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"c068-6a37e712-ae40d8ff5efb21d7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 49256\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":49256,"size_decoded":49654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.256431Z","times_seen":532,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/M_MGGM9r.php?s=%2Fjmpd%2F","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:12.015Z","timestamp":1782998892015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"POST /M_MGGM9r.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dexcore.online/\r\ncontent-type: application/json\r\nContent-Length: 1432\r\nOrigin: https://dexcore.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 02 Jul 2026 13:28:12 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":2344,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T20:16:42.123945Z","times_seen":16949822,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/logo-with-text.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.848Z","timestamp":1782998889848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /logo-with-text.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"b2c-6a37e712-c9071b9477d4700b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1423\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2860,"size_decoded":1867,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cdaf3a18accd53c3cbf47846f831a5e","sha1":"52a5d69f27bc88b35d34ed3a44ae9b4cc555e520","sha256":"6354f38310391f7747749371558628411c388b550f49cb30f4924fd11ae45725","sha512":"172531beb6d7b7778b197a879c33ee495cd1a8e4ad564204f9c61c4a5fac8c381967c5f78e3de8cc4954d25b57e389a0655f5ec822e33ce3d40b5e17cb83f735","ssdeep":"","tlshash":"7051b785930095e0d5c7c6d4dd3fedec751fa0d5a35750a981f1ab08d4170f26c4cea0","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.257693Z","times_seen":171,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-trade.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.854Z","timestamp":1782998889854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-trade.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:49 GMT\r\netag: \"1e5-6a37e711-54bffd7346c05f11;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 277\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":485,"size_decoded":720,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a268f3b235d6c95588456e9cb243d3","sha1":"d02effed1e7bf3840186902bb02f6ebdf61f21b8","sha256":"2891c9f2638e186d56da2cb11e7a0f7510b88641b7fe539eba8606b12fd244b3","sha512":"2a568377ada6f96db752b086e445ea4c7d8efd801f0b1da6029d54f302b5101c2a53f9861c3cbf32c203ecd18a9c8b5fbf295321820778778d08bc885c3186d8","ssdeep":"","tlshash":"96f059f3500936f00504db10d86a143e317d60ec265d5a5aa2502325a9c48ee1cddd9c","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.258951Z","times_seen":158,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/media-twitter.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.865Z","timestamp":1782998889865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /media-twitter.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"446-6a37e712-b65d147e831a0b43;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 575\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1094,"size_decoded":1018,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8b6e228ec5c96ab864995f5b54a7a0","sha1":"39e162b67b93058b2b28ae96d0d384839d05122f","sha256":"07bcb0118ab73b836745a47c687cee03c24caea7f0cd4440592e1204a056ff74","sha512":"37a556db06b2b7dc76d71fd00d9be19e78352bb12c98d38f5ed26dd5560c4bb7613aa44ca6c0a053aa42da75fd7034b3693af8eb897f3f537e8b8a8aa0c1fe22","ssdeep":"","tlshash":"aa1120f69268e2f887478f70cbb764a8396230b96fa603a41155a980b4109a10c8ed58","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.260443Z","times_seen":155,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/media-discord.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.869Z","timestamp":1782998889869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /media-discord.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"757-6a37e712-276e920a06bbd89b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 772\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1879,"size_decoded":1215,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cba4f9674ffcf19c39b8b31b802a7b92","sha1":"eaf517b208ed28e37f4317a2f38a2a729ae5fd83","sha256":"65cdf7ee40d2d6d87924fc6c55d23e2bf8fd2fa361c7b7a5b80679c4b2523b66","sha512":"c9c732dd4961b9ef4a10ce5bf3c35dc181521a82da48db76918e9e2bf726648c0515c2c12cef6596b34cb671a442b23369c36c7f0fc0c1c8b252f1a598408b97","ssdeep":"","tlshash":"9d4102f75288f2c8d083c3b5d436047a779f2c723bea579443a88fe0f256195858cc58","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.261485Z","times_seen":155,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/media-telegram.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.871Z","timestamp":1782998889871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /media-telegram.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"3e3-6a37e712-3f606bbcaef01cce;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 521\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":995,"size_decoded":964,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"704421aedf6fd2f977a48bc4dae884c7","sha1":"8e3516d3a58c056e8606054fae4532c1909b2eb2","sha256":"86ddfbf8b723ff15d24081f8958511846434b444efdb96269986708490197e03","sha512":"8550cf414fa0bd0ffcd282ce6b4bbe426a868580244478dfe9bea3e0b1a2c4e32ac3faebcd8e933a53288ac1f6d676d01a6fd5abd9db73d457728af2458eb93d","ssdeep":"","tlshash":"e31161e999e865c0530597b4d47e45b3f32330fe7365cf0e0260bdd06681065504dcd4","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.262472Z","times_seen":156,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/M_MGGM9r.php?s=%2Fipfs%2Fib79jOp7ZdBZEaIHGvPaeA92d33f623448b3d069d8112a42282e92%3Ft%3D1782998889967","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.969Z","timestamp":1782998889969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /M_MGGM9r.php?s=%2Fipfs%2Fib79jOp7ZdBZEaIHGvPaeA92d33f623448b3d069d8112a42282e92%3Ft%3D1782998889967 HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 02 Jul 2026 13:28:11 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":619162,"size_decoded":149089,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"55f4deb7eff90bb62d4f73bd0e603532","sha1":"962ad4edf35de758654fa81430e053da5401f485","sha256":"25e901e528e0497ea06d74d7537e9dbf75398aabc90ba44d17b7a72987dc6874","sha512":"b53b022e40a920e625b2733e83bac270f879b66a3dbb6a420b891b3b1a2b7af00c3f99d7b65f6369ee514a572b3317f86a6edefcc2b2096842bccf5bc4e46099","ssdeep":"6144:Bh5gDyQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsyQDC6m7hFqa/J/","tlshash":"e1d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","first_seen":"2026-07-02T13:28:39.262965Z","last_seen":"2026-07-02T13:28:39.262965Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1219,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-yield.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.856Z","timestamp":1782998889856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-yield.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:49 GMT\r\netag: \"890-6a37e711-eca8b4ce0b6cdea6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 816\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2192,"size_decoded":1259,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3de1aaa4220f36a9e59cb7821fc314af","sha1":"f21f4a3fb4d7aee1e0e823b92a6c4b03f2265cb4","sha256":"c2d78e62fe4de7e31c3f33e8c5d1a51e578085ed3f0ffffcf60f254c637c8d9b","sha512":"257077713ea008c35338d956d6a1e066ddf3513375ddb34a59faa8979a892ef09504352c7fb540a6c10d66fba5b88c628b4c565085180326a5c4f4880a5fda1c","ssdeep":"","tlshash":"b341bdfee7fbd0d02983eb86f871a150b52b11be9fb6cf084231a790d6b10944758c90","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.264013Z","times_seen":157,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-order-book-AMM.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.863Z","timestamp":1782998889863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-order-book-AMM.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:49 GMT\r\netag: \"933-6a37e711-9aa4fb1b9a3a8793;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 780\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2355,"size_decoded":1223,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"032d4241b0a0430c669e2113752dcdab","sha1":"652968abbec6b67be9f517325adc26b14bf62790","sha256":"2c08e1ad3274e3189e2911f15b465b4468f8a5f5ce488832d266eea9129b0cc4","sha512":"55565622a3e735864c3871692ea796ba84783b117693213965d5c88edfe3ecd896c39d759c15224922e33502fcf54588a203d7fa6b7a2cc9d1d5032c75d3b93e","ssdeep":"","tlshash":"a141f4f1eeeca5d0e103c7f08d2fa6f1371e30b47f938daa4f9279844a615ada085425","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.264812Z","times_seen":157,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-bg-element-2.png","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.995Z","timestamp":1782998889995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-bg-element-2.png HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 13:28:48 GMT\r\netag: \"874a-6a37e710-c8a9ffb69abc07c0;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 34634\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":34634,"size_decoded":35031,"mime_type":"image/png","magic":"PNG image data, 1320 x 506, 8-bit colormap, non-interlaced","md5":"40c38eed9c27f4f82553bcb71fc16fb5","sha1":"79108ff5c9db3e2d12302994e630c53d047065cb","sha256":"41aa77b316dcb01bb7eadc8ce07f038c3d51f2eb46b29e2820843df7db8c989d","sha512":"52a640cbe60c477b8acdb3a5713dcdd85c579717a0f2a3f6300609fc8c82cc71c61c02980f793d8a892288275faa3c1d388f3c70c6e9fb287e08469ff6d61089","ssdeep":"768:dIA+Mgg8444I9ORJGyr3/CoNmR6mpMuAKxLK4ruhOafV6gWXT5JAvsS97g:BVBpI0vaoNmQmp7K4rOgDMsShg","tlshash":"73f2f169fcc00a50d69c6ed1e57cb65f321a6212b53ad42e4b6288bf761f2e73632811","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.265302Z","times_seen":103,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-footer-bg.webp","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.999Z","timestamp":1782998889999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-footer-bg.webp HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 21 Jun 2026 13:28:48 GMT\r\netag: \"2672-6a37e710-c784a0e7dd899da6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 9842\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9842,"size_decoded":10239,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f9f1d3e3372791ad849c2c9f3c65628","sha1":"50ab5c834bf0cd77243e72a9c93265ef6c680c9b","sha256":"420a39c05a75fd598ca0adde22a3519779d1fa9808fcfea38775c4baacb7c7fe","sha512":"4fad34c159c71c450eb73d39f0cc7d645c10b23ca3148d3d1db65f5b8021c9c45f6c3b5a6f84907a41a8c52ec527b32acf682570cb6c3b0ddd7a5366c304ae82","ssdeep":"192:OtH9jC0xwwwAanXMQcqepqaBAnMmnTdMpPJn8r:8jAwwAanA1prcnTdiPar","tlshash":"33128da438df477503384e5ee6155eb19a18e801decf9fc17c0d2d9a398c2534f5a61b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.266247Z","times_seen":100,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/SpaceGrotesk[wght].woff2","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:10.045Z","timestamp":1782998890045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"c068-6a37e712-ae40d8ff5efb21d7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 49256\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":49256,"size_decoded":49654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.256431Z","times_seen":532,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/home-bg-element-1.png","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.851Z","timestamp":1782998889851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /home-bg-element-1.png HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Jun 2026 13:28:47 GMT\r\netag: \"1e8a5-6a37e70f-360d98d1fe0f16ab;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 125093\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125093,"size_decoded":125492,"mime_type":"image/png","magic":"PNG image data, 744 x 801, 8-bit colormap, non-interlaced","md5":"31a19e31be7321d44890afb0f3359d5a","sha1":"50849289aa6fc127953ec59182fe49a9a9e86b56","sha256":"803c1a7f20d0b5290d50e534460a165cd9c948c2edaa2e8a58c424fd88c16ea1","sha512":"a050445b8b20a3308195df945f65c54d1e38b9f159c8b7d03308413472fd3baac1beb36ea973fe05c24f803b6c4c786e9490f56eece37362add092283ee3204c","ssdeep":"3072:REZ0M1excEYtt1WJaaPVhqBhzUuIeORAOQv9YK3L6z++05G:Rm1excEYf1WtPUhwudORAO49YKbaa5G","tlshash":"20c30227b1b1df1c642d6a9b72e3cf27983008b749015d55db6128d8bf1522bdab3a23","first_seen":"2023-08-04T00:54:38Z","last_seen":"2026-07-02T13:28:39.267299Z","times_seen":171,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/build-on-slogan.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.853Z","timestamp":1782998889853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /build-on-slogan.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:44 GMT\r\netag: \"23bf-6a37e70c-f61f562554f811c8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2939\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9151,"size_decoded":3384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83fcc57ce12ab74732105f3def835f63","sha1":"1326cac11bce7ce0c9ec2a68034d4861b0717a92","sha256":"e0fd161504a5e1c8db0fbf4883531702586b9c97e5291b024593b346e1069166","sha512":"6fa182709fa08f302fffa6ae30ce8aa72fe07d26b3288c1f7844efa7232dce833a2aa51a8400f4cb9c213022e675f35bde6d8cc529124c26d8beed02cec66708","ssdeep":"192:XptuNQdJfnppIlq0WLfr6l802wauiSIdEIZ98vsmU4mjXPv:Xptu2nppUq3zagw0SIdvMsmwj/v","tlshash":"7f1241febfc0b5f0f341d3f9d016996939175cba2babd728c3945f88a896488c449c91","first_seen":"2023-05-11T04:33:41Z","last_seen":"2026-07-02T13:28:39.268346Z","times_seen":163,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/media-medium.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.867Z","timestamp":1782998889867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /media-medium.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"373-6a37e712-c1be9e6014c81f87;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 418\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":883,"size_decoded":861,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aa5e62ae23c1b4796bf74f211afdeda","sha1":"240296ff8d856fc32e71ae8074c670272bc3948d","sha256":"75e6acac8ec27af8dd61fd017314cf85474131c35e9eb05201adeaa3cb1c7047","sha512":"9083cfd0dc2204d536dcc5d9f16adeead99f1bc4e938369ef6d7968a75a13975767505a87a5c36c5bc8f502549c9aaec442e6a08ed0606e07bbe9d924d3d73ed","ssdeep":"","tlshash":"601100b63058e091a4cea393c061e249a4ea2032cf59c1d8a095a1e6bd32d9b7d18d95","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.269508Z","times_seen":156,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/SpaceGrotesk[wght].woff2","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:10.044Z","timestamp":1782998890044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"c068-6a37e712-ae40d8ff5efb21d7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 49256\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49256,"size_decoded":49654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.256431Z","times_seen":532,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/SpaceGrotesk[wght].woff2","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:10.047Z","timestamp":1782998890047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"c068-6a37e712-ae40d8ff5efb21d7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 49256\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49256,"size_decoded":49654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.256431Z","times_seen":532,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/logo-with-text.svg","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:10.492Z","timestamp":1782998890492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /logo-with-text.svg HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"b2c-6a37e712-c9071b9477d4700b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1423\r\ndate: Thu, 02 Jul 2026 13:28:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2860,"size_decoded":1867,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cdaf3a18accd53c3cbf47846f831a5e","sha1":"52a5d69f27bc88b35d34ed3a44ae9b4cc555e520","sha256":"6354f38310391f7747749371558628411c388b550f49cb30f4924fd11ae45725","sha512":"172531beb6d7b7778b197a879c33ee495cd1a8e4ad564204f9c61c4a5fac8c381967c5f78e3de8cc4954d25b57e389a0655f5ec822e33ce3d40b5e17cb83f735","ssdeep":"","tlshash":"7051b785930095e0d5c7c6d4dd3fedec751fa0d5a35750a981f1ab08d4170f26c4cea0","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-07-02T13:28:39.257693Z","times_seen":171,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-02T13:28:08.859Z","timestamp":1782998888859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 21 Jun 2026 13:28:50 GMT\r\netag: \"7175-6a37e712-4cad69296cfc5d07;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4336\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":29045,"size_decoded":4896,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (860)","md5":"f65fef225e7f669e3a94ef8118ef0fca","sha1":"545ac6b2d4ea8dafd406bcd91321a215d3379aa0","sha256":"84ae4bc705f7f6cc4ff4640ce2d1ac71e61f34c9cab4ec5111e44df2ff681c90","sha512":"912935c7e90ace031c6553cf9f3100d9e04f04820f33b10296b891de43c09b89d2ae632ec94876f152690237f64a0a1741d2e2dd3c8c88caf0ce218d9205b001","ssdeep":"768:mcY9y3RLUJW6T1vTfD4269GI2LBvgzc2bs+c6dj2cPL5OSZ:mcY9y3RLuW6T1vTfDz69GI2LBoDZ","tlshash":"15d287215603197f259b84f17332bb6a7084fa23da07e41873fd13986fcacd68ca6765","first_seen":"2026-07-02T13:28:39.270444Z","last_seen":"2026-07-02T13:28:39.270444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":195,"connect":98,"send":0,"wait":102,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dexcore.online/bdc6bdd6b27d34fb.css","fqdn":"dexcore.online","domain":"dexcore.online","tld":"online"},"ip":{"addr":"46.202.182.187","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dexcore.online/","date":"2026-07-02T13:28:09.835Z","timestamp":1782998889835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexcore.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:12:01 GMT","end":"Wed, 16 Sep 2026 16:12:00 GMT"},"fingerprint":{"sha1":"43:D9:9C:19:8C:08:85:E7:EB:15:21:D9:2B:07:7A:BD:0B:51:91:E7","sha256":"DE:5B:08:4D:F8:EC:5A:02:2F:8B:EC:95:DC:E0:E8:90:C8:E5:9F:10:2C:92:A3:DB:90:8E:F3:43:60:14:BD:8E"}}},"request":{"raw":"GET /bdc6bdd6b27d34fb.css HTTP/1.1\r\nHost: dexcore.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dexcore.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Jul 2026 13:28:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 21 Jun 2026 13:28:46 GMT\r\netag: \"19c37-6a37e70e-7449e20b65ae573b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15801\r\ndate: Thu, 02 Jul 2026 13:28:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":105527,"size_decoded":16421,"mime_type":"text/css","magic":"ASCII text","md5":"ba0b941f296cd700ced4bd0401968c27","sha1":"45b8bd1d5b782cf0f39471e0a867431f88eb2d32","sha256":"b9e08fa976f2dd165573e3ed596ea5337f8e805baf4116d9e2ad0e928419885e","sha512":"6860a8a1c28f05192854eec41b20ccfe89aae13dd8fae3d396ffdaae3de3760e829413c5a2c6bfffe1644505cb2feaca58e065be716b30b2b664fa5257d8b582","ssdeep":"1536:9PEY1JIzdJralsZHe1t7sZs6wfMpHJg0FtC4jE7:HlsZHe1CrG","tlshash":"81a3b61569f30d192d1f54fc96dda24ab62a60c78e1edea9bfcd30004fc83b4d896e58","first_seen":"2025-08-22T23:05:17.786863Z","last_seen":"2026-07-02T13:28:39.271311Z","times_seen":11,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dexcore.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}