{"report_id":"f52130c6-d861-4fcb-8e31-1bed09d853bd","version":6,"status":"done","tags":[],"date":"2026-02-18T13:26:15Z","url":{"schema":"http","addr":"register-usualx.com","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"title":"Usual Interface","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"register-usualx.com","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T13:26:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"register-usualx.com","ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-02-18T12:58:54.251499Z","last_seen":"2026-02-18T12:58:54.251499Z","alert_count":19,"request_count":19,"received_data":5713315,"sent_data":8722,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"33c647cfda7c387bf8e6ca89e5779abb","sha1":"d7444ce53831b3da384a34648ea443ea2afb1ca0","sha256":"cd0402cb877ff9c0bf5730134cdd4d6bd8d946019bf8a8ff687c2c90fd191823","sha512":"ee59b72aab780e75a999133cbed658f7106d06d5f9e994005872ce1ccbc5b189c54bcee25a9b8804a0a16d91f055ad34d6233f616b3ef034fa1b0a6f91af5322","ssdeep":"","tlshash":"d6112d7629092878c367035833db160601bfe220cadbdcaafb88cf80b9ede53000b314","size":1000,"data":"","first_seen":"2026-02-18T12:58:59.305606Z","last_seen":"2026-02-18T13:26:16.957782Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-06-08T13:16:56.579886Z","times_seen":3107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/mk5nj.php","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad17b06a5ee78f49d84ba347b69e26f9","sha1":"249db50498325f61b0283237cd326153f843c666","sha256":"7bd680b6706964df636a50943d0fa788597acb0e51c784dd4895acd950ef30b2","sha512":"f568c0aa372bc81210526e4ba42b6211ec5d5878cef5d0e02c7b33448776471001d9b7739b9fdc485b05772cd928c7001e9c8e6e255703845eaaf0ea66d7624d","ssdeep":"1536:nlKt0rHwpjiqMfw+Tu4C5Bam6StJkMYjVOKGyei+c7qP+Nntz5FZOV2uXz8G7Gp:nlKt0spjirg5BVYjVOaj+uqP+NnR3Oc","tlshash":"97148499db4384cc8e58429ec4b6fa86d4140d1a8a5cb857ee2fdec23615f7290c727f","size":201654,"data":"","first_seen":"2026-02-18T13:26:16.962587Z","last_seen":"2026-02-18T13:33:24.051227Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-06-08T13:16:56.583434Z","times_seen":2932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6532796de35cc43fa2e1676af446e5d","sha1":"f1a0c3a69c53243c5062e2378f0d87b3a42500ca","sha256":"28554e9cdb0da8d378c78fe1d8a4e50a616aa3f78be38b56baf99a9f6231ffa9","sha512":"2d658e1f7eafd1645cefbd0e02d7e91e4f1f75152a0238bcb06d3fc82dceb86bb86881c285ac827618abe0cd18c623323711a417408707f62a8a32e69ac8a325","ssdeep":"","tlshash":"5ee0d8a4b058223707d37661c50b6386fd6140a59482f0014001c8d64ee9d451c7ae9b","size":358,"data":"","first_seen":"2024-12-24T17:17:59.974422Z","last_seen":"2026-02-18T13:33:24.046603Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce098a0e1fe90562de29b58f706a24cf","sha1":"72cc16ff7f6ad2ac7e8493e80e9560722fe6426d","sha256":"ba37778f72b5cd9523de1150b6ec2a4b6b06199a7851a625ce5c8fa598a3cd28","sha512":"9c9299718a8b0b1ee812c2be568f4558dbe763b2857e3dfe42ba579c22a5561f1b7ee9e703665cc229b9fe9c5c71b66dd50a89049da8a00b4e9ea5817feb137f","ssdeep":"","tlshash":"b3d0a7202604557d32e765d1ca4db286dc6005719481e401c81ef8964dd4e4534b1fde","size":236,"data":"","first_seen":"2024-12-18T16:28:35.190754Z","last_seen":"2026-04-15T01:35:01.494124Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad7e9cebcb95e4d149f0cc4968ab70cf","sha1":"e5c192d19ae39945d584c55822eb233d1cee9d89","sha256":"a305610ed749a5b5d8c334d35e5a5749decf41994a339ff40a5ca41ce7d27be7","sha512":"de95f46b95ca3037260b2c860b25bb5ea9890be494131016528fb5517d63d0393fdb48d0f8409b2f17b6d2ce7ffdd1ef5792507d6a4bc414ad2727c821691865","ssdeep":"768:53l2+75DiSIcwcws8SknpnO1RKzsXclKb+JMy6KUpwBvSHdPr:j5DLcSny6lKo","tlshash":"c3439aa61e4694d41f582aefc0f7988a95548e67cd9db51ac92eccc03228fe2c5c743f","size":55276,"data":"","first_seen":"2026-02-18T13:26:16.969203Z","last_seen":"2026-02-18T13:33:24.044627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-06-07T19:52:02.534591Z","times_seen":3070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a05f1f7270333fdf085e33620480daf","sha1":"3b69c88f69b6e7a79e68860bebd861eac3739793","sha256":"c74a983ba63fdca680eeaa17e5c7c2bec879aa40fbb7fefe45cf46580547dffd","sha512":"2c9b04e8f03a7cdc435cd8b04002a2bac8841bc318b65f02e4815c7e98a3dc7666f636465475383f7a518b3c4f371aa7e2df693adc695f815028bf5801976057","ssdeep":"","tlshash":"d7d023e02904133813e75550854f52823ff05455e4e1f001451de4c70ee5d0410ffcdb","size":222,"data":"","first_seen":"2024-12-18T16:28:35.193297Z","last_seen":"2026-04-15T01:35:01.495063Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-06-08T13:16:56.58729Z","times_seen":2901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-06-07T19:52:02.536142Z","times_seen":2988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/f5ad5bcc-7d16-4b31-96ce-fb3befbf60cd","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"88c400280bbaa5155eb3c30e31fd02e8","sha1":"98d45d4a04a675e1d0c4a44b17db10881b4b94da","sha256":"7d618b513cfaec84c2c1787050442ae4d2513a5dce49bffc9d76472c20ed777a","sha512":"c652bf40a043dcda219ccd638d3866e3714d61a3d200d336445a1ea70a6c54c6698b665f4ca9550b585d0ebee60f206e4d24df519cd1cc9b3038f6726f8c69e5","ssdeep":"","tlshash":"db11ab367445e45483630b2833bb2d1578eaf15486c7ac9abf84df6179e8c77119b301","size":1000,"data":"","first_seen":"2026-02-18T13:26:16.975207Z","last_seen":"2026-02-18T13:26:16.975207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-06-08T13:16:56.580916Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"register-usualx.com/mk5nj.php?m=2952368","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:47.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /mk5nj.php?m=2952368 HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-usualx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uS1Srn8Y0RSpDPfzIUpEA%2FgnCKqdJnEZl1dIXSA12amlWBpHhPoRALB2Z83cGEshtG74yZNE04HoxGzvJU1W5y7i8GELGazdVJ1qH5fnrR3J%2FmQ%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdda3c4fb4767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3310003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f4529ab8570eb402457ca6d32eefeeb6","sha1":"a228c7854e4a4cf3ce78d018dab7fbc3b26435b6","sha256":"a82daa836691ed90c4e2ce39ee47b581048952185d7afca3f42e5b9acc06b7aa","sha512":"b9d35c40b3f6f5a594d693ac5d5cb8f402d377d98844abf53d7c16bbec5043691519325768ea3a5a3f0976881e57a0c518d34b777e6e743b4eb8a441acfccc74","ssdeep":"24576:SyjCq4rCMBZ849RxN4soD5JaHTRsq4BJ/NNbPaplQ1:SWdMhfxNeeHFVoa4","tlshash":"202523559c4ab6b7034412a632775e0f5ad02b0644aa52c7e6c5eec33e6bfb047cb4bc","first_seen":"2026-02-18T12:58:59.254928Z","last_seen":"2026-02-18T13:33:24.03866Z","times_seen":4,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/2be0092c-b185-4f87-92d7-d4369af429a0.js","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /2be0092c-b185-4f87-92d7-d4369af429a0.js HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkL1lV5GQo%2By9rvyLD5OpR3JRLe1g0qXOewORSxYxkycUZilXEBAjSLH2S8qeQNEXvOcq3HHyFc2NLyZQLCDK8K%2FUNGW08COBaC2tjZUCykp%2FQI%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdda37fee9767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T23:15:55.178465Z","times_seen":39341,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-morpho.aec9bc5f.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-morpho.aec9bc5f.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2908\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcrYa2Ne0Ood6pisQyZ%2F1o2rearUgdT63LfKzTtFSfLkyLUcNh5zPe3CowgxjfXF08YkncVMuwvlceTUZc632gqpinWR0ZKE4Ctk4hhpTt4zee0%3D\"}]}\r\ncf-ray: 9cfdda382ef7767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 41, 8-bit/color RGBA, non-interlaced","md5":"31ad3506c34990812edc3a131ec388c0","sha1":"1b49651f615b19d83dbeeb62d1fc49af336ff783","sha256":"96b30c72ea6733f9788aec99e941d30c201fa7b9522a51d5777ffdac0a3599fb","sha512":"200f6e9007a55499ab4242e4c46e6535a537c9532693d47b87632bf06f014d7a63eccf1705c98d9c1fc234e1b272b797ff1d0d69ead0e6f2753dcf8d3db05042","ssdeep":"","tlshash":"835129e2e4257d90ce310810a02d1249baa30d659f3a53fb0ff5d9338922b45a4ce70b","first_seen":"2025-08-15T04:02:28.957801Z","last_seen":"2026-02-18T13:33:24.041558Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/2be0092c-b185-4f87-92d7-d4369af429a0.js","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:47.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /2be0092c-b185-4f87-92d7-d4369af429a0.js HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 13:25:47 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMKMWzmwGNgcy9GZr%2FXf86GR7cTI%2FS18axfGq0f1rxyOd%2B6SJB47s7QLbS%2FEGM1O4gc8XiJqKzDhmOc7MiqRFXv4qII4QWZPpxWyXwyHzDunv%2BI%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdda3c2fa7767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T23:15:55.178465Z","times_seen":39341,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-amber.5ad4362e.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-amber.5ad4362e.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1943\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fam2N48c5r6qV4fk69r2E73nWWqp37RvLBCsyhBTZ7p1PcnbZsIy2zu%2FgzYfnebMjN3%2FFiOZ1pFHLIrS9s7sOPz%2FYQHeWchSZrSoRm6xXzZzN7M%3D\"}]}\r\ncf-ray: 9cfdda382efe767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 37, 8-bit/color RGBA, non-interlaced","md5":"1a19d3f3c0ac4df3a97b1edea54938d7","sha1":"300c0b5cc3658118ff890bcaa35ace1163e28c58","sha256":"2054963ac69d7e9d75a07c2780fac3952071fa27c33a7abe370e3be52201daf0","sha512":"4aa0b1c5a2f139e6e8e0c01aadf0ceee12ecb16bc4c93e00ab311301e8d4f299e6dde152efef3be4aa078f396312a2426c8d658923bc19c34bbe64710e8e1bed","ssdeep":"","tlshash":"70413b4bad5d8536c773ca28a18e51a276b0390f354f02581603b6079a8bf07b02f346","first_seen":"2025-08-15T04:02:28.965461Z","last_seen":"2026-02-18T13:33:24.037559Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-mantle.6f00d0aa.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-mantle.6f00d0aa.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2992\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3ca2FiTEXGq3uR1kAeKI6QcOIoSdLXUbCBRf%2BthghDk3Tbes4y2YXAoH%2FgujNlM5roeUE4%2FNlMUbPNvHMgeJL473WRvYgcn3o47CgtNgMuPKjQ%3D\"}]}\r\ncf-ray: 9cfdda382f00767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 53, 8-bit/color RGBA, non-interlaced","md5":"e0106c590ec50edb6d5cdd7a5efa6dac","sha1":"de63dd6ee74c78559b5bba33cb6e6de588484863","sha256":"e899d177cceb2e70a7fbd9be16c342afb6119317d00805135b90a31dd09ef13b","sha512":"c9f0516eefa3fa9d71fbfdf99917f0bd1f6386c00765f68cd9c7b51e4c55bd2177236629833960d914834a67b8c435e4e93ed292b3068cd77e49cb04afe6c20f","ssdeep":"","tlshash":"7a515dc1422cde7ae0f2871d5276161efe3211211e2305add157f75f48e2b05a98e2f2","first_seen":"2025-08-15T04:02:28.966363Z","last_seen":"2026-02-18T13:33:24.039689Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/bg-gated-onboarding-pattern-desktop.d8018329.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/bg-gated-onboarding-pattern-desktop.d8018329.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 212212\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UEMNyPwIvW4JJmeQMiGT%2Ba1ssCMV48kjESAa%2FsX2lrBd0W4wGgXd9HyGv2j8HFnWjbD%2Bvu37yYaIndiJrGxNwR8g1mgjgUS4FWIdLz2J82p6KY8%3D\"}]}\r\ncf-ray: 9cfdda380eed767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 1840, 8-bit/color RGBA, non-interlaced","md5":"0ac319d8b186c744ca03bc3ebf149af6","sha1":"f45266939e5eaa7d0eaf6abaafbf5696e2cd5ffd","sha256":"ed446e8b2ac02e7ddd2ea96c102e02acdd23aaf99f6ebd9ac25ae427cfd8763f","sha512":"73e0ef3d70af0da1c1135f9b292f219f2649e70d48d9262a2227d80a9912a08a2555eb585765b1bdcde5574ff847907b9c22c0a1ae546003da81b2c2a5da8c2a","ssdeep":"3072:3ih1X0MKRZMwglrpdYFtfVnpFJYt4ZCbs734GNIxxjdeQLTtiJAi0a7tlZm:3ih1Xv2MwGjYFttn3+4ZC4bd7tfm","tlshash":"c024f1599995c850c281417c917b2be0b6305efaea9b9fc785a7b3774ec2bd4d00e0ce","first_seen":"2025-08-15T04:02:28.955224Z","last_seen":"2026-02-18T13:33:24.032679Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/ondo.0d5ce323.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/ondo.0d5ce323.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 22948\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hbi9Fd7j8b48fRWJRmVJOgk3Aeahc5od73OxVM2E%2FCf5Td503N%2FWme9h3Dm5HYCkdLLuV0wIugAj%2BMIyM7vGvADX163Pf59sXcf96YPSPpZb6FI%3D\"}]}\r\ncf-ray: 9cfdda381ef1767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"007d2a697499ce56753ad0980e7db1f3","sha1":"eb18e68d5b6560afab0b68f1f0643534191a04c5","sha256":"bac9af39efc0e35304dd36ac83df7bf534dd0a962e1353a8db46c7967845f206","sha512":"88ac50f499229193b88699739b61094f28427ccec87e64d3f1074a8b63d33872f5c806547f5a642c5fe8ae51bf61bf70423b5ef2b0d3cb3b8fc1d8748fe2f14e","ssdeep":"384:LRCFl6m6rGLjV4rklLfgWszL3CdpNgMn6go9TwK+z+MiDltYeEx1+:4b6m6Wj6rmrgn3Cdp/6P9i6YeEC","tlshash":"b2a2d0cc08fa3139fd985d348cebd6d53a9e81a0423a4863d8c82d25c1d5bf985b6745","first_seen":"2025-08-15T04:02:28.96376Z","last_seen":"2026-02-18T13:33:24.035328Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/ethena.47bbc61d.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/ethena.47bbc61d.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 6669\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6Fk1k%2FrEEZHoM6L9vbrTwmfb5D%2BCxwDB0KYeAPFAOkcPjStVqyF%2FR2tNSKuNE7UUdPbupPK0pm9aHZapVnMz%2BZHW1seWqKBYXOUy6Abm7jMu1k%3D\"}]}\r\ncf-ray: 9cfdda381ef2767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9794b084d8c1e1c2993f735ccc914163","sha1":"baafb9187f3faa5a45899eb43ccbf93ff8255d71","sha256":"51ba7604b935770f5ae7a2fd09429eab8b9ad07170d96f1309c326c9635cf8d6","sha512":"12ea6ee05f051d548f95797c13bbc81a208e1b81feb5beb921306241ee8076dae49a4f1d3def18d7f41f2f28b085653cc16d942bd4765cc8ab14f77083ad0b66","ssdeep":"192:dps43J+l7T85UbmXzK5/mdQSibuoiTMROwg9+:dN+J8uszm/pDbuxYwwk+","tlshash":"b4d19f9c6b0401b5986af3b538b24142e3996c1007b2c7dd355c15ffdf6c1982b95a4e","first_seen":"2025-08-15T04:02:28.95676Z","last_seen":"2026-02-18T13:33:24.035989Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-axelar.e59d074c.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-axelar.e59d074c.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2325\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Q%2Fh7r19M5VoHhd1%2FNhnOceguLNZRibWN1Q8mXjmNnH8n1N8XfCEsnuIZ5wCGzAEQ%2FPm0kbC%2BP56NVv12ITguHEzqASGQWvW09SaaGms3UMtDFA%3D\"}]}\r\ncf-ray: 9cfdda382ef8767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 149 x 37, 8-bit/color RGBA, non-interlaced","md5":"923ef708b96f3adaf1ddcb8669f8dd39","sha1":"345860a77ea12c06946e3f3a2c5bf570c7d18d0d","sha256":"be4f92b9af342129427c3769a9d06d4306d98813042e8fb58f58b27802b9f75a","sha512":"954e6af436bd078e6186cd194b41e28ca2bc661e022272f385c33021139fd1a24e177a5b58139a2b7aa668c0bdb6f6d92f13f260c798ad167239a6fa6cc3e747","ssdeep":"","tlshash":"c9411b3912128ae688a48534091a15ceabfd904f195b9d7ea502bfc1471235819aebdb","first_seen":"2025-08-15T04:02:28.950352Z","last_seen":"2026-02-18T13:33:24.036534Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-gsr.54ebbb50.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-gsr.54ebbb50.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2992\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ij%2FQmjVUKA77GDvnClM0bZ%2FMUPzGRdnZs2D%2BSNMt%2FXZr7yJnsndVpNGUEkrmATc%2BY6sLZkdlGu0wIXPolxeBBMRuFPpZdkleS4z2rIZudmbkuSU%3D\"}]}\r\ncf-ray: 9cfdda382eff767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 37, 8-bit/color RGBA, non-interlaced","md5":"e82174a05f794c76d5161fb47812774e","sha1":"b560fd79b07ed97b5258a2bb3116d8ad9bc2680d","sha256":"a1b25b15b6ee6ebbe7b2faa8d6cf0ac794b035740de91523848944c6152668df","sha512":"59eb70c442dbbe40e8749fba66ae89639d489582e7cc2d4fcf548bf809a43df959215e6b01ea1f0d640373820821fb0ba23449d7696eae5be32c6ba33a5bc670","ssdeep":"","tlshash":"d2516d8b303a98db62d16a588aff8046e5302c0c3d99f2967846f7d581d3256e0ebbc1","first_seen":"2025-08-15T04:02:28.953349Z","last_seen":"2026-02-18T13:33:24.03813Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-iosg.8adc29f9.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-iosg.8adc29f9.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1814\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vG4siy7brVSevfl8n%2B5%2FuWcg3jiNIY0zWR3UhvMXiizsutV%2BBk4o8hBwssspudZV7CYKNjhIXX6P2C%2BjjMI7aQ4JcwR4Nj%2FooO7pJPsU%2F7304q4%3D\"}]}\r\ncf-ray: 9cfdda381ef3767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 59, 8-bit/color RGBA, non-interlaced","md5":"c4c684d848deccabc91164e6713136e7","sha1":"0d582cab5997659e5882ec532f6777553cda6495","sha256":"8bc0ecd67ecec33aab813f049f387cf4eff4e507713f7fefa37d5f7fa87bea6e","sha512":"7307792f0d3b61174f5caab2bec697595fa2b95e34b03339fcb1aedee736331f139f12e8d2e33c6a64d0c513978d412e996503abad4f5efc799975ec652e9dc9","ssdeep":"","tlshash":"a13129dc90a86eaae49623bc6b9c2be1b2b49446445938fc2132fc1c110b31682953cc","first_seen":"2025-08-15T04:02:28.949405Z","last_seen":"2026-02-18T13:33:24.034786Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/mk5nj.php","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /mk5nj.php HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4c%2B5ddzArVNV3MXJNlsUXUY%2BIDwRl56j1e1MHSscbfGrpdNyF2NuxPPEAVCrJf05lLN5KOuz2knc1QFFyvyZiaxRHFTEBWnUu4yLeC46LyKxBQ%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdda37aed8767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53971), with no line terminators","md5":"5d68320e40a2787fd4f3b61ba242ad77","sha1":"0493e9354719c10f75b00204c3c66dc78a6ee7f0","sha256":"bd07088936ed261acb97c113084e733358edf75e626181fe0a1a33c8fd0ae834","sha512":"4fe5c353d7feae4fe0f7d100924f2a997961fe7e26ff3cc7ceb061d855460537b0f8b853d992070d3ccc2c4e99bfbc33d78981f10c0934987fa34fd66d03036e","ssdeep":"1536:n31t0rHwpjiqMfw+Tu4C5Bam6StJkMYjVOKGyei+c7qP+Nntz5FZOV2uXz8G7Gp:n31t0spjirg5BVYjVOaj+uqP+NnR3Oc","tlshash":"9214b599db63a28c8d48619ec4b2f946d2940d0aca4cb853ee1eddc33515f7a90c727f","first_seen":"2026-02-18T13:26:16.948752Z","last_seen":"2026-02-18T13:33:24.04325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":437,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/maker.f54c59c8.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/maker.f54c59c8.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4103\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cclWymKA1SANtunInoa3k51X7PrqAyN2ApGNntuJTj4W3QPfCiWOkU%2F17XmnXtUP1fRqU4aWTioNQ53mT20ZEo5fWRjqohCU6ySlJzEGzjAm2yE%3D\"}]}\r\ncf-ray: 9cfdda381ef4767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 164, 8-bit/color RGB, non-interlaced","md5":"561236811525477f8f83736d95bee9fb","sha1":"7dbd7f97437677080d428472c3128d942b227afa","sha256":"604735fd03981c174b5490e055416880204ba9a8dbd5c34957a9eb3927883625","sha512":"4cd906b4690bc2fc42f20ef7976f099abeef8608dea94dae409e3700c8c447ad5b4e5624839e81fac8cede88c75a9ec3bd9327a8d0c6d8e7a0183166265af958","ssdeep":"96:LnLJOt8EWWWWWWRjnn2fp0CFeKWIjeJFI66FI/5oIcAlAvA:LN6WWWWWWZnW0C8No8I66FI6M","tlshash":"2a81d6a5a30820ef61c1bb7473deb695ce337588ceecb40d3769245518a882556bb28e","first_seen":"2025-08-15T04:02:28.951285Z","last_seen":"2026-02-18T13:33:24.043956Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-kraken.9bab6c7c.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-kraken.9bab6c7c.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1657\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beWYeseB3VxMZKPOMYXkM9KD7HNWXN3i%2BPenDBg9pwZlTEFfQLaIm8hprMQGfTCjf5YFlQmtvx996y3l97jkvCNXWHTlNiMaffpE8d3ALmu9B%2Fk%3D\"}]}\r\ncf-ray: 9cfdda381ef5767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 229 x 47, 8-bit colormap, non-interlaced","md5":"05048795c00575b58b8a9640a6bc1514","sha1":"fdc9ae5b9ad67e1b98ad4f058d9073e5ffef5d93","sha256":"6ea864c1a4b65df62c56084597e735d203622cf89aab1d01a729f3427d4d3077","sha512":"b0c4b0fcaf346e9c1b87f45db6bf17ae1df616b3e966feb46fa4033d9913bd5f9c6a124372d9eb8b7991d65c60fec9285e21863ec74137e99e62d1dbb96951d8","ssdeep":"","tlshash":"fd310a53f1263e8c5b33cb521562087a083fac5056125d310c9438ac8b31be48326695","first_seen":"2025-08-15T04:02:28.964594Z","last_seen":"2026-02-18T13:33:24.033293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-starkware.f4d256f9.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-starkware.f4d256f9.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 3095\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnBtXM1fop%2Fc7%2BxXc43lNhx956CTTsA9f1kGdlM7UE7eRffCzIt0dsW%2BDUUKY%2F2JPlQYXEI3ADQoJheJv82fdoh3%2Fy3FnmJU79vvrq5gvzuwBTw%3D\"}]}\r\ncf-ray: 9cfdda382ef9767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 221 x 41, 8-bit/color RGBA, non-interlaced","md5":"a6b5ff659334dbaf999a1d880af3d68c","sha1":"094b681ff610602cb248196d654fbbf5fb5b6023","sha256":"d7037b91b598c89642500608274e19264268b690eecfb5c2fc4f940b5ad209d0","sha512":"6ee8e7c7df57840c81d9d61923ec4ac11cbdb47b6f44a61ea920045f6114be2a475f372c832a055f61f8a72df89e7e5e14df5bbbb8404d22bf471c2b4d8dae99","ssdeep":"","tlshash":"a7513c5263189262a08007ad041f2664cd3317ba11067b94f4f4be39041ff1af0f7db6","first_seen":"2025-08-15T04:02:28.952397Z","last_seen":"2026-02-18T13:33:24.03703Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T13:25:46.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 22:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=loEHc5NuXDf33qLqIFayUZfdsvEY%2F6sn7zDDx3QUAS3YGy52B6oyrxVJoZWZewAn5rAaJ6NmUkYo0Eh4Ce4MP4jXVnSqY3C7qB6E5Oqig1HZ2RQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cfdda364f6fe9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1899912,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (60268)","md5":"995097aec90cbc8f6b2231663f62f672","sha1":"ce0a7315f06e923c8f19e63dc6ec13839b70ac65","sha256":"6a8dc5e65237bbeb914d4885fff1bb762534f4150ac8cec4e672f671d49278bc","sha512":"bddf96856042a9e976abfd8db8439c58fd9c6fda57e0ed85e5fd6528ecd6b5dc633a356dc4c182d4f560f00d3e7e48658f66d864e567a46d59b904fe45d354bb","ssdeep":"24576:lXy93pAdM7KsZ63calkQ4hfg+Z0d4Vj1kskB1A:C6dM7W3caqv+du18A","tlshash":"5125d0679a16113f3c1380f9d3ddaa5c9129e083ed21aad9badd2041cfc27f619b7709","first_seen":"2026-02-18T12:58:59.271517Z","last_seen":"2026-02-18T13:33:24.042619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":59,"dns":26,"connect":8,"send":0,"wait":73,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/apple-touch-icon.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/apple-touch-icon.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:08 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 18011\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9YKFIYw5noFzuBqKI84tft7AJJYR0LzrCMmGEc6yZFeZz0woCRTYfqTKyJRzVrjyrCeGsveR9yQhcnF1KH6aw15NvySb9hxFPa9Da%2BYVxwj770%3D\"}]}\r\ncf-ray: 9cfdda380eec767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"35c07cace0507bc3411d4aa47e2c82c8","sha1":"47954406ec09cd35c4033af02b34f72471861219","sha256":"1538be28396cba85080931fbd8bd5b128528ec1d2994e1818f6bd56ca7f50a3a","sha512":"a4316bfbc64519195edf8de706ef97519b13b7213a781b0a3f85335c95d34fb739149c3c955da02882fcb4dce67bd394c9b7ceb3340d66d061cc37a5a0fad631","ssdeep":"384:RtpiOT3dn9zb5r6tpnZ5aFJ/AvosgWfA6F5sh1A0:RtkMd9z5WanAvoZWI6shz","tlshash":"0a82d0d7919ebcc08f61828d239a7db8b199dc9b6453c854bc337f89137a6d7261181c","first_seen":"2025-08-15T04:02:28.954181Z","last_seen":"2026-02-18T13:33:24.039189Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-usualx.com/imgs/logo-curve.a64bcfa2.png","fqdn":"register-usualx.com","domain":"register-usualx.com","tld":"com"},"ip":{"addr":"172.67.181.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-usualx.com/","date":"2026-02-18T13:25:46.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-usualx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 06:28:09 GMT","end":"Sun, 17 May 2026 07:23:09 GMT"},"fingerprint":{"sha1":"3D:5A:29:DF:81:1A:14:1C:FD:D9:6F:34:1A:E1:D6:D5:2C:CD:44:F1","sha256":"F7:F6:2A:E2:5E:89:7E:89:D7:83:6A:FF:7D:D3:9F:50:8D:4F:D9:52:C5:21:2B:67:53:B1:93:AE:5F:57:92:7C"}}},"request":{"raw":"GET /imgs/logo-curve.a64bcfa2.png HTTP/1.1\r\nHost: register-usualx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-usualx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 13:25:46 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 08:06:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4350\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 1644\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2JD26m0k6gZQi86h99u5GvaO2LN33kg1%2BpQrNCY02xAneDDmKe7RfmL7ZmNY5mYGokwGpyDckmenzKCh2wiaMGGpcnGOrwbtqPx5hxNxDmTLBM%3D\"}]}\r\ncf-ray: 9cfdda382efa767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 157 x 49, 8-bit/color RGBA, non-interlaced","md5":"71b355dd686a07b8704a4d367c344360","sha1":"5944ac7c5f34b7b7a83537f816a6788c65d02bce","sha256":"747499a5742857d198a6bdaf10c57971188c1310debd890791c39cac88b3ae56","sha512":"af8e81b474b0035d1b8bd89e20192b461564dd685ecabbf7d380b9c8914ed4337e1e7388fbd2fb178c3f63eee84fcb5396a765c279a4cfa0fe85875aef8ec00c","ssdeep":"96:gao9KhtnxXVMOC0Bc0UZAqY1cmghxDTMrw4kmjQEiT87:lxq7AjgnDTMTEEiTc","tlshash":"d8917d90d9d2e6dfd124a67439bb52d0daa884dfc50700489d98f24bb4a630e78d2e94","first_seen":"2025-08-15T04:02:28.958737Z","last_seen":"2026-02-18T13:33:24.042092Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"register-usualx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}