{"report_id":"12aa5769-2c08-4015-915d-2d274c6c35b9","version":0,"status":"done","tags":[],"date":"2026-10-09T16:59:21Z","url":{"schema":"http","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"title":"Xaudots","dom":{"size":210233,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1002)","md5":"dcf992046f39468c3a6a0efd6741b439","sha1":"7cc0ce086382a3e678f9aaa1615369b80e7ba1ea","sha256":"c4611c86081e44c6628eaf8a83e4e564fb727693911b91b9249120a3b0a60310","sha512":"85fdfa906de738c9f9a0d0dce33370563db0134532f0716c4ba8f95e486e73e4df75cdcb11a0ee0993747f019a2dc01bdbca6b0d7f68360d2a8a270c544efc7e","ssdeep":"3072:OR2dKieKWIGPhCIQ4zeM7TB7rTSQrzjP6wUiZ:82dKieKWIGPhCIQ4zHx7rTpUiZ","tlshash":"34248554aaf61036102390e69bf5574afaf5d017c24bc9183aac4b806fc7d68e8737ed","dom_hash":"domhash7bf7b0e5ae2818bb48c25cc8eae7d9ec","first_seen":"2026-10-09T16:59:25.588026Z","last_seen":"2026-10-09T16:59:25.588026Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:59:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xaudots.com","ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-07","domain_rank":0,"first_seen":"2026-10-09T16:29:28.341279Z","last_seen":"2026-10-09T16:29:28.341279Z","alert_count":47,"request_count":47,"received_data":2062533,"sent_data":25363,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-04T23:23:27.025218Z","alert_count":0,"request_count":3,"received_data":246907,"sent_data":1512,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.huobi.pro","ip":{"addr":"18.239.6.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-10-09T16:29:30.57754Z","alert_count":0,"request_count":1,"received_data":476,"sent_data":576,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":6147,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xaudots.com/Public/build/js/jquery-1.9.1.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eab03883dfa83485764a899291fe70b6","sha1":"9f141513e785435828eead835f54277f190f9d58","sha256":"ac6409d2d7eb8214dc4c0d51e97ce0db84da2cdd1ef644b1435a036dc2076a42","sha512":"bc731d0464975b98d792de4578fed782e3f066115fa8b3360810791b042d8496e4166cfdf8cb7804b167847e4145115e1862a5e1e3a961751293ce290fc7fd53","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUB:ddkWgoBhcZRQgmW42qa","tlshash":"47932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92631,"data":"","first_seen":"2023-03-08T13:38:46Z","last_seen":"2026-10-09T16:59:25.631623Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/js/pako.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64413eda72405dd1d28bbb64d900c778","sha1":"6086b751c4f4c90bbd0521b6bfe5279fd4eb55da","sha256":"29cfa0542b9864b6640cfdcc8f15b184db6431b532db2702a3ce97e5f2a7fc1c","sha512":"7ae59cfd0bfc2a9d026d35f533e43706f532a0e6aaf40bb9d134fbbf3dcc15fe6f7abdfdc9babacd5f919e00d8f1e37c0084058a0c63c18bfa8e1a0fe78eaf7d","ssdeep":"768:7feBUDB3FA8/nVPg0kKWslV7hF/PGjMhuAEIzg49n3cG:zeG/9hF/+jZAEI0O3cG","tlshash":"1a23f6a630f651a82be118d8909b2b96217051326c0519f9e378dde43cb4dcfe17fa7e","size":45988,"data":"","first_seen":"2023-03-07T12:10:43Z","last_seen":"2026-10-09T16:59:25.659894Z","times_seen":3813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-10-11T08:34:05.328313Z","times_seen":17884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e414d46b83aea4f362d5e3a89724476b","sha1":"c1b82dbc403809865810e3c4ca995fc153a6c730","sha256":"1fbf159cc79414cae9522f4b7e361f312d4aa15ca66e7d2b5cea47dd5e47266a","sha512":"a3c0d611051d1d6440a5166c6fcd007c2b2039d91da83f25179e37f653457032bb9f6fa5efff97a550f2764536809f132fa962276f997b1571d3db8c8015fef2","ssdeep":"384:ubYpA2XqL6znpl4JJR6W8uSDKus4WNwRhwxyVfXJsV/GZkpv3oMJBbYvs2AfR+uJ:uH+UGWdyV/JsY0v73bSsUjnLlfxi","tlshash":"f6e22cd2e72cbb370296019fa6ce81eae7258029633ba50e785cc21957c1d7c87773e4","size":31457,"data":"","first_seen":"2026-10-09T16:30:09.053405Z","last_seen":"2026-10-09T16:59:25.675334Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4b6edd1e960f69dc2e0ec440699ddb6","sha1":"007d73e42e27ea25b07fe28cd593698c31eb577e","sha256":"a8bbf6c92e2971d656f70cb0a44e2721a0875943b7e13f4cb9a6fe43103a9e68","sha512":"b85a21a13c8164247c689effa7dfea4ea567b5c08c0ccc9938d3eb547ef5f5cafcab824af3cb553a05056ec8a33d2c50ce9e808be0d0e2369d5b2af72cab2921","ssdeep":"","tlshash":"4b618929e8b41cb31046f03a18bec187b67096470d193c35fd4c869c5f0e9bc56b9be6","size":3225,"data":"","first_seen":"2026-10-09T16:30:09.069486Z","last_seen":"2026-10-09T16:59:25.677077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c7048cac8456d84adfb11717b5ec990","sha1":"cc9b25579d77ee795bfe83963d9c8c2ec2993024","sha256":"cad1d3d221e9474283f03abfe5c1438c553d811d9e6a6919e0adea8b9d1a4421","sha512":"91d83d4cf8008cd694e8a32a8571075b77d3e6f3e0109add8af0d4f523c07514349d52b4a9a64d9e33b11f81cceb5ea11dbefde6b55d9c1805c82c58830aa9eb","ssdeep":"384:JMembNvSUMJEJ8Lcx8tsf8awYtah81AFG52N:JMttU8mc4G4cCA4ac","tlshash":"0a523b2cf9a3246838a334198baf004434e87147cb49d9193eadbdc26f5851da5f6fde","size":13405,"data":"","first_seen":"2026-10-09T16:30:09.077035Z","last_seen":"2026-10-09T16:59:25.679517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3496e97a7ff523d4678592d5d5b3ec3","sha1":"9c5a1b7425b3f5b684fe4836067ad26635fcef97","sha256":"975e6e7dfc12ceb0dd2754e4d8c62d225055dffc2988a5381881858afe5ede5c","sha512":"b207f1c9f0b3dbe22492ec3fa98e3efbf987d8c21826d768d913f5f04044f8dbde2c4d800b0d3c97c3155da0df92550c2c5d6e36df2dc8ee6ca5305afc2190f4","ssdeep":"48:+YdjughrivQYW5/0CLdP0gP/M2b8Sb5TF/7MQtQ1KY0e7tYQSWGtwqKiojRv5QUf:+YphWIYKcCLN0gMx0cbSTClRB","tlshash":"70b14612b6b71802597a36be0367100475bda017a549ce1ebbee27c06fa64f47844efd","size":5168,"data":"","first_seen":"2026-10-09T16:30:09.091704Z","last_seen":"2026-10-09T16:59:25.680843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b828b485b48f5a77678ae3d79c67ccc2","sha1":"294d10b8b885c6e45efde977695a4bb682012f2e","sha256":"039c93db2292a773ff24e0fe27efe3eeb457bbd7dc895cc2b18079b0bc579104","sha512":"7ac55e7982a815851bd5ea4a6b03aa7c14d8ec8dbd738859f4c511bb453dae030134c886eaa09e9d56635bd21fde21954440f49891b55ccb5f325741c4030645","ssdeep":"","tlshash":"f8f0841e0a0ed2fa4098427a5b7182ef71d05bdb080a6905fe8f02231fac4247881fe2","size":564,"data":"","first_seen":"2026-10-09T16:30:09.107061Z","last_seen":"2026-10-09T16:59:25.682125Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e45916c4526ab3b2d942ada00c1ea678","sha1":"88cbaea83e96a0c13c916e64dd25f7a4fa6d3265","sha256":"892ed5d0f41d97f6c7aedacb43b26d1663027d2f5390c197bd1a67ec93d5dde6","sha512":"0ab99afd818bf4690523ebb012568e5ce96de718c51edef35b9c5c6f44304fd8ead046c70074284b6a162427c00ad0a66da96800af304a875a1670b243d959bf","ssdeep":"","tlshash":"9741238a587300b8a80776bd2bdf910c263135532417ed14780d9754ef19ebc55aaffc","size":2074,"data":"","first_seen":"2026-10-09T16:30:09.13221Z","last_seen":"2026-10-09T16:59:25.6833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1e977490e5a9ef3d1a6a4c329c19d4b","sha1":"d35155d38db6e412f10b866c533bf08eeeaae8d8","sha256":"abc9441df3b7d659126b1d5351365b019c98975783869a4f2866e7bc8cf610bb","sha512":"61916c0788916a24efac8a7c6809080066aa7d01c5096fdb1dc4f98025082bfc0bd063847f4bc4b63b7da0f77bf4b05980b2ecd3ac4b33cb69aec63da5321c3d","ssdeep":"","tlshash":"ade05eca38a2106c58bb71e995eb05801868820784528f443c6d76d18f622ac9671f1d","size":302,"data":"","first_seen":"2026-10-09T16:30:09.14234Z","last_seen":"2026-10-09T16:59:25.684366Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc37fb1a91b133394a66019798a20b1b","sha1":"9f8a7ed98c239a37c48458c55503a077d74a7ff1","sha256":"a2c6a5065ed918dc3b6db204b68ead48fee925ea73777ce3383b8d084775c8b5","sha512":"712a438dc6a932b84fda08bad3e1fc2f2f3d82bce564544565f1aa7de36ddffe2160e64d02a19043e2a07b5d5603e22b4f08319a932b9a60cc003f8570dad76a","ssdeep":"384:NKdRzBXs7FeWj7Bb7Kf1uteBsahDR8pTAcStrBEh/NBFH3vZU3qsptHtXsFN7h76:NKdM7FeWj9PKPmUChLy","tlshash":"5bc2b388aebb103b253365e0daf60749baddd043c2865c0dba5d46843f91035b4e9bbf","size":27278,"data":"","first_seen":"2026-10-09T16:30:09.14406Z","last_seen":"2026-10-09T16:59:25.685557Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/js/layer/layer.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-11T08:34:04.339666Z","times_seen":16913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23364,"data":"","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-10-11T13:34:15.925339Z","times_seen":5965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-10-11T11:36:39.196571Z","times_seen":10528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"23f7a9b3537b88911d394497db990d3f","sha1":"a99162a61370c761305a181784dd3cc8d12de27d","sha256":"f3ce117eafd9201e41497de1ee3e318a7ac1027347f558684940dbc52978f664","sha512":"95df05d8d3455063442ce9f23dda7aac6aa4f9c054ab60c80b06645d7264ab7c6604871d28247a64badcb47ebd1cbfc86f3f7ba69903d6e5bc1d7c1bcaec7cbf","ssdeep":"","tlshash":"6d51008ce2820c0080c000b80e80000020a80802c00a80280cb082800008022880080c","size":3050,"data":"","first_seen":"2026-10-09T16:30:09.162826Z","last_seen":"2026-10-09T16:59:25.686637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/js/jquery.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-10-11T08:34:03.956272Z","times_seen":12757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-11T08:34:05.276864Z","times_seen":8603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"connection establish","filename":"https://xaudots.com/","line_number":2995,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"xaudots.com/Public/Static/js/jquery.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.963Z","timestamp":1791565127963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/js/jquery.min.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-14938\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJe2q7eORP0M5HLWQ5%2BWBMtXHRJB6rIdEOU%2FefpKaQKNvvw1AN6k3bgDYLn2aG96GCa8uoOzdF3fMHRIwHJ%2FQz%2Bp0rB%2BBnW87hl5AOJLFF3R7gIcj7KxWko8fNBoGw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eeea1bc9756cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84280,"size_decoded":30576,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-10-11T08:34:03.956272Z","times_seen":12757,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:48.025Z","timestamp":1791565128025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-36e0\"\r\nexpires: Sat, 10 Oct 2026 04:22:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2160\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A36eSbhMaJfm%2FrAzHnmnenXe0rCNrvf5LIM77fZg5%2Fohu2cj5IjK88KSCjahcPTxP3PMvur%2Fu8Uz7kn8ZsgoY9x5pIMvK%2BxyDBoxN0mHy4fB7w27ygmttU3rGFGzrA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47eeea22ca556cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14048,"size_decoded":3669,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-10-11T08:34:05.393321Z","times_seen":5694,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Ajaxtrade/obtain_codes","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xaudots.com/","date":"2026-10-09T16:59:08.172Z","timestamp":1791565148172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"POST /Ajaxtrade/obtain_codes HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:59:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFsfiiMarGJwC4w9xqt5EaTxw%2FSpZuXc%2FefgHv3yz%2BtIkuTOQ6tD8V%2B6De61NIGteBKOv1yx%2BFQPl%2Bn9CvhtvvxnzdkSJlYatdTwy4SMzgG%2FGd78hsQgqjsDAUDtoA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eef20195356cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":972,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6716756b43bb7666d1721a82d1c1039e","sha1":"fd723a2d10c81e1b817a37e9bad57b9bb4455f92","sha256":"f745fb66e4b167dca77e33f4451de138f90325b451610557d8c4a4288fabdcb4","sha512":"2af6915cde4af82f4c258ef93cdb75ce1a274e0e959617aae2b3e0ae0b13df060efe67940bf1b6893155a0f80a4d751406b8b16ac1935a00b12b66cad8dc1e4d","ssdeep":"","tlshash":"d2d022c06e3c042609b1d3c398ee0369e48dc08bc144830aaeffc778206ca1c7a92822","first_seen":"2026-10-09T16:59:25.60378Z","last_seen":"2026-10-09T16:59:25.60378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/favicon.ico","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:48.072Z","timestamp":1791565128072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:48 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6ac64029-10be\"\r\nage: 2158\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=leEPaATFKzYDXsIdIpFZSt%2FyJQYptzV5pfufIXadvUqUGlx%2Buyy3JCEPFnLYR60sBKXk8ssKESkH%2BnjFcy4Gar2lA2ST8rHblkMzS63FtNIJBobRkEaPF7sX108EOA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47eeea26cb356cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":1887,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"88478a220fa563739b2c5c4be9d1a451","sha1":"ca649bbbfd6eaced1496ac7c37dc4e6a04cc2f32","sha256":"7a1cb1d6e79ae2fa733e930e862fc1a91cee60f8ddf5f7c2cfa95907530fb555","sha512":"772d6de2784676c3750e165d73c75278668a5f474eadfa4e1d0a66081523f3ad11967cf9b7dea26615a7f8b565e52bb3c16bc53e605dd45bcee84bf38c6cc6be","ssdeep":"48:BqXp42W24MLslhbLxDPJ7UI1DwcWxhgRM:BqXp427g3xDPRd4xhk","tlshash":"b991b667615e842fd93133788890f3bf89a2cbf0203912ef6d6c0093ec8954a67392f1","first_seen":"2026-10-09T16:30:08.634109Z","last_seen":"2026-10-09T16:59:25.606144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Upload/public/68958e0f47b82.jpg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.623Z","timestamp":1791565127623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Upload/public/68958e0f47b82.jpg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-39be\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dhnr7d25WQAF4IyXcEy58Dm1tJKsXXr58hHUMCW%2BF%2BZPreZgxPJ4n8ZXxuqTeBmVx%2F%2FJ4h50T3Lu%2FD3Hetd8GiAtotfSsVmJfUauqOvyw7fKDQucqlZ2geta7F1Ohg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9f9c3156cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14782,"size_decoded":15021,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"ccd2a3bd8dba53c60feed8eecfc563b5","sha1":"109daa2aa8ce232682ea486480a0c68475f2032e","sha256":"0168f40570479b0f792c29ac08b859be66143926ff2c23111b7aba5f4946297b","sha512":"79d3dbd36432b891710c03ae15f95666079be8499e2039ee23d64217dd6c9bf8e84d3c9d5a68e1cf66517c053525cc48b6ee813b35f6cf4d2a46e0c688a665d8","ssdeep":"192:s+WMRn/l+FJBrMbPF8UXLuVJ34y4IlxYXvWZNDOHWP+B2c/3Rdttz5gLcpOp4gzp:s3an/AFf68U+AwxSeTPg2ubxKLpt6tet","tlshash":"8962bf67ce295e478cf1cbfa7f731ad5669c0c4265a037d860701de8d60ea44ad4f01c","first_seen":"2026-10-09T16:30:08.630406Z","last_seen":"2026-10-09T16:59:25.608177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/imgs/hot-2.svg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.625Z","timestamp":1791565127625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgEsgeQWHBTklThEPMaKzcu5UELg%2B8DyyyTdxeOELCUg10QpjyX%2BSX03g2U33JPGBX63LKdwyLQeZb5cqwtVkNwDvbwqqIaC9SWIOZmmMcqjjKgRTUmdWvWjph37lA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3256cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6878,"size_decoded":2536,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-11T08:34:04.75927Z","times_seen":7545,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/1613786513998262.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.633Z","timestamp":1791565127633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-adc\"\r\nexpires: Sun, 08 Nov 2026 16:22:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2162\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBqB8mIZgOOtga64tZchKc7SfnNaonVnwZ%2FejPVmX0hPWLYAN54AgnmlTRRqSvO%2FUZmz%2BWSaMPFFUaKYmv1tEch2r2tYiJFlGjqS0G2%2F5RA3zEqm6XPviq8zi5%2BI6A%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3a56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":3564,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-11T12:54:34.427699Z","times_seen":26213,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/img/tip-2.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.649Z","timestamp":1791565127649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/img/tip-2.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-bf0\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjqjxinZO9AngZx%2Bm3ckJ3SVThWu%2FE6XG%2B7%2F3WzHzvhpL1lc8gVTvKptiOPgDvlFHFtOOtJSPxixPLGlGbzZXc2r%2FfOzg1O1BPBAaE%2B8ycqFIM%2FaB%2B9PMGUBv%2BJg4A%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fcc4d56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3056,"size_decoded":3883,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b05e3af8b084925bf15c12f24770e79e","sha1":"ac79a090d5d2e5654ab9d633ece54c4d56a95ab1","sha256":"2d1bb67e2de787d701130f417dbf486298e33c5f4eec61f1b1dbb292114fe7b8","sha512":"a2b2c765ea765067277d0a8fcf6f05f53f446af56709ddf490054b578322b1758f766aad1ddae71fb183b753f975c370c6790f4c7e67f97ba25f72ebec9eeadb","ssdeep":"","tlshash":"5c515dd1f2db2971fc26171c7d11a81e5431790d0cfb6445de50f1cb4b1c09640ba5ec","first_seen":"2026-10-09T16:30:08.902439Z","last_seen":"2026-10-09T16:59:25.612101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.610Z","timestamp":1791565127610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-2c9e\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSgFWtAyUTYb6lHc09bluPBI3O73Z5pkUHapEdSS07iuTmUe6mqPUje8UfB%2F0za%2FoYWcUpnUeQWs7yUcOP6sQ3FX1pe1gMs8cB2GwDB%2B4biYN2qexJZP9TnV9LNzmA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eee9f8c2856cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11422,"size_decoded":4506,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-10-11T08:34:05.328313Z","times_seen":17884,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/imgs/btc2.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.626Z","timestamp":1791565127626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/imgs/btc2.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-875db\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=neqBmclSMlDjEmm2l%2BwzAn1nErIx2nM%2FYeVv%2FPkDbIMTVIv4BidbNdQXgbc4fhLi6TX0Q9Zyqg2eXeq3atRD6kOSGgmeB6NMwX6q8M6%2BADsA8CQY4cEt8C2kuzjToQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3456cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554459,"size_decoded":550643,"mime_type":"image/png","magic":"PNG image data, 643 x 643, 8-bit/color RGBA, non-interlaced","md5":"5228fc16388f210decb78a39fb0bf791","sha1":"9cca49741705557cf7abd7d752c0accb62e5a432","sha256":"c94ddd9a59c2d46aeb99869186dc010a4303b8336476ad37166ddba0c51096eb","sha512":"78f680ecf5c296f53b6baf8eca9e637438e6c71bd179ab38b32bac3c562ff733d8b0112250e6c0e19f2d9a034ea2ddf1be50f98d4c98f7b107a3048caedd7966","ssdeep":"12288:WvqSebTi/tOx2O7hZVWdhqqWogkL1FMnbEWjzORYrOgFX7UT7:MqSO2aWdAqWo15FMnhjzvrOGu","tlshash":"4dc4238656ac172355f16292ab82ce45ba67f0c778bb16f28e3df8505f4784cf9901c3","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-10-09T16:59:25.614538Z","times_seen":28,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/wojak.svg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.644Z","timestamp":1791565127644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/wojak.svg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-2a9e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKz%2BF2X5C%2FGl9fzKUe%2FIkoqgjutw81fvl39xa3ds8Nq2L9i%2B8hpNgXxdEwF7SNoyvah4DiMTnQ3Xkof6jgFcmgzkHyUHx1AzYqTA95CUsYitSiKupaiECxJ9Na5BLA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc4556cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10910,"size_decoded":7712,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56b7bc4ac43e4616197395d3b73bae70","sha1":"0d34e8cf293e7771ff18eb7c3a7aca5cd3d807dd","sha256":"52c1ce096862a1a539dbb5aa5d54089f44ba8f3c64828bec5aff965f2b21d78a","sha512":"662a94775d0b9dd1a6006baa96c1cc855266885a3189801d80c2e7c5e285495d9f59c0670a44453050184b3c78816038f3ba5f2baaec4a633f40bbf435bdfc7b","ssdeep":"192:ANDVNK0jkrm0Z9JxdsicuyCDgbumSlI3BTj4yFJZJq7wf:2DnvjEmGdjcuzDiHSWV4yNf","tlshash":"c1329f74368efe46cb24a13aa1f91505af5a19f38374ce8dee043dd504a71c9c79a50c","first_seen":"2024-04-28T20:00:29Z","last_seen":"2026-10-09T16:59:25.616137Z","times_seen":39,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/img/tip-3.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.650Z","timestamp":1791565127650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/img/tip-3.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-1023\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rlmqzvHyF%2BuwfmmbQBIXDd6gK52cMjHgiKQgCQTdk9nTZZPiH6SwrgT7o%2FkWWMsVaQnQyOd7kpjyn8BKcFO%2FZHzip5H4L%2Bfl4%2FcE1DcPrZSk9PmctYskLOW%2Fcl151w%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fcc4c56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4131,"size_decoded":4948,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b7863a05872dd2adbcaa876dfddbb644","sha1":"6eac2f34cf303bb63354cda6391b1fea0b3ca5b9","sha256":"2e56925eb6692f6238b110cc18a97018b71e96c31680944d132fdb5f08bed14a","sha512":"9d7db6bde4dfcae9ea19fd452cb7c9040eae62803ec8e5ca76c48d5b5181a1be69d1a0d3bd05a26f3325bb0abb3bde20acb803f6d81fcf83d21049b0e610c866","ssdeep":"96:rVc75RF4Hz1KsIE6UjDIXgLb0PbquOZ2DC0QQPV+d:rVc75RFKXRmgLb0zb3q","tlshash":"60816ced346ba488a64526399cfb741031f6ddf20802bea1ff05a9b61c1061392bec23","first_seen":"2026-10-09T16:30:08.623996Z","last_seen":"2026-10-09T16:59:25.619649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/img/tip-4.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.652Z","timestamp":1791565127652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/img/tip-4.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-10b3\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VnnRKVJmu0Dwect8mmpKcEnOSXgNG3mHTjWGc%2FKJNVKN%2F43Un1LoSB2aKV6bKih4%2BuJgWxw1nDl53zOceUhSuUFKJgayklBfNU0cbHjj0Chnj5GnusaH44tNkhJDyQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fcc4e56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4275,"size_decoded":5091,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"0ecf74650333ef219e5159ab4b77e657","sha1":"e051e5069a146f369a77354e8d8371c14029f367","sha256":"e1e2ac038067282f0f34478315e3fe646568e6f86f0e25fc1828bfe615cccb48","sha512":"4ec78c8d5db5a02386f5abc6a453eabee4dfb43aba30f9f77a0c682266c78dda316183e6f59ad60e5be742ad8f43652c600722be31f4e7a92fd5a3f6015ea167","ssdeep":"96:LGlmKKquW6qqXt5VSXNdtYdpuoJI2bukkJSj:KMfVS9CLI2CpJ0","tlshash":"9e918f9e745dc8c6da218d7eeb9389fd5922a45224270d22df1f8c451c2c20fa2d6506","first_seen":"2026-10-09T16:30:08.627325Z","last_seen":"2026-10-09T16:59:25.623565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Ajaxtrade/obtain_codes","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xaudots.com/","date":"2026-10-09T16:59:12.257Z","timestamp":1791565152257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"POST /Ajaxtrade/obtain_codes HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:59:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccX5nHLIGtpgv2NuyceMZEJ7jBjHOmKT3zoudPSIgC4OjOJNCA9bd6yN7I6Wp7dxfajwgb7%2BB3wU2R%2F%2BynkDN4TSeyU7WKGjhEYhtSLVT7rZLW2aQrH11h6vcz7MqA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eef399f6856cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200,"size_decoded":964,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6716756b43bb7666d1721a82d1c1039e","sha1":"fd723a2d10c81e1b817a37e9bad57b9bb4455f92","sha256":"f745fb66e4b167dca77e33f4451de138f90325b451610557d8c4a4288fabdcb4","sha512":"2af6915cde4af82f4c258ef93cdb75ce1a274e0e959617aae2b3e0ae0b13df060efe67940bf1b6893155a0f80a4d751406b8b16ac1935a00b12b66cad8dc1e4d","ssdeep":"","tlshash":"d2d022c06e3c042609b1d3c398ee0369e48dc08bc144830aaeffc778206ca1c7a92822","first_seen":"2026-10-09T16:59:25.60378Z","last_seen":"2026-10-09T16:59:25.60378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/etn.svg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.645Z","timestamp":1791565127645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/etn.svg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-6bf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQYbBl00B38FjJDfV8NYWOejTU%2FeWdNDDvEzgEecvfBDQaWlbCyS1M7ns%2BrW%2FwBRCNr31MIol3OfbC%2BvOie0ozxayJN%2BLgF2GGhNqVSUKl1VIomSMQQZTK5ff%2FkM6Q%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fcc4756cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727,"size_decoded":1631,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76530b40a0d27d62303312973fdbe9ee","sha1":"cbc6366d4eec7c9d79a12e72648267ed2707960a","sha256":"f42186ebbd7440df0528a934faf8f5ca04079f97c95ea4f7536e27cac02ebe8f","sha512":"7cb6bac19bdd715c65862adb76759ff7ff0721086a361ea9b3f56fe312a0b2ff42bfab924d03af3c0fa75697ae005b422d6ebf985ecf698d3f298605ae135757","ssdeep":"","tlshash":"603182ddd76c91f9b00bbb7d8212687032616e667ca3c04a42d111457a524acdf3e9d3","first_seen":"2024-05-03T05:25:43Z","last_seen":"2026-10-09T16:59:25.625102Z","times_seen":35,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/img/tip-1.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.648Z","timestamp":1791565127648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/img/tip-1.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-14d1\"\r\nexpires: Sun, 08 Nov 2026 16:22:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2162\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqKc6NpGs15abNSNiO0wJWeScFryfrogMiVGZRRk%2FBMvrGlT%2FDgRH6OX0ldZLNbtrD8a6XTYa77DlIACZamGzc6yOoEw6Efp1W621%2Brkf4Vp2cfUYl9Zzcsz6p1N1A%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fcc4b56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5329,"size_decoded":6145,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b7a3745af3ad465a8c26b3bdc07cb904","sha1":"0bfaeb2fca1cf1ba1e7d627861a62f2367cd7ad3","sha256":"c51b48b9bd5d8128ee50b0e38d1b0742896643db5b89fcda83cdb71edaef8f79","sha512":"be1caebeb5c2fa35953958a7b5512dcc05d96e99fcffe1da7f20826250f75da3a43c85985eadf1d1474804f302f955c8ed15741182af31f3eaff7c1a3131950c","ssdeep":"96:caZwPo7NQQmvvOSfBtS32rU1OkZNxKh1RkWDwBMri1pqLInKUi:JD7N2vGb33gh/ncsvL1","tlshash":"4ab19d13c9534c6e7202b9bccd9b48bc979c03c136d8f3975f098438468c85bea6876b","first_seen":"2026-10-09T16:30:08.645777Z","last_seen":"2026-10-09T16:59:25.62604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/js/layer/layer.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:48.006Z","timestamp":1791565128006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-4d83\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJEBi8NvmV%2FXV1oaNhlR7cfzDphw5eexk6KglcvhLPPJZDhopV5CoNk6YKcfib024MvmvTDqw5Az4zZgtQYogq6SLF1FYV9bh%2F6Z%2FtmfZwaCb7iArQ2J1QtZUpSDzQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eeea20c9f56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":7770,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-11T08:34:04.339666Z","times_seen":16913,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Ajaxtrade/obtain_codes","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:48.076Z","timestamp":1791565128076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"POST /Ajaxtrade/obtain_codes HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTR9iBbGLEwdGLmtQ8NQ3m2%2F4Djxt88P2eFcN3NQz7NTJHelee13NJfu56qWlj8q9j8NwQmAa%2BpQlQPoX8SgjXuInKjJiwWLhai6USxFGX03GVExyNGE2YquvY9o8Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eeea27cb456cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":963,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"255bde4686d2280b4b2f833ef7294215","sha1":"6eb0255ff6438d3bfff5cda8c4f4129d5eaae3ce","sha256":"b2e6d0925f4eb1f01109352c3f3c40b6d3d04ae0bccf894cb4d9cdd07348d9d1","sha512":"b6612d8f8efd24dd342d2446445d4c1442227797340ac8c9e01a753d36e5a4deeda3251bf267a08b5af9f7b776d995500627f2f95b5cf4506cfe0094080b5df6","ssdeep":"","tlshash":"95d0a9902e3c082618b2c3c3949a034db48ec0868044424a6ffecab8282c908ba65832","first_seen":"2026-10-09T16:59:25.628806Z","last_seen":"2026-10-09T16:59:25.628806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Ajaxtrade/obtain_codes","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xaudots.com/","date":"2026-10-09T16:59:04.169Z","timestamp":1791565144169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"POST /Ajaxtrade/obtain_codes HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:59:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKhygEcDKX%2Bjz3m0IQ%2BmJRxIKrtG%2FNKKjk114MFfZRnksoUZYqHCy5%2F9PggYYslo5Lk0RHzJpZAkVG6OvdXCCmMoP7jKFYQqlTRoVxuNeYbA5YLUTu9Ga5p4truN%2Bg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eef070cc956cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":968,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6716756b43bb7666d1721a82d1c1039e","sha1":"fd723a2d10c81e1b817a37e9bad57b9bb4455f92","sha256":"f745fb66e4b167dca77e33f4451de138f90325b451610557d8c4a4288fabdcb4","sha512":"2af6915cde4af82f4c258ef93cdb75ce1a274e0e959617aae2b3e0ae0b13df060efe67940bf1b6893155a0f80a4d751406b8b16ac1935a00b12b66cad8dc1e4d","ssdeep":"","tlshash":"d2d022c06e3c042609b1d3c398ee0369e48dc08bc144830aaeffc778206ca1c7a92822","first_seen":"2026-10-09T16:59:25.60378Z","last_seen":"2026-10-09T16:59:25.60378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/js/jquery.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.604Z","timestamp":1791565127604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/js/jquery.min.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-14938\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUKv9Kp5c01hDRjsf%2BSVsgQIq7UYOeSE6cqtCG2a9UBR%2Fup0ZCsSj77tKX0J7x2KdxGxMUwOTNcYsrxBX0L0wEsM5jqr7ReB7k5hEp3Euq3ZK0sElKK6v6168M9nzg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eee9f8c2456cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84280,"size_decoded":30570,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-10-11T08:34:03.956272Z","times_seen":12757,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.592Z","timestamp":1791565127592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 8018\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\nage: 1536686\r\nx-served-by: cache-fra-etou8220197-FRA, cache-bma-essb1270069-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":8777,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-10-11T13:38:47.658335Z","times_seen":17701,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/build/js/jquery-1.9.1.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.607Z","timestamp":1791565127607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/build/js/jquery-1.9.1.min.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:49:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbd-169d7\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52jGRSx8Ee1DGFbySKyVHJySisKEVsrlw8Ai72WRu1DDIQiMnvw0a6QXuU7Hyws3ZWMHhT4Bkk963WFmkTAfGzHCUceC5nL0ZfOiKLnx1IGhMpRi5yuYZJi4TrN%2B5w%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eee9f8c2556cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92631,"size_decoded":33797,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"eab03883dfa83485764a899291fe70b6","sha1":"9f141513e785435828eead835f54277f190f9d58","sha256":"ac6409d2d7eb8214dc4c0d51e97ce0db84da2cdd1ef644b1435a036dc2076a42","sha512":"bc731d0464975b98d792de4578fed782e3f066115fa8b3360810791b042d8496e4166cfdf8cb7804b167847e4145115e1862a5e1e3a961751293ce290fc7fd53","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUB:ddkWgoBhcZRQgmW42qa","tlshash":"47932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-08T13:38:46Z","last_seen":"2026-10-09T16:59:25.631623Z","times_seen":469,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/5f87391dce40926.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.636Z","timestamp":1791565127636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/5f87391dce40926.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-91a\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzhWg4zQteLq6NbpZMhx0NiNYeey0hrJrSclNUZUX%2FJN8TD6wEdkOABwOyTUtrcQ6kzYL5O64qenmfjjzGydmZOJIk331bnCwLlTy32ltG3QsUab8FuwTgfuYiyRmw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc4056cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":3088,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-10-11T12:54:34.583918Z","times_seen":18207,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.huobi.pro/ws","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"18.239.6.75","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:48.063Z","timestamp":1791565128063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://xaudots.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0B2mJz4ogq2qwZAgE6hmSA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: upgrade\r\nServer: openresty\r\nDate: Fri, 09 Oct 2026 16:58:48 GMT\r\nupgrade: websocket\r\nsec-websocket-accept: 8BCER4j90ZQ0R5AOeLL4bwb8CS0=\r\nRequest-ID: 6010e6049b6bf680ae21cec7a5ae93c8\r\nX-Request-ID: e208a1814f1758c81ca6a30d7356edc9\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 e2ef54be36cbd5bbe7d8d39b7e557398.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: YUL62-P3\r\nX-Amz-Cf-Id: m4NkVbNyGYO91HyP0Ks67mlXlx-cLh9ZVRzDf2ZHwdZTNRduW_a-Jw==\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":476,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T14:43:34.807421Z","times_seen":19029937,"resource_available":true,"data":null}},"time_used":1300,"timings":{"blocked":0,"dns":292,"connect":383,"send":0,"wait":528,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.612Z","timestamp":1791565127612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /particles.js/2.0.0/particles.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"5b44-gBf4sYaQd9tyhXPxykaEoAr2lGI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\nage: 1251792\r\nx-served-by: cache-fra-eddf8230200-FRA, cache-bma-essb1270039-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23364,"size_decoded":6939,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23002)","md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-10-11T13:34:15.925339Z","times_seen":5965,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/1613786496962262.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.632Z","timestamp":1791565127632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-a83\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrqRkrmKcIr7lWS1POe7OoLUYCF3GfQi3e6Ti%2BKR99InVAoLxjfq9NnEMD99rYdcFRqFCww8ZY8Cc18IHuMC%2BiHQx6PieNNwbAPcZ7XD97HU5y%2Fc4We32j%2FwAeoaTw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3956cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":3442,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-11T12:54:34.386398Z","times_seen":34729,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/dot.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.640Z","timestamp":1791565127640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/dot.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-8ea\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRIanQLi43meY48HTV2JBM0RJhfalEeCbolOqi8YfxKCWs04Ca8NUQ8QAcEURQo3QNOz9c5M3g3X0nF6bb0EE4ldfxPjQ8tLVZNEf157L1BBPLinXCFJdzZB1RbjAw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc4256cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2282,"size_decoded":3091,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"f5717cc1fa73afe38aef387f0fded5b7","sha1":"2809623674458258574eb3c497cead120cc46e55","sha256":"ee1cbdf847756057f4bb5c51f6ab10e11a5b7156063cef86c22aef93783a64d3","sha512":"607fb1652211e89f5aa4da5d6ba26f1832e65468fab1da759020fc5c05437d0a05b7e298828846c45edda1d565f1b8fc0d1272f8b78f28301a273977ad221f77","ssdeep":"","tlshash":"47415bfaf3f5c4919519fd29d6a98480a23242bb70db305e4b1a70ab2374183a3a13cc","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-10-09T16:59:25.63513Z","times_seen":182,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/5f87397132a8b02.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.635Z","timestamp":1791565127635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-998\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzbTtjlZwunGEqkC1wytgE2uhn%2BhXEdSE135opVFH0VCsFwhYxg4tf2uiVXVkkGGN6%2B%2BwGnyp%2Fj8IlP3%2FON4hUmf4rTZVuZspOD%2BK6HgW7AH2V%2FMemQCIXmAolyeGw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc3e56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":3224,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-11T12:54:34.585291Z","times_seen":20213,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/1613790589852490.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.637Z","timestamp":1791565127637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/1613790589852490.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-8fc\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CD49rmJSlo%2FL%2B%2FJeYoALJMAsCg1%2FPqURL1GaK3sLmRzHG0K7STsGwqG6Xu24tLkL1miKS9A4QKEiDgQ7WOTokjAQUoVWtsno7zzpua1V8o0ylEPtYe5LfKO6cRN8A%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc3f56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2300,"size_decoded":3043,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"520c333ff05d61f58c093f2e32284dc6","sha1":"c60499a44ca91249f97e7b25aa39bd18c1b30ba0","sha256":"878feffbaf7756e96d790ba5cd9a087d44acf34496ae18e13b1147e48750687a","sha512":"12ceac8f836f1c14cd776cab284653c886e3cfde2f921a79881ffdd7900346bb28fd6e7afc287d3cd077e8db0b39164abb4e4e90796e6ddb0a7f2e9bd9a51d75","ssdeep":"","tlshash":"9b4119ca2567ee31c09383890d5a7b8074baff2971b0490eaaf4f55c7a3678247d9007","first_seen":"2023-05-31T10:27:17Z","last_seen":"2026-10-09T16:59:25.645588Z","times_seen":121,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/ada.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.639Z","timestamp":1791565127639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/ada.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-51b\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BdqoLLK00RcnWgRF588nIniNzKxFV%2FX6o%2FAjMnO7p6YjDNhl9XIeM9XUeARwX8WmjnLRNNo5UeXyvUO0g6PjJaZlgkGwh9WgPQQzxavQw%2FB6yQ34cFL1mXDr%2FCjfg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc4156cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1307,"size_decoded":2126,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4119a4119257947d75974ee50258b121","sha1":"3485b77d3dd2df3d105f88462a0baaa1f79b3e13","sha256":"689f4313c40e98326ad30bdd24ceb7bd273b32cc0c080ef1528d425937bdeb95","sha512":"6238658ee4380acdc610ca1786d13b3a0b8265a5e32514690547a0cd9d9db1fb940dde7c9170c71d5e887ae715fe6b4b85ca9712b216a0661deb749091c24d85","ssdeep":"","tlshash":"7f2186a6c2869b1fd97ba12a87e6c185ac972145a942235cf60448cd30a814cf9d165b","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-10-09T17:15:27.991313Z","times_seen":623,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/sui.svg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.643Z","timestamp":1791565127643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/sui.svg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-60b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExfOahwF%2FKGAVXJiLPFfutFlIFrLh8Axi9mYoAhE%2Bkv9CxcAAQFeXuXlD2TnPelqlhfNJRDvL6yM7isG62kC0e8GighH4vv8TkoC7VMyqYD93mprFsGCJ2V5%2BPLTyw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc4456cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1547,"size_decoded":1541,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ecd0b491a611abad73010840bc6cfff","sha1":"b8067340a437daa9fcf8bac9e718d5955e3049ac","sha256":"7c02270653440d5120b208cd79c2778ebe629b3d3528df0c61cbfa00b97a43a2","sha512":"b307646522b4518266e8960820e34eea4c4a27fa230f69ad0bd0b2b15b330fcf03500654e1913303a62ba7d5378a000329b6c08d31428854dac293aa00c9afd7","ssdeep":"","tlshash":"be3123ad279df57a8400eb38824b14703ad37cd66b05d43c67f42e5ada1905f26a168b","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-10-09T16:59:25.648029Z","times_seen":153,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:58:44.454Z","timestamp":1791565124454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fz7yrG0e4%2BrsqO%2BBh1Ushz3d5aUiu3mmHHLWatSgaBAyf4OazGk8S081%2BmivTTPsh5jid4Rq40IFO9Hb%2Brt55i7NRYEZvozOVUlEM%2F1LXuElRrtUE1O%2BuMURBB6htA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47eee8c291056cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]}],"data":{"size":205305,"size_decoded":33317,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1002)","md5":"a61c52157f9479fdf7cdb51612ed1e4c","sha1":"a988eebd24d3da63f1aee1267481283411d6837a","sha256":"b8ea5555945c3f35b0a1e27ca67a28f96d6a92a259667946f3843337ab100e4b","sha512":"5d97b8a97ac5af6ebed4895b6ad62f14c4317f3d1fd73e8f6de688a054c351e9b7a1d705edb7773eb2b5355c5ffcf9f972fa05384127257a4b234f929b7fec04","ssdeep":"3072:R5UshHqKuDIZ7xhMLeq7TB7rTSHrzjP6wUiY:vUshHqKuDIZ7xhMLnx7rT+UiY","tlshash":"2a149558aaf6143a102390e69bf5474afaf5d007c24ac9193aac47906fc3d64e4737fd","first_seen":"2026-10-09T16:30:08.800791Z","last_seen":"2026-10-09T16:59:25.648974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2570,"timings":{"blocked":-1,"dns":32,"connect":19,"send":0,"wait":2474,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.596Z","timestamp":1791565127596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-2f0fa\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMlN9k7IVNmtug%2Fv2cxvQ8Bkt3reByaHQIEaZMPNWK555Ub3jOwJtdL%2FS4nB9oj3cEv61M%2FaGhwOI%2Fj5g1GbBnrC3bC%2F5Oa%2BQxonqw3GYfbkXNI1cv97vZXzzCOXuw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47eee9f7c1b56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192762,"size_decoded":27807,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"ff1641c2781828ecf077fa5379c9a340","sha1":"4eef60a39069690497f3022a6410999e2eb6c0b1","sha256":"5419bfc12620e859e12383d8e33fffde35449616d129ba3cc199f4730f6c040e","sha512":"c8681ad05d9131e38cddf7328493fb7b1a67ab822e77ce59de0049f2ffa5d53d86dd288f1336b17b32259ff4b44b897eefdfc82ff89314dade5bfdb10bc06709","ssdeep":"1536:xQMFA+QbGwz48MIEtQ12c2Jsj+aCHYAVmJz600I40Yw:xQMeAVmJz600I40Yw","tlshash":"b51492a7f581201ee493c10995d2bffd057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2026-10-09T16:30:08.911164Z","last_seen":"2026-10-09T16:59:25.651181Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/bootstrap5Slide/style.css","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.597Z","timestamp":1791565127597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\npriority: u=2,i=?0\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6ac63fbb-24d\"\r\nage: 2161\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1WBOtOtFvxJeCxCs2yiw%2BH7%2BcjZxW6W9paOH27gxmuJtMfXfbmytPpq92Irux2NF%2FACfRPB%2FYh2hePamnNuuCWNqHeLcJFWZb393C3oS1QhN5%2FoMBSffgfcSd78eg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47eee9f7c1c56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":955,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-11T08:34:03.816135Z","times_seen":8591,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Upload/public/68960ff2d77da.jpg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.627Z","timestamp":1791565127627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Upload/public/68960ff2d77da.jpg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-85fd\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BuoYPjVnq2DtOYRIf1bELggSYLqLciYUHk9Ik0O2peckaPIecTXAd0synUJLfIc2nLwaVhvuIN3iB3R2uTXzYiuk6qAEPCZIgWgcZLsyLvbvkP%2BqsAgjNJlKHVLvzw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3556cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34301,"size_decoded":33179,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 572x298, components 3","md5":"7c48ab5dfbb0ab353ef8aa9e1587e692","sha1":"5d2aff2dbc3b464563edfa34ad74c7e06f0c98d8","sha256":"33e83a63bd6a239feef8e198fcc714b90578de409a21b8bedd6d224533bea111","sha512":"33a9c1437f78385fac3aa5198733f7f4cc5f657e339fb849867624f8b73f282be7ff017f8611106c2fa7ea95ccce4bd0f1b9b32983a484be79ad6fffdf3f9e53","ssdeep":"768:xHcVtYNBg1JiAoGBSA4bh3BUG96C1z1KeCXJByU1v+0qpV090:t1oJiRGiOG9MdXJoU1v+RpVX","tlshash":"e3f2f1d22ddec171fcb89eba8c7693b4223b34a3e57deb8735c5a86e77850076824105","first_seen":"2026-10-09T16:30:08.792115Z","last_seen":"2026-10-09T16:59:25.653647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Upload/public/68960ff78b5da.jpg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.629Z","timestamp":1791565127629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Upload/public/68960ff78b5da.jpg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-7a26\"\r\nexpires: Sun, 08 Nov 2026 16:22:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2162\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNZ%2BRKA8SQ4F03y8Wwc9TywnycL%2BH%2FfOfmuxNv84vG4o9DKL%2Bi1%2BWagcZcbbWIAazd%2FeZZjc1wleZYVXD%2F7hmaxq3KU0G%2BqY1D5UQ4tSTPfHykkwoSpjVh4ttTgfww%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3756cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31270,"size_decoded":30251,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 572x298, components 3","md5":"b2df4fcad4efc16732fddea8f8a2d5bf","sha1":"417f87e69691205120875ad823922960561ffa9e","sha256":"eb0aec6981069a5251dac4e87506b935ee9027d24e897795504b62ee11fccfe2","sha512":"226d136c79c54db47c99d5d736674cce0ea4605212e109843424e7b89ffcb8bb302a13e9c557d085edb58ffdf77e29fc92dcd9d070a0d68e8cf6d9cf471d1d61","ssdeep":"768:ZBMBvjBykgb5z5anRnXMUTdlJ/kT9m62OxsT7hSMw:ZBMBA9B5aRn3d//NIm7hPw","tlshash":"37e2cf75c5300486cd152e7f246fce944b3a26f5b978b96ca6d4982b3d2c6189ce4a38","first_seen":"2026-10-09T16:30:08.939817Z","last_seen":"2026-10-09T16:59:25.655495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/xaut.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.647Z","timestamp":1791565127647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/xaut.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-88e\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLJZJWWAtcBJaHpSWs%2Fo9UFHfmBi19OTFW8g5XxgQiLtmquSugw6NmLihyNlNfDfmkRrH1aWer8YWL0wWMIGRDJrrwt4VV8aOLIITRla0mzAsxv9%2FpJ125fikpMRWA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fcc4a56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":3003,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2ee365572d0793e2b49ba34b52c4c96c","sha1":"0716b5dfd27eb9b6df14953eb31c6e3a667b916b","sha256":"b12fc5e4f4cc6118133d325a17efd91ebdbad677eb7e958ce202a8ac373fb447","sha512":"d05f7890f3b8cf403eecdfdd1618ddf6455266d26bf26af5cd3280998b1a5e26af7cbc7fbe7a9a44d0a4e3e6b35e0ea4447c954e75185e8c8dc59dec55330ecf","ssdeep":"","tlshash":"40413cd9ce2dcda9df9c5bfe1623038398ed09a0157af256946da8ab50e848023c1b12","first_seen":"2026-10-09T16:30:08.617501Z","last_seen":"2026-10-09T16:59:25.658046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/js/pako.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.608Z","timestamp":1791565127608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/js/pako.min.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-b3a4\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESdJ0u0j%2BROqVz%2FYAjzkS%2Fey93PjoV20nh3dYOepwihkwmI2U0D8mcYGrPyT068RKAFyyj019XWk6JH2SOm9yOL2bUY7evcllUeXoKXY1vNKi0BpA%2BR6IDZcCOV%2BpA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eee9f8c2656cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45988,"size_decoded":15137,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45987)","md5":"64413eda72405dd1d28bbb64d900c778","sha1":"6086b751c4f4c90bbd0521b6bfe5279fd4eb55da","sha256":"29cfa0542b9864b6640cfdcc8f15b184db6431b532db2702a3ce97e5f2a7fc1c","sha512":"7ae59cfd0bfc2a9d026d35f533e43706f532a0e6aaf40bb9d134fbbf3dcc15fe6f7abdfdc9babacd5f919e00d8f1e37c0084058a0c63c18bfa8e1a0fe78eaf7d","ssdeep":"768:7feBUDB3FA8/nVPg0kKWslV7hF/PGjMhuAEIzg49n3cG:zeG/9hF/+jZAEI0O3cG","tlshash":"1a23f6a630f651a82be118d8909b2b96217051326c0519f9e378dde43cb4dcfe17fa7e","first_seen":"2023-03-07T12:10:43Z","last_seen":"2026-10-09T16:59:25.659894Z","times_seen":3813,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.614Z","timestamp":1791565127614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbb-1339c\"\r\nexpires: Sat, 10 Oct 2026 04:22:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2162\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgPdWziuIYglw3nYA1HBxH6iTYLZTdSWpCmddxR2d0zib1pWewBj4XnXS0svyqgpCPrrlNyimavzyYigurH4FJb2APZaFSuoO684SeWhwzxe3PpSGsEidT3fZcSmEQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eee9f8c2b56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78748,"size_decoded":23493,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-10-11T11:36:39.196571Z","times_seen":10528,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.615Z","timestamp":1791565127615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 12:48:59 GMT\r\npriority: u=3,i=?0\r\nexpires: Sat, 10 Oct 2026 04:22:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: W/\"6ac63fbb-12a\"\r\nage: 2163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTV5wgytGIfdSondeRCjbPiR5HBg9UswBxaqCOt9o2HcS7qguw3Nja9aM9%2FHSMFjpiWbme%2F9WCjtd3jr1qtlpMG7oT9BSBhBEWkwgKeAHJT4ekXW4%2FhmOaAm4i8fYw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47eee9f9c2e56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":990,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-11T08:34:05.276864Z","times_seen":8603,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Upload/public/68960ff9e1b5d.jpg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.630Z","timestamp":1791565127630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Upload/public/68960ff9e1b5d.jpg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-8a5a\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1IxEZdkKLuMdK3ZIrkZqnfX9f%2BszyiSozrGCIzEvIJ5E9gWfn8kDmhD5wBPUyh2LYeb0Y%2FwhZX7moCAfrHzW1PsD3TRkK6e3cHWRy0qrzsJWr1oqngvihR7HgtOtg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3856cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35418,"size_decoded":34304,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 572x298, components 3","md5":"acfedf951fc5956cd3065aac7d4dbb81","sha1":"ab812b3695fbc3f6e5bc48ea881d6611972f46ae","sha256":"32a17720422955bcb71c3b7b12315148e31fc5ca5e77fe69ec08aa44b89383b5","sha512":"8240332e4a82d38230da40e03337ef9b92951ba9d7cccc983a1fbe2e0d04ec1f63f5fe7befaa086454979937698f47ab4def5f46d6c4285dc70bb749bc623a07","ssdeep":"768:CdGSHvU6uUmn2LVMj0tr7uHSJ5R5JLoRrGbAJ/sSVQjfOJ:6rH8RUmncMjDHM5RAZGMJ/VM2J","tlshash":"e8f2e0a9d314b01bff3123f925a4b0b7dfae5e93952b53145aa40d4b390e60613947c3","first_seen":"2026-10-09T16:30:08.962169Z","last_seen":"2026-10-09T16:59:25.662926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/imgs/bg-green.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.905Z","timestamp":1791565127905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/imgs/bg-green.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-4ffc5\"\r\nexpires: Sun, 08 Nov 2026 16:22:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2158\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8KNRwXsRD%2B2ngTb83ec4wILPfBucqAJxaNGKYF%2BCu0txpW34tp55m%2FcO6TMdlNd4HKT49oPkltdatsw%2FVzDuA7S%2FRvMxSAZ2eRFu%2Bf1wpCrXxVQNNe2dvzIFrsVug%3D%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a47eeea16c9056cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327621,"size_decoded":328072,"mime_type":"image/png","magic":"PNG image data, 2231 x 2236, 8-bit colormap, non-interlaced","md5":"82239dce82b516f843ed05548b8c6cf7","sha1":"64080b476f18259d0dab54b61cc437a6b7c8da2a","sha256":"71c524c595a879f563801287bf8377adfb8b367644df19710627752b12c669da","sha512":"81800df8fbf4cb27222500b6fd981dc1dc3be0b11268af941ba11ea3670e05e8029b2a45e51ab6917f211fd0d6d1689f82fd0a04d6d3493c02b1a17c9b6a0981","ssdeep":"6144:k5X059Eukrui7tuJOsURAMvxuEcbDlYuhVbZoMEtMeKvivjDOZDeqBXphV3Dd:kR0rEugui7tuE1p2D2EtZnEyeLvjDOZZ","tlshash":"c0642342c35b00f7bdfb4fa379a65547fb77437a288184e867f87162904ba184f99421","first_seen":"2025-08-23T16:53:48.525562Z","last_seen":"2026-10-09T16:59:25.664941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.590Z","timestamp":1791565127590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 175995\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\nx-served-by: cache-fra-etou8220066-FRA, cache-bma-essb1270070-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":25649,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-10-11T08:34:04.480598Z","times_seen":29068,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":11,"receive":3,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/css/base.css","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.594Z","timestamp":1791565127594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-6822\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqD5dd9C53LCY7Kzg5289ephSWPsfUMIAEtES0TmGWOJKC4yvjMIzDnxoCcJAOLrGX14gUxAH0PDYE5%2FjoLWRIx8FlEFfu2sLs%2BBMxXQZFOgWRP1%2FnyRbzFRRRnLHg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47eee9f7c1856cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26658,"size_decoded":6800,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"a78958a76e55c903cbed87e2e9d45f29","sha1":"b71649b4d43a8a8eadcecd93e3d359e049db6fa9","sha256":"0dd8dba5e8ae989889b380ae71bcffbbf02b7db37d8b86f5b33da9f0eec5d313","sha512":"a21da890cae5a79237ba377e0bc8ccc9a3e9b20ba64846e878292a687dd42f719716d5bf4f1c7aca235d0d8c046666fedf5959632b655d08088962a357b0bb90","ssdeep":"384:rDDyOvNOjRmNi2RoLy6IbRiWcMFDwFxE7rvRnXEZ+JU/2h5hbTFRSEPe:WFcN3fFDwFxyEZ+JU/2h5hbTFRSEPe","tlshash":"17c265939ba30905b41bc4a81feadb55236d9057910fcebd3f853748cf4b29884b1bca","first_seen":"2026-10-09T16:30:08.640815Z","last_seen":"2026-10-09T16:59:25.667234Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Upload/public/68960ff4e3c1f.jpg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.628Z","timestamp":1791565127628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Upload/public/68960ff4e3c1f.jpg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-9cfa\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZjVxYOojZtJXPBntmyVusFAsCDy8rFqThFpT2fhF3Gmfx6b8RQ5ANwNGlMowg3lMG%2FalRoulxTLSZRfzfqvi8Yg3CEH%2BqyrodtXEZenD0F905gRA%2B9rEnqDgngVBA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3656cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40186,"size_decoded":39670,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 858x447, components 3","md5":"60ac0fe7363c8c9e527b15487d194c70","sha1":"60c9b9cb70747cbb9c7cea048052ad20edb04b7f","sha256":"5709cb3d1374ef1091d2bcae7e4e2ffb2f328a4be1e12264b0aa93a4eff63b7d","sha512":"0a2c9845b59cff7388d2aa22de147d0a16d1d60559f7deecc71ec02d80c6362920938e5c41333d64845a5c9b1d3b088402017dd289facbf8cabbc960ba6ac7f7","ssdeep":"768:Dm4ipzHT5/n0UYP9/qeRiX7ZkoMDoED8O7PkvhR9iDdcz+cV0wRM:kjl/0voNXzMR8OTOR9YdvcJ6","tlshash":"7003f1040546d9e1ebb50efc9183a492bebfbd7d4fc19c39be185335046f3216a1a617","first_seen":"2026-10-09T16:30:09.002968Z","last_seen":"2026-10-09T16:59:25.668871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.785Z","timestamp":1791565127785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Oct 2026 16:58:47 GMT\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"135c3c367321461fc8ffad224ab866d4","sha1":"fe5b0ec6761c73f5818846a5302294c43207371d","sha256":"e784dfecfe6b739c49b0b4a4bd837525eb881b0c2ba16ca403667bab1a2e974d","sha512":"a092bcb11e1aeea62738b99081e5a94532423cc8c2991383a1219da637a4530e880f1bf72eba312be0c17ecdf34c1e93364ee94e38cd394da03ec3d3486f233d","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+qaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkIkH0yXLkyLHbywkkhH","tlshash":"02b18891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2026-10-06T10:36:35.556162Z","last_seen":"2026-10-11T08:34:04.285281Z","times_seen":11,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Ajaxtrade/obtain_codes","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:56.144Z","timestamp":1791565136144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"POST /Ajaxtrade/obtain_codes HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2ZH6tE3fOWI9ZfpynlXHhn1ouQvthFV07hpwgc5C1mdy9fZlC1%2B2fmUh5WesT7MpdkT2%2BakZJVMWxxdbKySfmyIlqVnvl%2F3iTx2NYZc%2BYmultryIY8Jrlv2dqygbQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eeed4e85556cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":967,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"255bde4686d2280b4b2f833ef7294215","sha1":"6eb0255ff6438d3bfff5cda8c4f4129d5eaae3ce","sha256":"b2e6d0925f4eb1f01109352c3f3c40b6d3d04ae0bccf894cb4d9cdd07348d9d1","sha512":"b6612d8f8efd24dd342d2446445d4c1442227797340ac8c9e01a753d36e5a4deeda3251bf267a08b5af9f7b776d995500627f2f95b5cf4506cfe0094080b5df6","ssdeep":"","tlshash":"95d0a9902e3c082618b2c3c3949a034db48ec0868044424a6ffecab8282c908ba65832","first_seen":"2026-10-09T16:59:25.628806Z","last_seen":"2026-10-09T16:59:25.628806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Ajaxtrade/obtain_codes","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xaudots.com/","date":"2026-10-09T16:59:00.148Z","timestamp":1791565140148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"POST /Ajaxtrade/obtain_codes HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:59:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwmLx7dzx7Yf5CBjNLwC6wQmlQoC5fVBFzFjXm8GzCJguBj091Nr7DqicNgf%2FO4zdzZyCvMYtHo19%2FhM1bYsCnLw3Cyo2p965ngr7InM7yxa17Ex3d2os%2BZYFPlwVQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eeeedee8656cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200,"size_decoded":965,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"255bde4686d2280b4b2f833ef7294215","sha1":"6eb0255ff6438d3bfff5cda8c4f4129d5eaae3ce","sha256":"b2e6d0925f4eb1f01109352c3f3c40b6d3d04ae0bccf894cb4d9cdd07348d9d1","sha512":"b6612d8f8efd24dd342d2446445d4c1442227797340ac8c9e01a753d36e5a4deeda3251bf267a08b5af9f7b776d995500627f2f95b5cf4506cfe0094080b5df6","ssdeep":"","tlshash":"95d0a9902e3c082618b2c3c3949a034db48ec0868044424a6ffecab8282c908ba65832","first_seen":"2026-10-09T16:59:25.628806Z","last_seen":"2026-10-09T16:59:25.628806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Public/Home/static/js/layer/layer.js","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.602Z","timestamp":1791565127602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 12:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac63fbc-4d83\"\r\nexpires: Sat, 10 Oct 2026 04:22:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFS0AbdqfD7zXSxl1VZ4nUtw8U9FQ95bphUfGL6tzl4xWwz4MC1mWNGL82XNv7h6s8CX8%2FuhZGVEGD7FgARTzWihc68IQZIWUBhyNjS9rTFxRXRQeEwu3qDrYwb8gg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eee9f8c2356cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":7766,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-11T08:34:04.339666Z","times_seen":16913,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/ape.svg","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.642Z","timestamp":1791565127642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/ape.svg HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-b6bc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1duhR0AQf8BUrAnX6eG3KVQjZkUYIsLVqzXzYOEB1nIfe7bfgCqRbDFKChzDU7jaCSGCKM54qFE2esy%2FEfpY2Ae9ab0GOu47gJHuxreBJKZ8a96WUZCwgNVPdduDQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fbc4356cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46780,"size_decoded":20575,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28ac5e12d502cf01a5b9df68676fbed4","sha1":"344a05736f261c784c89abdef361759c47cd6ef7","sha256":"3a037c67f3663e85c8728cdb41c21e3f581fb6bbf6fc9bd9819069453be679f4","sha512":"4476af8f21c76577830e176231b6c834348e177ad13cacf552114187b7da536ebb31db5792b38178c89d0cc00f7aa876ce5965d1b6dc8a0df5c1eed1090b19e3","ssdeep":"768:NPWAUi/ygH0XHRUK/oVxTCJGL8WvADQnew2nlJzNT3P6Z:EdFgH0B8fADakZyZ","tlshash":"fb23b4daa3b9a3f8f005f3fc825798313a572cf67a12d994c3a56d16e55100c0daacdb","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-10-09T16:59:25.673203Z","times_seen":237,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/Ajaxtrade/obtain_codes","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:52.083Z","timestamp":1791565132083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"POST /Ajaxtrade/obtain_codes HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://xaudots.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSzYGnPjQLlK3t3OwQoK3kO14Z0nfGOL7N5DLjrCgT9PFLdEmmrxJTAx5v818zUOLDqwRdf9uIGtvLzaJx43tN3ZyFRE0kJHYLjk1nBOUdfSXxh5uIjY%2FwlJcAwVag%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47eeebb89bd56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200,"size_decoded":961,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"255bde4686d2280b4b2f833ef7294215","sha1":"6eb0255ff6438d3bfff5cda8c4f4129d5eaae3ce","sha256":"b2e6d0925f4eb1f01109352c3f3c40b6d3d04ae0bccf894cb4d9cdd07348d9d1","sha512":"b6612d8f8efd24dd342d2446445d4c1442227797340ac8c9e01a753d36e5a4deeda3251bf267a08b5af9f7b776d995500627f2f95b5cf4506cfe0094080b5df6","ssdeep":"","tlshash":"95d0a9902e3c082618b2c3c3949a034db48ec0868044424a6ffecab8282c908ba65832","first_seen":"2026-10-09T16:59:25.628806Z","last_seen":"2026-10-09T16:59:25.628806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xaudots.com/xm/doge.png","fqdn":"xaudots.com","domain":"xaudots.com","tld":"com"},"ip":{"addr":"104.21.6.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xaudots.com/","date":"2026-10-09T16:58:47.634Z","timestamp":1791565127634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xaudots.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 12:10:20 GMT","end":"Tue, 05 Jan 2027 12:10:19 GMT"},"fingerprint":{"sha1":"37:9F:3B:80:87:40:09:89:31:36:AF:2D:61:34:62:0C:4B:19:EE:C0","sha256":"F5:5B:4D:D8:A8:A2:56:89:2D:2B:D6:B6:60:ED:E9:7A:F9:AE:32:F7:F1:04:E6:37:0D:97:39:38:D3:3D:BB:66"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: xaudots.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xaudots.com/\r\nCookie: PHPSESSID=0d2b5bjiccfonue1pi0kvb01b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d2b5bjiccfonue1pi0kvb01b3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Oct 2026 12:50:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac64029-838\"\r\nexpires: Sun, 08 Nov 2026 16:22:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2161\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEa3TvatbDTMQiLbgdZQJb%2FsC4xxQS2m%2BjiF4YUhsQnTGnFIkU1zMUuWZzdp2mNzB2RPsTd%2BhJZWkurAooLaAGJRRAseJfBVE4bwbHPetVpEof12gMciheuf1On8QQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47eee9fac3c56cb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2104,"size_decoded":2917,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-11T08:34:05.399736Z","times_seen":7836,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xaudots.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}