{"report_id":"3f7fe7f9-0661-451f-a914-b1bbe834810a","version":6,"status":"done","tags":[],"date":"2026-04-09T09:25:35Z","url":{"schema":"http","addr":"app.xpjqwxgz.top","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"title":"Download","dom":{"size":20696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14412)","md5":"6aea8ad440bcb2793e21d0852165ba4f","sha1":"48a0fe8a1225c6aa36112f42b53215085a3fa15a","sha256":"13297c718ae5e4a840582dffa57bdc04b708a6265d6b0c8cd6447acc4471db4d","sha512":"eac7f3a15a0916a69b1d52dbb3f995bd8176c75ff16eec0e05a3c51435ed7c365707aa999d92b6890d27aa5ac8b48c7672bd1c8d1937a2bd89ca65c7bf40d9a8","ssdeep":"384:UrSvGLQsOOm41wniDKJJNiJRJ0uuuTYihzdq:rEnbDKJJgJRJ0uuuTD5q","tlshash":"6492c6b1c2a45136460f07c9796d722e32b791affd03880cb56c8798dfd6e25dc21ada","dom_hash":"domhash93273e6ff4541f9344877d550538c950","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app.xpjqwxgz.top","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-14T09:25:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.xpjqwxgz.top","ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-19","domain_rank":0,"first_seen":"2026-04-09T09:25:36.123544Z","last_seen":"2026-04-09T09:25:36.123544Z","alert_count":29,"request_count":29,"received_data":1047402,"sent_data":13254,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d9fae00c30927890dcf485c840ea328","sha1":"13da4cfa0e4eb941133261e31d900f4948708677","sha256":"7d128c625ad955bc51c57030ad1131783545a9c4bc711d04111c12b208fcdbdb","sha512":"0e5696f91fd75fff4fdc40378ecfaeb846724221fd262b3a94a5904d2188ead6bc280ca4d740f6778c158b153aa4c9c4103b1bbec1589a11150962196c1104d8","ssdeep":"","tlshash":"f59002a522c25144c65232a4106e1c8d6166847014844a408080e4611ce6130615d49c","size":46,"data":"","first_seen":"2023-05-09T13:40:49Z","last_seen":"2026-04-09T09:26:17.374782Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/zh-hk.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a6562672a68559fc317e4b6e18919fda","sha1":"f79e053d3e48313a6352961572ca6cf916a6bf61","sha256":"0ac1370517bd0d025d7ce6b1a7346e6636a2b4b28d6dbd909d3772975395932e","sha512":"83d73690d41a987924e87797dce91bc111cfd39021bcab5603b84ce8a185ba0f366b21024fce293f41fde6b8dff3d194098f16defdcfdc8f10fa6be95a5268bd","ssdeep":"","tlshash":"dc51b6f442ac0858bf100785bdbc878c1820f5a74c1235acb25c99d42f5daaee0f56c9","size":2641,"data":"","first_seen":"2026-04-09T09:25:41.673547Z","last_seen":"2026-04-09T09:26:17.31682Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bd3e0ddacfc481c086f0f87f9561019e","sha1":"dd0134a59ab901987fec4c75a736588612e4ab0b","sha256":"59998f7b8f98e4a24198510aa898f5729d39aa3f96bcc9d2914f182634502a13","sha512":"bb9c477d51334db7ac6b58df72f668c8ca64163b4bb1e68e0f387cb653f1da180693627d8d2a2df58dba257ab69ad7a837ece7ec191aa9d1dbeb851711e69d94","ssdeep":"","tlshash":"049002de32e39510865b259414df189954a5aab114548984c05894a5bd66024a2a589e","size":57,"data":"","first_seen":"2026-03-25T14:18:58.846827Z","last_seen":"2026-04-09T09:26:17.373932Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9323995311361038c1d49b7b7996f139","sha1":"439e455773722587d66ae4c85050fcaba84501bc","sha256":"dcfdaef8bc591798f4f428f9f84e6e9e7eb7d3f1b6ce75db173dddcea3f19bbf","sha512":"0ade570edb40c261f5857de3ef191382f7b22cea356624052b4151664bd4e96319ac6c8096748fdaca6c5135c943b361f67456bc03b5120f807165bd01763028","ssdeep":"768:xLflRbSbDb5T5Rk2iWxb3b8T10T1Un+dT1I+0DLa9pG99IeCGp99IeCGsKeKQKhz:VlRbSbDb5T5Rk2iWxb3b8T10T1UnOT1A","tlshash":"4cc22200d5ad4412d4ee509bac5ba82db305e31a6261a884fecfc69cff7ed3b0b581d5","size":27684,"data":"","first_seen":"2026-03-25T14:18:58.738232Z","last_seen":"2026-04-09T09:26:17.398819Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/common.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db381bcc0d0de6b4857eebe1470d7a7e","sha1":"bf201be4fb728e2cb81c1298bafa1e677957fbec","sha256":"3b7e04dd999c089e5ccf38168b493c1214e27278928a963854e6c413503575f1","sha512":"da9a924705b7bf5fc6c1a174601c25852d7be2ad5533c936645c939d03893ccb69b15ad03b5055ae840bdd999ab76989adf0adbc63e4dd1ba9ecfb8c82263af5","ssdeep":"","tlshash":"53e0228c69fb6002002b3c6d698e90057176b01ba82d1e41b6ed4bd47fa103242b7e88","size":388,"data":"","first_seen":"2026-04-09T09:25:41.678455Z","last_seen":"2026-04-09T09:26:17.312915Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/hi-IN.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ef4dc3af64e41f89f8e25bc4509b64d","sha1":"2e1a280576f6fda37fc8425b79f5735ccb363399","sha256":"8dd0768767e16ae7bf1fac7c1214fd11bb2f1c0787b7ef88202b7de607f86f17","sha512":"e28cfabae97b34549cb5d80ddaccdec60352759e074c81c81428af4ea81afd1d35a472e838d9d61c16eee9c79ba6718d205f76b92deb3d1a5e7febb73a8ab792","ssdeep":"96:4GN4oB+3bAXeKPvqjba2Sy+talXp9klETVjMAza7yHkQmDHcP/iBt5EA3rAv+XN4:4GFeWeKPvEa2H9UAunrZE+KF2ajUKpT","tlshash":"1eb1599cd7bdf3a41cec3897b29c0c7b56a871726be4216368c4b3d65f08c7c50a52a2","size":5486,"data":"","first_seen":"2026-04-09T09:25:41.67461Z","last_seen":"2026-04-09T09:26:17.34205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3992f2222ed92f8f2beaf347d5a2cb43","sha1":"12859ec14af7ae335886a6c3496d3af98e4ccd08","sha256":"d5c18416529dd82ccb4d3a6a13e1860ddb71988def089c1fb0736d5f113d89a9","sha512":"4c4bb0a913ac0b7b0427b84662fddb3fdc8a8af0d80235039ae781217e6d0e5d3289d19c009c0d530a85cc0bbc4d92cfc455e708529d9d863a11aedecb02a36d","ssdeep":"","tlshash":"cca02280a2c322283ba30a8c00bb288800a08030228b0e00028280880ac2020a03a8ec","size":64,"data":"","first_seen":"2026-03-25T14:18:58.852659Z","last_seen":"2026-04-09T09:26:17.404032Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c23667a1bf643ecda59a0b2ecbe9e89","sha1":"abb55a7c16efa640b042c4b8c6a2d48ef15809f9","sha256":"e1042fef00340e04c106e5c5afe2b57ef9abb41d6c9833e4c51810d9eab8cc3c","sha512":"d852e0cf7aad74c1abfa4d279ead1c3257c0c4cd816f8d95f3323fca725730afdac3bec2646c30ff0b53d507ad28c03548b0f974f17a7968bdfc73565ac38a7d","ssdeep":"","tlshash":"9da022c833e30020ca8f008000ae08c820b0b23000088ec0c00088b0bc02020a2888cc","size":66,"data":"","first_seen":"2026-03-25T14:18:58.713251Z","last_seen":"2026-04-09T09:26:17.352916Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59dac782b0d48dc1a7c6001fa1bc3a08","sha1":"e9eb0def4350bef59b3e57a1cfb47ea82fb38d57","sha256":"77ce4764eec528b435fea91725d62f1df0dea271df7d3106441e0d18e39fa5b2","sha512":"afa391487245cffc5c0ea2eadbcb07b13cc5b05adbffbd6bdf1a95a8685721f4021536e17942da9e427622c7add9f4bc3bbfc38d311ccf162708a1d47b3fbaef","ssdeep":"","tlshash":"c4b0128c33e34091866f14e428077686a012b13c9859566cc044e06c5f3301030f5e8c","size":97,"data":"","first_seen":"2026-03-25T14:18:58.864036Z","last_seen":"2026-04-09T09:26:17.358109Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"903c75c7a32a6abbfcd620c9609709ff","sha1":"48394cb133df388060f885d63d89f62038285dfe","sha256":"bf5ed2ee7c01cb8d86ab70c69183376cb280b5f4bf3491b93e66164b6fd25171","sha512":"e1abb4814eb6872b5c2b717366d7b4d9245b31b8445f5ac76e60c662897264dac77489e763c7a74d6cf8b64bf9e992cdf69c89c5d70445a42340d199a76df29b","ssdeep":"","tlshash":"399004d531d35045d7f311f444775cc450344d715454cfdc4040d5511c55070d155cfc","size":46,"data":"","first_seen":"2026-03-25T14:18:58.835497Z","last_seen":"2026-04-09T09:25:41.699384Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/ja-JP.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e819e110e73d99145175c857c86c9cc8","sha1":"bbbd9825bc711bb09443c5d32502bb697fd9ea18","sha256":"b94316f4fb9b1e8b80482b97de21a5363266c50731e34479d03dcfff656ef9e3","sha512":"d41749116c69aaebf544d2fef724ecc8705574123e1252c1f15c527914058d258d08df18ed5875da574b132256ac4a1be8b63258f9e06a993f12e6de433d25e5","ssdeep":"","tlshash":"9a71fdfce3c8542a6d204556ad7d66807146fdebec42323db66cc0747f190aee9b06b8","size":3634,"data":"","first_seen":"2026-04-09T09:25:41.662491Z","last_seen":"2026-04-09T09:26:17.338241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/pt-BR.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6e2f5f730b19ab53cdbca386184904b2","sha1":"08b2a27525c070bcd6901a5080bbef4ea32b2160","sha256":"cb17f4d16c167030377b9cd9b9caab2ac687b0b2654c1ef64abf597dbd98b01e","sha512":"7280084d38d8b51154ca462ecbd1bd123199519a41cf29bef173b2a90e150d6eb57df85cd207147dd893ccf9065981942f1ab74fd4232e2ca43340747e1a97a5","ssdeep":"","tlshash":"a1615425569d08653a1003042a778b822144771bac16786ebfde46847fdf49ff1fbe1d","size":3276,"data":"","first_seen":"2026-04-09T09:25:41.683608Z","last_seen":"2026-04-09T09:26:17.32089Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"55682be4c1fe73cb16691330614a039f","sha1":"e46070f82e66bb5840982649ac2b8ca05eca6471","sha256":"fab8d64a046e5156409098af2a062f61cbf165cbc77678cb849c421c7e708400","sha512":"387a3c03589b3738cc04422a0d457e63ceb8f9a6f24a2fec8bd5a6c7d74161e42bc8f9f106e1299719f976fc77d46ad371af8a7b80000e2ccf1f0b59c70d2689","ssdeep":"","tlshash":"879002a565e2a400567e26d8005a18c4702444b09c888d90504498592c55520951d85c","size":53,"data":"","first_seen":"2026-03-25T14:18:58.825129Z","last_seen":"2026-04-09T09:26:17.396218Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"640a0acda93f7d90168da2bebb5e6552","sha1":"836c61df7f2f8db0a67ecf5024c1ad18fda838e2","sha256":"d9a2217079482fd882d31d82940fa402aae2236e3f45843bd8e905a66beb2a2e","sha512":"1757cf1fa1cf44fcd07513dcf7c3633fe5864dc71f84b39939b9b0ad99bde6d4221c18c5327ea0a3a98238a0e9f67309dcc343bc3a34aabefe390e33e9139ad6","ssdeep":"","tlshash":"1aa022c833fba220ebaf228800ae08c800e0f3300c080cc0c0008cb2bc02028e0e0ecc","size":70,"data":"","first_seen":"2026-03-25T14:18:58.827824Z","last_seen":"2026-04-09T09:26:17.363987Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/th-TH.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"23bcfbd909d363b1e62e60d3b3b1dd67","sha1":"066c6fc29760c24f15a0962273f9baf12774f3a0","sha256":"cb17be72ccaeb51fe6d2590acb2d86611525ffed78a08ea95a1bd4eed7a9b70c","sha512":"6b263e25dd3056ae8f90ee5737943f6d5f6b134f44a7bc6dfbb614a92b74884925489fdf463e67987cce80bc7752a40c1dde81264dafae28b1875645dbacf35c","ssdeep":"96:4g5u+p+5u+7wjs4RLpj4XDC6ESlD/XWQagmbFb4UsmFxD4pHQdwJ0mhuZCLsKLRA:4g5ub5ucwjs4RLpjWDC6EED/XWQagmbv","tlshash":"b0b135b3724689a0798c190b352d72841568bd963e73f8e075c9205ebbf870e8035efb","size":5326,"data":"","first_seen":"2026-04-09T09:25:41.701292Z","last_seen":"2026-04-09T09:26:17.364574Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/ko-KR.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d088223edfc0ff17ab9b30d2bb569789","sha1":"9f404819e1d6f32a4f655766a0de41ea53b3df9c","sha256":"0173f3fdfd7b3290f04c914a84affdfabcc1a6eb8e9d991e07b6ead35baaf774","sha512":"bedb7e06f0923a4b0767c7bbc6029678877a1167534a3908b56e8d94a9c946ec4c18019f79d73a3c9905357009984c8721c24d610436675b70ec5a6f5380d7fe","ssdeep":"","tlshash":"336120f12aae82d9295129016efc5a4551a1f3734f5330e8be48ce587f0c49f81f0db9","size":3236,"data":"","first_seen":"2026-04-09T09:25:41.688254Z","last_seen":"2026-04-09T09:26:17.31871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1299aafd0ab7ab5f1fb1f0ebcd38d2b","sha1":"53ea2eb6f90c3d796de6537a9aa928a4f9fb6ef6","sha256":"59039976bc8553caabdf579fe64f44239831d84826ead8a27fa9d8cbe1125ad3","sha512":"4ddcd134bc0dfeb0390a28cdbd0426a4817bc709e238e4bfe2e1b5f402b04df11808bb4888fef5e42abf6b238a50239394f32036d713b3d42654cdd00a1c9012","ssdeep":"","tlshash":"55a022c833fba220cbaf2288002f0cc800e0f330083a0cc0c0008cb2be02028e0e0ecc","size":70,"data":"","first_seen":"2026-03-25T14:18:58.812489Z","last_seen":"2026-04-09T09:26:17.392917Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"40c1b54704ad8f66bbe9377a4354afbc","sha1":"b978207d0c451b32dbf57a287691636e64ddb21a","sha256":"8a55132d205434039b6002f8afb30ca40c30c036f49007d73d65d85c8312f48d","sha512":"7c7fb2215ae2f8a374aa97f37becf7c67605eeffd3d120c802390e1ba85d4264cc5da2a69163047cf9640ff9847b57ff215c9318af647caf7997e79b11c2d26b","ssdeep":"","tlshash":"8390029521c25005465212a400ae1c84602a547024484a404080d45118a5020615d45c","size":40,"data":"","first_seen":"2023-05-09T13:40:49Z","last_seen":"2026-04-09T09:26:17.348707Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26faafc5dbb0b17fa684225bdd0ce27b","sha1":"b2c8255eac04991654014d3511497ffd5c8647bd","sha256":"7b5e768d67c7b8c4c881f0f72a9ae77b39ff45007e9c79fc11fc9a7036f3dc91","sha512":"2bba30c13c17c74fa1ed6ed7cce8676008e3989ea7c5b5519ec7d2211e910587ecd6606722a4b33c03f3560c135ab3670adad92d5b83754de5114b886f587f9d","ssdeep":"","tlshash":"2eb0928722a1400a4ec3397c9e8b2046216320ab142cca807e19af80bf8132b9a73788","size":121,"data":"","first_seen":"2026-03-25T14:18:58.878987Z","last_seen":"2026-04-09T09:26:17.37103Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/android.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a96c5eb8f9a0893f450fc7f987671b07","sha1":"5ead5504e466f34de9898c6e67b8f446c374d975","sha256":"078201472bdb31b98081fbea91b3844ba6e497b9ea03d1bbe2a69c16abfd7dc1","sha512":"fb687ae0a4a93756402b05cd4cc5fe003a8decd5f558a62ab48528d6a432c307c24d0a5b80aa3ea522f07f933f58e776e4119ded2f1e47567058c76759baae9c","ssdeep":"","tlshash":"4a01ac1a49f9a03629b3b12a4f0f6300321f4403444cee457bee8785afd2878d5619c7","size":709,"data":"","first_seen":"2026-04-09T09:25:41.685306Z","last_seen":"2026-04-09T09:26:17.315362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"16d8e9d5b1fdcd09ab6e1ccd33da4922","sha1":"65d3b7202796defa412a62b8fa7c71da733d7d3b","sha256":"da4c22709c3d99c3a5b4a1650da160303f26abee96314e1465e857c90b24a388","sha512":"6562e91d8ccb67c42aa37c9d7c9cd8d5847fe108603c036a54293b809168a643c0bb01a22c153dcad93d72a7f95047c6754b546ea74961a2640df73b1709d406","ssdeep":"","tlshash":"1190029e21e6994046662aa8015a1884642d48b5a49cca444854d55d6d77160615745e","size":57,"data":"","first_seen":"2026-03-25T14:18:58.867417Z","last_seen":"2026-04-09T09:26:17.378259Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ae60c74deb4d4b5f113dc6465c50c476","sha1":"275d39f17383a7a56c54cb2250eac3b9a21be0dd","sha256":"c93c644d53bbb4ad297e08edf541eafc1a02b8b70f47ae15afe3fed52d885b31","sha512":"57914a5a6284d1a69387df3d58b79fc7a696656eb3b6c5c4a06143b0d76a7738ecb370449ea075515584cf90aa26aa9dd8e4135a03e072c5e45cc1d474cef675","ssdeep":"","tlshash":"f6a0228832c32080c20f8082000b888000a2a220000008c0c000c0e0ac0203028e088c","size":59,"data":"","first_seen":"2026-03-25T14:18:58.752176Z","last_seen":"2026-04-09T09:26:17.405148Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"13700e7cca6b6a6c4b1cab1ec903df7e","sha1":"b386441cf99f5708bf25c6ac0fefdc973a549e23","sha256":"a8625846758657f70ee97fbe6ef2b2c434869edf1a322f6e9ae9fcdfca28d96c","sha512":"0a7b1889576a1b012011ecdf234b11998bb7c3746b40e16c5afca7fb3e1d7939ab690000844bec8c89b09c300e455942886d7310499f1ed11d73768dcadc7e0c","ssdeep":"","tlshash":"c0a022c83be38020ca8f0280003e08c800a0b3b0082088c8c08088b2bc022a8a0a08fc","size":69,"data":"","first_seen":"2026-03-25T14:18:58.87075Z","last_seen":"2026-04-09T09:26:17.362767Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8050ae7a69f40fb1863c9ed00f6ee721","sha1":"f73fe36ec8476660750d9873630bcf81ff00a5ad","sha256":"8253eb897f83f6ae828ade5573d9e979c45fad13421a1b0d665d02f1d673e18b","sha512":"93c8a1deb06400d9faa9eeef26fadb17a51d48c16930d9665462bd7b8b131353f3901834297a590c3b013b2e597f632dfd81245a1afe341338616fb32c0c1ac8","ssdeep":"","tlshash":"6ea022c833f30030ca8f0080002e0cc820b0ba3000088ec0c00888b0be02020a2888cc","size":66,"data":"","first_seen":"2026-03-25T14:18:58.872037Z","last_seen":"2026-04-09T09:26:17.369228Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d03ea2875f54ef97f254574cc1de6d4e","sha1":"c3f25d491fee996d45322b3daf2b4fde59025679","sha256":"8b48126e7ee4df14fcfb45de7104619bd48054d49f0f943db765a7be7abe3ff3","sha512":"6c250624ebbf9571595ae9e63a69da01e9b3340b7a97f997bf99d96becf8efac2f2999ed153394bac92b35cc65c2a41088cac98cfca78494f8f444a353f6a0a9","ssdeep":"","tlshash":"18a022c833fba220cbaf2288002e08cc00e0f330080808c0c0008cb3bc02028e0e0ecc","size":70,"data":"","first_seen":"2026-03-25T14:18:58.877311Z","last_seen":"2026-04-09T09:26:17.3776Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a1685bb527d0efa5bbc2aca04d701a66","sha1":"d6578018aa740bc3adc32050fe9f0b217d8de075","sha256":"11df66e8754d2475aaacb7cea90a5b338e319fb378175779a1d69b494f49a9a7","sha512":"d2e9aa778502a9a505ab9fe97be59458d759e907ff8b5d6b218dc6f8c1eb3651f140226e92aa969508e83efce1236c3478b0a5cf46c227b0a469867ead3636a5","ssdeep":"","tlshash":"01902280aac222082f0220a800a2088800200030220b8f802080a0222a0202000300cc","size":57,"data":"","first_seen":"2026-03-25T14:18:58.8176Z","last_seen":"2026-04-09T09:25:41.713154Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2ae05031730998ce75a33436e301e08","sha1":"2024874e21ba450ca23954bf8b4ef116a3e6dc7e","sha256":"842bbe32cd64901e808d0d53c75a9a895b3cb7a61bd323110fd9583b77824d1d","sha512":"fcbb70b64c260e98506d8c23c5a392441415a0b7f8f8e8401b0b50c53f555135e3a0885f91c8337650d7d9fdb7c44384f7a71b1b58fa1dce93fb46c9382ed8ac","ssdeep":"","tlshash":"45c0128a22a0400a0aca28289e4f3002346300ea142cc5c19a81af907f6231f8ab3bc8","size":165,"data":"","first_seen":"2026-03-25T14:18:58.702299Z","last_seen":"2026-04-09T09:26:17.356661Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/vue.global.min.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c08da89463e7e2421368971eed291e5e","sha1":"8b80b277b6d9b09532f053803c3abeb76143de9e","sha256":"9bbbeadadaebed9f13b421ebbb925b4b1209fb552a877318add7b7513d87608a","sha512":"66e0cf08aba42fd26b672e833c3cb98cb79f9cbf8a54546cc815ffd63ff74a03799bc248503aa58188aec41a0c4ac95886df351829fe98e2eddb1c312dff4502","ssdeep":"3072:H0RSBLV1K6p2t4W4Z8oAfE9NZ6wn38Gl9/+eQvRvpIh9BP:H0GA6p2t4W4io8Ebn/l4RvGP","tlshash":"eb1439a53181b03217da15e250bb0016f33a1925380984e8b5bde8df2d7695e61fffbe","size":194340,"data":"","first_seen":"2024-03-30T23:24:54Z","last_seen":"2026-04-09T09:26:17.32887Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"65d33536160efc436eae0236f273cf09","sha1":"58ed12220d1ffee08ac8e0db8866448bf3c65f50","sha256":"75972d55243a5ee6b2d62d4f72165a8403780f5a5a2b03e02a9f069e504d6d28","sha512":"afb3d98f74ae477d76cf66aae03f056c0764b2c64afaeb16a93046e247ae4330d90ddcef7704fde97f2f298ade45f5e84c0d21f1f638f5b4157726e7ce8c3704","ssdeep":"","tlshash":"7190029521e25410467636dc00562884e02484b194588d504040d46a2c55160612549c","size":50,"data":"","first_seen":"2026-03-25T14:18:58.857564Z","last_seen":"2026-04-09T09:26:17.393646Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"40e8e10a1c6cc413931e8dff31a7b51c","sha1":"c21c912e89d008d99161b2595a8ac30b71d1c2ea","sha256":"d6e69dd8e4f77799ff1f87dc0d4cf87fc54d87b670558eee0c651dba9551ca77","sha512":"ee63c921a0464d11757846b4338d9ac0aa353b6681341c97221449b432254dd276cf771ae9d4ffcae5097df4907c1214f0c0940d54c85d8885125db831139de2","ssdeep":"","tlshash":"a590029531c290505e521294849b1884a025487014444a4050c2d4521c5a420929649d","size":47,"data":"","first_seen":"2026-03-25T14:18:58.766767Z","last_seen":"2026-04-09T09:26:17.367142Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af20df8f7164fe136b17511afe884dde","sha1":"d8b176a6c9aefa152476ff851d8f3882578f4576","sha256":"e48bec841bccf93ace9f0a1ff37ec437e55881bb4c5449f581bfa39ed59e4352","sha512":"4819c0cff905070e7769a278a7a3eae7ca098854e8dd92c3de5c305708179a4b93fe28ce81b3d9c37407d44ccc9917d09f47f99c310a24423f38ad1aea627eb7","ssdeep":"","tlshash":"48a022c833e30020ca8f0080002e08c800a0b230000008c0c00088a0bc02020a0888ec","size":61,"data":"","first_seen":"2026-03-25T14:18:58.866076Z","last_seen":"2026-04-09T09:26:17.380162Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9005f5e979a497565325439cc41cfec1","sha1":"c0766c5f607799f261395c2d297785ce24b0f20f","sha256":"59e6b7369e682d03ed228a60ec2e2b9d81ba096b3e62b3ea9c96ad480806c42f","sha512":"eadc882cf0faa93d65cc83efefed0297c1ce0290c21b35fd28e0c1b50de071d237d8af3e8120856257957fd4008889a411f7ca565659f3311bc7f8cb452dab32","ssdeep":"","tlshash":"889002a522e2540046a627ec045618c4b02484b055988940404594591c65120911645c","size":48,"data":"","first_seen":"2026-03-25T14:18:58.875954Z","last_seen":"2026-04-09T09:26:17.409856Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8ae1b25bd4bc427fca4af9ad59e0ba20","sha1":"6deba79b9b49d9a951aea79ec305676c5bf926f9","sha256":"24c1e25ab719008ba27c1e12df2a0c0e48b59cb43e4c365e5255a5f25e8155b7","sha512":"b383a4785d2856b56f8ff20c2fc63dc4c577ffe7093506e42d17da1991adc25574b25d074b40dde967a9005876a58f5528a54e6ce116b328785fb763e930bf65","ssdeep":"","tlshash":"4e8004d531c75000475311d500571dc45034457014444d404450d4515c55030513557c","size":36,"data":"","first_seen":"2025-06-19T18:27:59.950927Z","last_seen":"2026-04-09T09:26:17.351354Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d9fae00c30927890dcf485c840ea328","sha1":"13da4cfa0e4eb941133261e31d900f4948708677","sha256":"7d128c625ad955bc51c57030ad1131783545a9c4bc711d04111c12b208fcdbdb","sha512":"0e5696f91fd75fff4fdc40378ecfaeb846724221fd262b3a94a5904d2188ead6bc280ca4d740f6778c158b153aa4c9c4103b1bbec1589a11150962196c1104d8","ssdeep":"","tlshash":"f59002a522c25144c65232a4106e1c8d6166847014844a408080e4611ce6130615d49c","size":46,"data":"","first_seen":"2023-05-09T13:40:49Z","last_seen":"2026-04-09T09:26:17.374782Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ba4df649be61bcee4d5faeeec8e0ea6","sha1":"6f90d479193f6d974fe85af7f14247a9e06c0748","sha256":"fa310e5cc4b6e6ec4a5143caf257187d34d561a0d117d7c5d5b73bb15c09b8f3","sha512":"237e6cac11e8a0c30b150e8172b157233b654bab12785c285ab2c9d15a52c771552c35b9c91829f7bd119c555aa621abba5afc6b87801e03c10fdbf24f10a6c1","ssdeep":"","tlshash":"9990029921c3e0454a931595045e1888513c5960345d4ac4416494655b7a16456758ac","size":52,"data":"","first_seen":"2026-03-25T14:18:58.850812Z","last_seen":"2026-04-09T09:25:41.71975Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e4e321d33ac6642b37eccaf7d7a2fd33","sha1":"3669a8d2e7da592d70481721730ed10532c4bea7","sha256":"d1c798e54477c94723c66312ad890e09a0110f5c3fcff80f2feb1e16be96833f","sha512":"5c449b19873d163c6d72c869549b3cbd851a0716c374f511dbce6d5af93131425f61641659f75cb1ab8a009d5dbe16a8e116daa416cb8c62c42fe771189ca5cf","ssdeep":"","tlshash":"fc9002a522c65140865231940156188d60689470548449408080e4a91ca6130516649c","size":45,"data":"","first_seen":"2023-04-16T08:22:18Z","last_seen":"2026-04-09T09:26:17.394601Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9a1caf9b0b014c33238042e4cfddb650","sha1":"c0a94c359b57d700a8167d1c29900475f7d75199","sha256":"7f24fd4017096b0d8d263044d2f6ad1c839c698f9136684fbaf377e13bd78821","sha512":"ad3a3bd9806fe089dfa7e15d16a9eff8b7053192f00912da4425b38b5738a481e4de0c4053866eeddbd02fdd5443b21d567aee278bf384567bf2de7bb35a589d","ssdeep":"","tlshash":"2790029932d39154d65b15a4149e18d554a4ba6114944dc8c14494a1ac56120719589c","size":56,"data":"","first_seen":"2026-03-25T14:18:58.731623Z","last_seen":"2026-04-09T09:26:17.400111Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4146643069396e5d8bd092284923dac0","sha1":"3d60cd93287015111225afe68d0cd9647e6ddba8","sha256":"ea2d33984eacfe5c383ed456e06b20049b5d9a2ab427fd3c966f9d9434273c36","sha512":"f2c8d15f56135facbd187bb59bdc4a8c50a763766ce6f7588de5b52e4c19c25b506532a0c76b14bb0906b32a7acbb16e8cd97a9c73e680d978528c47e95d984a","ssdeep":"","tlshash":"bd90029921c250245f97169d086f18846125547018894e4141c1d4955ed6120a5a69ed","size":56,"data":"","first_seen":"2026-03-25T14:18:58.874661Z","last_seen":"2026-04-09T09:26:17.406854Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d9fae00c30927890dcf485c840ea328","sha1":"13da4cfa0e4eb941133261e31d900f4948708677","sha256":"7d128c625ad955bc51c57030ad1131783545a9c4bc711d04111c12b208fcdbdb","sha512":"0e5696f91fd75fff4fdc40378ecfaeb846724221fd262b3a94a5904d2188ead6bc280ca4d740f6778c158b153aa4c9c4103b1bbec1589a11150962196c1104d8","ssdeep":"","tlshash":"f59002a522c25144c65232a4106e1c8d6166847014844a408080e4611ce6130615d49c","size":46,"data":"","first_seen":"2023-05-09T13:40:49Z","last_seen":"2026-04-09T09:26:17.374782Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d93b614a1838bb60efa2af8d9d19140","sha1":"c1a98d5fa5d34de1393825d15ed71505b7f9f5d0","sha256":"d8ce304ec99c74b555e79249d1c07b3714696f27cef27376159be8da4e0ade0e","sha512":"1e5768364d7879fd97b04df8f1c62f5f5ddd5ecf3d0465efa2a90072d8496c83d39b6ce8336e8131485ddc1d69263f53ea273dce53004e54b747ac55aa2e447d","ssdeep":"","tlshash":"46a022c833fba220ebbf2288002e08cc00e0f330080808c0c0008cf2bc02038e0e0ecc","size":70,"data":"","first_seen":"2026-03-25T14:18:58.829936Z","last_seen":"2026-04-09T09:26:17.376244Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9a1caf9b0b014c33238042e4cfddb650","sha1":"c0a94c359b57d700a8167d1c29900475f7d75199","sha256":"7f24fd4017096b0d8d263044d2f6ad1c839c698f9136684fbaf377e13bd78821","sha512":"ad3a3bd9806fe089dfa7e15d16a9eff8b7053192f00912da4425b38b5738a481e4de0c4053866eeddbd02fdd5443b21d567aee278bf384567bf2de7bb35a589d","ssdeep":"","tlshash":"2790029932d39154d65b15a4149e18d554a4ba6114944dc8c14494a1ac56120719589c","size":56,"data":"","first_seen":"2026-03-25T14:18:58.731623Z","last_seen":"2026-04-09T09:26:17.400111Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76ba957bdc58d658767668a0710a3a34","sha1":"2f0d4a9fe3451f94c91ecebf3b9dc15af035e52f","sha256":"b5da1ac543c74eba368fad3a5bdbc4c96a2c2b6df04f847ef701205946e721a0","sha512":"1741f9f4a4da6890439d0c96c5e6ee6dfeba09cafd078173bcf81c52a6f491a02e9d2f59c67cfac2bd04741d805669bcda394c6d5db683355b6476f626bfb227","ssdeep":"","tlshash":"9d90029561e254005666269c00562888b06484b098588d54c05098692c66120515545c","size":50,"data":"","first_seen":"2026-03-25T14:18:58.754118Z","last_seen":"2026-04-09T09:26:17.36546Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7acc7d32407bbb1b10edde910cd6291f","sha1":"bdc78e2e1b24b58e7468fa788db0360528f029a8","sha256":"39a964138cfef2b314e2f96332013d43b49727cab06a56ea0573d8f07073cf58","sha512":"9ddbbb5f51f51543b5ff7586cca556a235a065e76bd44e9815c7eb2faffe633633df98b71fc07e196f691e4d25b6ce23cc5ccefa8b1f8cfaa0d25ef837fe7f6a","ssdeep":"","tlshash":"e59002d522e75400467626d8105a1c84a13544b164488a545450945d1c55130511649c","size":48,"data":"","first_seen":"2026-03-25T14:18:58.742124Z","last_seen":"2026-04-09T09:26:17.382164Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"84353763c03f8ff99d454023a49282c2","sha1":"48fe9fe9bdf8c788e60b54876ddfba942ebf8d9e","sha256":"f974977f74296c49e469920c2cc20f050d505c0dc193eec0acef7816cbd845a8","sha512":"39350a16757c8680a95c520dc960cf75fb44bf7262ba970e833d3513be2996bed74692ee9505eafb04bf7aada0ff806f2d365149d27a3bd746c5537aa4720b80","ssdeep":"","tlshash":"ac90029561f354088a662b9c13572894e0a485f0d4588d404040a8692c55220611a49d","size":53,"data":"","first_seen":"2026-03-25T14:18:58.757395Z","last_seen":"2026-04-09T09:26:17.408825Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/en-us.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"852d55676c3b2b8556770217a17535fe","sha1":"68981abbccdc9146582768d7cb2e6031b078eec9","sha256":"3728b690bae9843b588b1a5f47678531a2de36d3b6e173c502d2784b44309f63","sha512":"bc714be1dd68c1138526f11a28c3d7f56991e33bd94ecd264d71156719c45eae51491b1dfcd646e25a1cec544abb76bd22696ae9a6b36f7cc66c95d8b0cdc517","ssdeep":"","tlshash":"c15164f7a36941b815120146d83d499222b1a09f5d02749dffac426d3f0d82ee2f6bc5","size":2815,"data":"","first_seen":"2026-04-09T09:25:41.661521Z","last_seen":"2026-04-09T09:26:17.317978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"05e99ec5dfd48289ca6f5d94977a0e85","sha1":"0fbbcb67ec20841fef8be5d0dd940ea641423663","sha256":"169effa276c2c5f802c428fae228f93944ef9a0d36a676f94e16a0fb2573e496","sha512":"9b789b87eaffea51e8c70c3475459d461139d17ce2125c1f8c613a4d4b06bd4e09c55e2a3ff28e72283ebcdf04ac13e999ed4e9cf45afc69fb4c82a391b49bb7","ssdeep":"","tlshash":"cd90029d36d351209e5b5694105b189574a5a660145449c5c08998e1ad57024519689d","size":56,"data":"","first_seen":"2026-03-25T14:18:58.705069Z","last_seen":"2026-04-09T09:26:17.407734Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e4e321d33ac6642b37eccaf7d7a2fd33","sha1":"3669a8d2e7da592d70481721730ed10532c4bea7","sha256":"d1c798e54477c94723c66312ad890e09a0110f5c3fcff80f2feb1e16be96833f","sha512":"5c449b19873d163c6d72c869549b3cbd851a0716c374f511dbce6d5af93131425f61641659f75cb1ab8a009d5dbe16a8e116daa416cb8c62c42fe771189ca5cf","ssdeep":"","tlshash":"fc9002a522c65140865231940156188d60689470548449408080e4a91ca6130516649c","size":45,"data":"","first_seen":"2023-04-16T08:22:18Z","last_seen":"2026-04-09T09:26:17.394601Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"639144dfc47a03f089f57a8eb2a0ecc0","sha1":"d409136ce98a2098765f3302ff0485cfaa64bde5","sha256":"4e48b43d4eb2c36c227014f787919385dd33222244519bccbb7e655969c15957","sha512":"f2be912cc28cc0a09824df17eb9db49ca4ac62cbe047bfbc196b8d7d7236d05cdbe940efe51bab750ecc02a53be5de26d2392240fa42b811099015b402c9b996","ssdeep":"","tlshash":"c2a002a932d3e110a66f1594109e189558a4a6601c958dc4c04c98a17d56420559d89c","size":59,"data":"","first_seen":"2026-03-25T14:18:58.788278Z","last_seen":"2026-04-09T09:26:17.375501Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4d701dcd615fda0e329d3402a3007b0a","sha1":"0ec3713e8c6783dc9d27b9ddc4c8ee9ef673e01b","sha256":"89a32b953e194f6861ab5d091146ebac35f952c776ac9f8d62fd34447e9661d2","sha512":"948fc629741b5b8d53af78b3398b565f912074e74a34161eb24d092f63049cc4d1197434497db13de3c83d14500a61857c1c40c110cd71950d0ec913b5e09851","ssdeep":"","tlshash":"6e9004d531cf5000475331d4055f1dc4703c55705444dd4050c4d4d51c5f030d1f745c","size":44,"data":"","first_seen":"2025-11-01T16:04:34.197293Z","last_seen":"2026-04-09T09:25:41.727462Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/zh.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c217087e92ebecfd57f84d9d96346fe2","sha1":"d9e2addfaf81d234929daeab73292b964694d61d","sha256":"69ea27b0c9f5cd098c722311e2d693f4be4e0dc25b61bdea3bdfb6422dc062b6","sha512":"98db8544c4ccfe887de485601040171bb80b05d392ec8e08248b69990b32b551e4aae73e51aac1aadf3dbc2a2408045556dbccc0be8df5fb0f3a4d98d2099771","ssdeep":"","tlshash":"3e5162f5036c88a42e1a038a7d3d2b692021b5b74c0675acb75988e93f1c85ed1f27c9","size":2629,"data":"","first_seen":"2026-04-09T09:25:41.6659Z","last_seen":"2026-04-09T09:26:17.337557Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/index.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c5497019c2b2164cc575ea24f5dab100","sha1":"53c7c896a73da3c5d7996cac2d4f68525dfa019c","sha256":"3dcab12c131c536f2f4c26b004da5e643db0ea61890d55078efcae5f2f005725","sha512":"56c5ca6d7bf17906ff3a85c375e5b02250dbc0040ef921134a84c17fcf8c3a4b42537a0b4ebb1b681f87fe7d25939ee551121e4453f66b28f09b765bcd5daf29","ssdeep":"","tlshash":"bc31a0d3e4f72043c549a1783d0f6e229d711759b65aaf72b5fb822a1bcd00d81ee206","size":1867,"data":"","first_seen":"2026-04-09T09:25:41.693882Z","last_seen":"2026-04-09T09:26:17.322341Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59dac782b0d48dc1a7c6001fa1bc3a08","sha1":"e9eb0def4350bef59b3e57a1cfb47ea82fb38d57","sha256":"77ce4764eec528b435fea91725d62f1df0dea271df7d3106441e0d18e39fa5b2","sha512":"afa391487245cffc5c0ea2eadbcb07b13cc5b05adbffbd6bdf1a95a8685721f4021536e17942da9e427622c7add9f4bc3bbfc38d311ccf162708a1d47b3fbaef","ssdeep":"","tlshash":"c4b0128c33e34091866f14e428077686a012b13c9859566cc044e06c5f3301030f5e8c","size":97,"data":"","first_seen":"2026-03-25T14:18:58.864036Z","last_seen":"2026-04-09T09:26:17.358109Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56739c9c8d0848402e5bee6738a098a0","sha1":"b282f254884142e70458950c4fe5b5b358b34cb7","sha256":"b64a40987d3db3d24ef12b4431d70f190b9cee4cf89a0aa0f88f4da458119e88","sha512":"9c5afa00a70fa271b8aa7679e8483753237c3de77707ef3c8271ab5eb3adcab354ad55b61c1b54cb913119a557cb94b6791a2566c02f663b7ae09d34e4db7f9a","ssdeep":"","tlshash":"e09002d932d35510865b299a106a199694bca66055544b84c044a4b16c56420659589c","size":53,"data":"","first_seen":"2026-03-25T14:18:58.764214Z","last_seen":"2026-04-09T09:26:17.373045Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ea70bd69301f621dcd3198394fb0a1e5","sha1":"82335f905d1c6fa5b0de3bd98f1486547c374a95","sha256":"5229c74c3f01f3062ae424422450fbaf3214b44477f8f25342cc6aa18323f10a","sha512":"a614303679a274c2e749303ae27e49f5814705d599207983e71e2c715892c546b6143884d41fb44824809ea8b2b065424222994ce15f7e0a064a0bcbd9115a00","ssdeep":"","tlshash":"1fa022ce20c280008b2202ac00ab0e8320eb80b08cc0080380c0cca08cf8828a00e0ec","size":64,"data":"","first_seen":"2026-03-25T14:18:58.873165Z","last_seen":"2026-04-09T09:26:17.3909Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"40c1b54704ad8f66bbe9377a4354afbc","sha1":"b978207d0c451b32dbf57a287691636e64ddb21a","sha256":"8a55132d205434039b6002f8afb30ca40c30c036f49007d73d65d85c8312f48d","sha512":"7c7fb2215ae2f8a374aa97f37becf7c67605eeffd3d120c802390e1ba85d4264cc5da2a69163047cf9640ff9847b57ff215c9318af647caf7997e79b11c2d26b","ssdeep":"","tlshash":"8390029521c25005465212a400ae1c84602a547024484a404080d45118a5020615d45c","size":40,"data":"","first_seen":"2023-05-09T13:40:49Z","last_seen":"2026-04-09T09:26:17.348707Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/vue-i18n.global.min.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a80676f2003b3bd75c754077b1339f","sha1":"ec268449dbadc37af9c76e9ef7baff3c78f956ab","sha256":"976d0238413d2b8a2d4c36870e43c01dc8eb663990ddfa8c1922f91169cf9d50","sha512":"b4587c78433fac774a92cd27cf2e9160c280f83a4c1612d0c326949f0acd921425e42d429e845cb9a9dc658c222c8297886d462a159e1d6f5401fc24255e4fde","ssdeep":"1536:V7gEgU0f7GygAiquKDb6S+H1zCuG03wZEUm4ukM5c:hgEgjf7Gyg8+JzG03wZ5ukM5c","tlshash":"c97306d275e67016877a42ea70b31101ab3d1a18340ed894f5bcda823e27c5a43fbf6d","size":76778,"data":"","first_seen":"2026-04-09T09:25:41.681593Z","last_seen":"2026-04-09T09:26:17.333549Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c677c1da0539ae31f06676d7a6bc7eeb","sha1":"2fb294c18b7e5be26d675ada5dd478cf4e68a7d4","sha256":"af5011a0e996e9b240713d42cfab5778009adbb2c750d8b67d7b87663be9719d","sha512":"7f16ba9d868721947cec11effa59dfc00c05309b0ba35a9ae3c10cd0fc506c3aab9b60e39c4d117d9ea2db4d9c8c1b6097f90254e20b7bf2d80620ce6fc3a47d","ssdeep":"","tlshash":"cca024cd31f35010cf5700d0304f14d14015553504104544c04dc45cfc37010f0f3d4d","size":79,"data":"","first_seen":"2026-03-25T14:18:58.868502Z","last_seen":"2026-04-09T09:26:17.378922Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02e504257d6a3dd4f13327842a64ae2b","sha1":"e5946d93da0967ea2bf8f6dcc50fdee93a5c8fc1","sha256":"2c4109f67a55f439c790918493f4c8595a313dca0f76ffc57ec5f548877811a0","sha512":"1b08bc25b03893fe4f660ece840b090903c621c94821ffe76afbf790c0cfc1a3440a8e8fb2271190a145861c8b23d5cc7cb0129452fcb21e01072a9f476fd074","ssdeep":"","tlshash":"35a0128832b20814c22a169d700b14d88c61b152009845449145b4755f0945010524ad","size":85,"data":"","first_seen":"2026-03-25T14:18:58.831291Z","last_seen":"2026-04-09T09:26:17.384759Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c58afef75d9bed6b7c70c099a81876e","sha1":"4b37a9f9ac4a653d9fe1ffac671481d37142288c","sha256":"e4b6982f7ebf192d3780cccb8bc7ab3ec23b8ff751d0745478e51a67378693be","sha512":"eb7c9bbd00b6a62a8313bfa12c3d28d9e5ba8ac4d762b0ac5233a0dbc3a72949a5dde11d78d8dcf203e36ffb00c145efe9f245d0e02787edc3373bc811b615f8","ssdeep":"","tlshash":"e6a0228323c330000a03028823838cea22b800b020080e0002fbec220c08030c0ebcec","size":64,"data":"","first_seen":"2026-03-25T14:18:58.845071Z","last_seen":"2026-04-09T09:26:17.383563Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bce771ed23663858efe8a348124b118d","sha1":"fe846ecb3cf0228f3fbd6374be9d8b46ff96d4b8","sha256":"afc3723d05b68bfd84604819bb1d83b24f2eee77df44e2b98e05cf0af0c1d3c3","sha512":"63fc9d9c3e37e2b50f9a58c78e1f161616f7a5e3d261a36812a6ed16f24546372b6f7a6976a47a15527cf06210a52e6a26bda9d6a9837f44f9438cb98d869c74","ssdeep":"","tlshash":"8ca0228323c330000a0302802383ccca20b8003020080c0002fbec200c08030c0cb8ec","size":63,"data":"","first_seen":"2026-03-25T14:18:58.869632Z","last_seen":"2026-04-09T09:26:17.376952Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"22b0636ca7d6411b7ce84fff49bfa3c5","sha1":"a12aab9eda3c9df34348c101cdb2ba17754f2097","sha256":"35e5379b08ea3add7c77f41d829821e12ebc8e7149ba7d945d7bdf2fa43c5fec","sha512":"1200de709c84cd5f9e8f32bb372016e5817333e6a455537df2e81970a22fe8f805eda5afe61fd98fcdb0eb66622c3688c156970696f8e2fdde30c93f65a4527a","ssdeep":"","tlshash":"419004d531c75400475331d401571cc4703c5471744c4d4440c0d4d51c55070517745c","size":39,"data":"","first_seen":"2023-05-09T13:40:49Z","last_seen":"2026-04-09T09:26:17.401581Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3072eba3974453e5b10ac7223e0a74ba","sha1":"33cc93716fdf33dbfb921c7706060bb76b0bfdba","sha256":"2cf82f3ba129cd48019d6b37f916b4bef92578ebd3ea806b61412a04ccedc4c2","sha512":"772602d33efce63eef03e7481959007e9496ef6a808fd28cce829ee45e5f057013725a4b1d35595fc2217e4e9d46552fcd7bed451c05b3d295fa17ad88e90b85","ssdeep":"","tlshash":"ba9022ca33c30000c22b008000ca28aa20a0aa2880000880c08080e03ca2020a0c088c","size":56,"data":"","first_seen":"2026-03-25T14:18:58.744461Z","last_seen":"2026-04-09T09:26:17.38748Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"85409d723dd8ee764079ff2f03bc2c3a","sha1":"504074950a341d5d406f4ee5a9726cf09ca1448c","sha256":"37d61138d1fe7cbb84f4569fed5417bdbf2466f2f4ebe98760e05851ea19b667","sha512":"be0391555c7ed38f815c65321405f4a58fd3d50e96a6752edd200942c83e0cc3d61e49b340fffb1375504327d3c8aa14b0e9d74a10c02166d0ca45b791a621e9","ssdeep":"","tlshash":"6da0228832e380008a0f08a0008e0a80c0f3fa200800088cc0088cb02c2383002c0cec","size":66,"data":"","first_seen":"2026-03-25T14:18:58.85615Z","last_seen":"2026-04-09T09:26:17.402373Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/common.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db381bcc0d0de6b4857eebe1470d7a7e","sha1":"bf201be4fb728e2cb81c1298bafa1e677957fbec","sha256":"3b7e04dd999c089e5ccf38168b493c1214e27278928a963854e6c413503575f1","sha512":"da9a924705b7bf5fc6c1a174601c25852d7be2ad5533c936645c939d03893ccb69b15ad03b5055ae840bdd999ab76989adf0adbc63e4dd1ba9ecfb8c82263af5","ssdeep":"","tlshash":"53e0228c69fb6002002b3c6d698e90057176b01ba82d1e41b6ed4bd47fa103242b7e88","size":388,"data":"","first_seen":"2026-04-09T09:25:41.678455Z","last_seen":"2026-04-09T09:26:17.312915Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"50bc2ce6359ce12921207dcd31075dfc","sha1":"477707da15f9e30a602908b16ba653fa8511c7f6","sha256":"e29b2f0da5af58c5112db3589701b0034481189e0760053d1af303ef5ec9c9d0","sha512":"a11e940194f6ac1c5c611afc1b85daad3fe68c3b6be0b8857871d9586d84e45ff50786d534981607520189ab00596625b11b4291d95c530292af5a53747f2da0","ssdeep":"","tlshash":"b190029525f25804476627dd555b18c8a424b4b1545899405141a4691d5956051194ad","size":51,"data":"","first_seen":"2026-03-25T14:18:58.746692Z","last_seen":"2026-04-09T09:26:17.371848Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"898bba728fd67a7c5a32d546f685973e","sha1":"5ba81e4eb1fbb5544dd3ee4c4ab7130885c84076","sha256":"fbdb807317e5f0d60a0155aaae1781ad64758ed7e3e6ec3387fd86418d65179b","sha512":"0c2d7377749f3a539da38ea4ba1b37fdc7712b3bc062ae3a0e72db915f7910826a0b22d08e743a0890ccb2301410492d75be7273a943e5dde9caa886f585111c","ssdeep":"","tlshash":"269002d521c350109e921294049b1884b024447014545a4480c1d4511c5602091964dd","size":45,"data":"","first_seen":"2026-03-25T14:18:58.749622Z","last_seen":"2026-04-09T09:26:17.361562Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2c93c5a230481f51bca35ddec2093411","sha1":"366fa9973d063dbdea13decb963ee30caad5ab8f","sha256":"c0131d35d635752577fb15597608c79ad55000262ae5606d1ee0ffdee4670473","sha512":"8390d32e74d0a0260846e2e535db3db0074a5d3b0bdd6cc581ee13da8e542129d54d3c994aa1ead55ae0a54dcb19e9810f55462604a445d2b15d7448f5d038fa","ssdeep":"","tlshash":"c590029521e2640146b62698105b1884602844b8a45cce409154945a1c55124512545d","size":49,"data":"","first_seen":"2026-03-25T14:18:58.820642Z","last_seen":"2026-04-09T09:26:17.367941Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"91e793ff1a11fb33d882c2335f0d9ceb","sha1":"e32c408010e2a8b557934b7b08aa7d6b06571847","sha256":"ca958808dec46fbde4f66d7fd4d97b253ebc3e0e894d9b6cbecf23061ccc2ab3","sha512":"162bb6be89c236b06dce194ea4bc5e714bf3a923532776ba1f26cf92762457147b5f66419a75ea43abb90200384eb480a23ec9a1cc93b09681390ef7dfa316ad","ssdeep":"","tlshash":"28a0228832f380008a8f00a0008f0c80c0f3f220080008ccc0888ca0ac3b03082c0cec","size":69,"data":"","first_seen":"2026-03-25T14:18:58.734699Z","last_seen":"2026-04-09T09:26:17.350603Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7acc7d32407bbb1b10edde910cd6291f","sha1":"bdc78e2e1b24b58e7468fa788db0360528f029a8","sha256":"39a964138cfef2b314e2f96332013d43b49727cab06a56ea0573d8f07073cf58","sha512":"9ddbbb5f51f51543b5ff7586cca556a235a065e76bd44e9815c7eb2faffe633633df98b71fc07e196f691e4d25b6ce23cc5ccefa8b1f8cfaa0d25ef837fe7f6a","ssdeep":"","tlshash":"e59002d522e75400467626d8105a1c84a13544b164488a545450945d1c55130511649c","size":48,"data":"","first_seen":"2026-03-25T14:18:58.742124Z","last_seen":"2026-04-09T09:26:17.382164Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d0c81526008b00b2116e0d048f2d9fa1","sha1":"0b5a407619b65f6ce7e28747ca2b091a00d90b4d","sha256":"2e2bd1b4fac95d5a1ed7b10e8b9ca88658de1e8ac86c67e8309a08081f718fe9","sha512":"3edbc4aed9d4afb9e57342d965840db406325ee61e6968d3daaee3fd784388ba97bc89e6fb9b7ff566544409c7038f05685d865a94d1fea17323540982894f9a","ssdeep":"","tlshash":"859004d531c3504cd7d311d400571dc470744c751444cdccc1c0dc511c55030d1d54fd","size":44,"data":"","first_seen":"2023-12-20T13:55:26Z","last_seen":"2026-04-09T09:26:17.406131Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a5a38b9de92f746c089071272ce68139","sha1":"f9352346ab24d69b18398e8647b758f03d478e8c","sha256":"7ec55fb56ed7fc7b012797cf13727ad82319a5f6a1d868532b6c6110976e7e97","sha512":"29775781282bcba6446cec80bf3abebf4b0bf4a51853e9882e998a57eacf81f5da0a1fc257744a13073e42b7dc6e616a76da9fcc48a472f554c2d9759fab8b90","ssdeep":"","tlshash":"659004d531c75044475313d4445f3cd4d33d547014c44f40c041d4531cdd434d35d45c","size":44,"data":"","first_seen":"2026-03-25T14:18:58.854419Z","last_seen":"2026-04-09T09:26:17.379549Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"40c1b54704ad8f66bbe9377a4354afbc","sha1":"b978207d0c451b32dbf57a287691636e64ddb21a","sha256":"8a55132d205434039b6002f8afb30ca40c30c036f49007d73d65d85c8312f48d","sha512":"7c7fb2215ae2f8a374aa97f37becf7c67605eeffd3d120c802390e1ba85d4264cc5da2a69163047cf9640ff9847b57ff215c9318af647caf7997e79b11c2d26b","ssdeep":"","tlshash":"8390029521c25005465212a400ae1c84602a547024484a404080d45118a5020615d45c","size":40,"data":"","first_seen":"2023-05-09T13:40:49Z","last_seen":"2026-04-09T09:26:17.348707Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2750df449e77a7a070e5e40ad87ce8b2","sha1":"6173f0ce58fc939c723ba747684e24ec7d9b4be5","sha256":"e66bbd70ee305f05710c9162e6652fe5fd91721354a1a2dfe9e16f6e12cf9e14","sha512":"24eb15fe15b955c01ba3198c34df201d1d8f92e9129df734af7dd4b01218c6d6b683aff0e5ef6c4e13c0b242d391fdc8b169f0ad0add1c9f085aecd8c141fdfb","ssdeep":"","tlshash":"3ba022c832c3c000820b00c8002f08c008b0b22008800a80c03080e02c3302080c888c","size":61,"data":"","first_seen":"2026-03-25T14:18:58.880564Z","last_seen":"2026-04-09T09:26:17.385784Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"app.xpjqwxgz.top/","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-09T09:25:13.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 09:25:14 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Sep 2025 02:48:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFeDXXT9nSWMvhSi63z2Lh1MJzIIAQ4a9OcdhHs1QHfOzvtOiBini60OTZfQwWBJEaVsPGhiGNoJvhZgDInCzscO0k%2FuFtvd%2BlsqKl74ptL%2BCz246zwGW3i%2Fu7JPowtg5PtO\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e987698e9e4568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"60fdd32c2c1a1c7b05c7f8e7a253a454","sha1":"98bab99bf1cbe21e620f3580faaf0501d842061a","sha256":"9441f9d57c9a4448f44085f19306388e6a59b6b8e80f95d3291bb76016a4b932","sha512":"da6d2fc5719c84f4a97b52814e09621ca82b754add6b99241427e6362b0d58a1b8ec7bf14557a5b36e87f07544985c688db43e233b04e7311e921a6d5b3250e3","ssdeep":"","tlshash":"f9115247dc81c009e1512470cee1f515a143c6ea43aec88078cf642abf8278e8db72cc","first_seen":"2026-04-09T09:25:41.659372Z","last_seen":"2026-04-09T09:26:17.323101Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1374,"timings":{"blocked":329,"dns":307,"connect":1,"send":0,"wait":716,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/vue.global.min.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/js/vue.global.min.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-2f724\"\r\nexpires: Thu, 09 Apr 2026 21:25:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yl60aMu020QVPMbS8wRjWQjBTWbSLyiC%2F8HX39VS5UGbvsHv%2B5NnIWxTobl7S7kkrcAP9CW4ir9ZXtdiKrUAUxdT6MGwY9G%2BwkAlA9GZ2o9ZC%2FZJ%2B9kixnKZGdGsl%2FIid3Et\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4a84e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194340,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44955)","md5":"c08da89463e7e2421368971eed291e5e","sha1":"8b80b277b6d9b09532f053803c3abeb76143de9e","sha256":"9bbbeadadaebed9f13b421ebbb925b4b1209fb552a877318add7b7513d87608a","sha512":"66e0cf08aba42fd26b672e833c3cb98cb79f9cbf8a54546cc815ffd63ff74a03799bc248503aa58188aec41a0c4ac95886df351829fe98e2eddb1c312dff4502","ssdeep":"3072:H0RSBLV1K6p2t4W4Z8oAfE9NZ6wn38Gl9/+eQvRvpIh9BP:H0GA6p2t4W4io8Ebn/l4RvGP","tlshash":"eb1439a53181b03217da15e250bb0016f33a1925380984e8b5bde8df2d7695e61fffbe","first_seen":"2024-03-30T23:24:54Z","last_seen":"2026-04-09T09:26:17.32887Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/en-us.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/en-us.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-aff\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RaO4mAM9PlJ%2BAA69pHgMO2oyRRLP9oJwOkTpiR8rGqmdWKplSrnYURbykEipIW6fSOx7XqFuubcVYCE8ueQlDjO9CFrfqIjeJC%2BxVesSbDstMjAg163HcL9sTJz39%2FvarOlU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b148a256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"852d55676c3b2b8556770217a17535fe","sha1":"68981abbccdc9146582768d7cb2e6031b078eec9","sha256":"3728b690bae9843b588b1a5f47678531a2de36d3b6e173c502d2784b44309f63","sha512":"bc714be1dd68c1138526f11a28c3d7f56991e33bd94ecd264d71156719c45eae51491b1dfcd646e25a1cec544abb76bd22696ae9a6b36f7cc66c95d8b0cdc517","ssdeep":"","tlshash":"c15164f7a36941b815120146d83d499222b1a09f5d02749dffac426d3f0d82ee2f6bc5","first_seen":"2026-04-09T09:25:41.661521Z","last_seen":"2026-04-09T09:26:17.317978Z","times_seen":2,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/ja-JP.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/ja-JP.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-e32\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRj%2FnlQZRW%2F70TkRdcuJ7NcIroMl7YkZUmOL%2BIWMCr5SFHKVhfK2ploeobZi2ZIt7opHacflV5Ta0wVCn8%2Fu%2FVT5aRqnOyhfkav%2BS64ys40H7%2F2%2BgrpUbWTH5mBKtA02GQE2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b148a456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e819e110e73d99145175c857c86c9cc8","sha1":"bbbd9825bc711bb09443c5d32502bb697fd9ea18","sha256":"b94316f4fb9b1e8b80482b97de21a5363266c50731e34479d03dcfff656ef9e3","sha512":"d41749116c69aaebf544d2fef724ecc8705574123e1252c1f15c527914058d258d08df18ed5875da574b132256ac4a1be8b63258f9e06a993f12e6de433d25e5","ssdeep":"","tlshash":"9a71fdfce3c8542a6d204556ad7d66807146fdebec42323db66cc0747f190aee9b06b8","first_seen":"2026-04-09T09:25:41.662491Z","last_seen":"2026-04-09T09:26:17.338241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/app_image4.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:18.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/app_image4.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-61c14\"\r\nexpires: Sat, 09 May 2026 09:25:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOruLhFjYfIhz6t5a7PENQdquzxgfwXlMzWUqwltY7n3zItr6YSIn%2Bfn1z7Z%2FhLZG9DhxAJyvs27CZLcwnOggwhmOiDYASgEW5pT5HkIu5btsESo%2BTqxxBZ34%2Bm6FFRVrBVL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b6c8d756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":400404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1242 x 2688, 8-bit/color RGBA, non-interlaced","md5":"486ab4dde0015dd22faba6f0cf1df7b9","sha1":"4675491368509a8e861d7665f8e915f5c1fe7aa9","sha256":"ca0bdfafbc5e7a3a31d8fc505b166a0b2899e1388ecf8bddf33dba26280b83fc","sha512":"7cab32ce0cb674fd2c3e99243fe7aabd65daf27ac27dbd4925e2d20ecfac1f54fcc7357a2abb6ce4c2331b37254ab1ff3630f62015bc0f16a8a43d1b17d72dfd","ssdeep":"12288:pAO3XTHZnIm7ZK26/URpyBJ2ShikIVoB/ENSgyEwE:dMR/UR8J2N6sSE7","tlshash":"d28412a79039e56ccf4fe532dd734f272323b18b40ed0a47b752a61d995afac7809089","first_seen":"2026-04-09T09:25:41.663367Z","last_seen":"2026-04-09T09:26:17.324718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":726,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/android.html","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-09T09:25:15.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /android.html HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 24 Oct 2025 07:10:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0tW4JOQZgXqGKWOWpYIFZrk%2BzXHvuFRy%2BkgeUdnAM2YtwGLFf5uSWLncV0UWNAw2vENlNYDmUYcEoWRa56UIF02k03aFN5Q2ihCJfUo67QhH6nZ%2B4YjDPutTwtvj0QfBtDQ\"}]}\r\ncf-ray: 9e9876a2f83356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24083,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (757)","md5":"63fcbbe8dc91d5ebc9ab4e54aea5e26d","sha1":"799a9d565fcc542a50c0bbfe4eb4a75f68ffd877","sha256":"51e377c08ab6bc8d192aadba9094494821ae7d4c848101a978d7605355e06e2a","sha512":"b81411a20219700a30d24cf7737c1e0338f4240d8c6786a21c7b855564b3c4e0b8729c624c9a203d84ea6df05d1d01a34a2c9882a5ad04d323c0bdf07aa4ce2d","ssdeep":"192:3SvzHjJ+LUNc6r1eV99Few412V9nzA+c/ObFKKvdFpjjdJjjyMFjjaZUZ+jlJX6c:3SvzH15cww41wnMD//MpPXPVP4Kihzd9","tlshash":"b7b2a3a082f04131958e81893e69181f7f55e2b7e9078a0cb66d4be8dfe3d52cc539de","first_seen":"2026-04-09T09:25:41.664168Z","last_seen":"2026-04-09T09:26:17.319605Z","times_seen":2,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/android/a-share.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/android/a-share.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-88d\"\r\nexpires: Sat, 09 May 2026 09:25:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8CnHXGdy7cNwuailcEQuen8ibOJlIN%2FinBuXwIsrYMwxoTNE62GsbJUdmO81Fqe2dBiQUNs3sMZoUoyDMAKf2e%2BmnTsbPjSZWV08d6fYpzx3gSLA0BYA5fIFUZPckydmck9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4b85156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b187a402f1b5ccac8a1115e46bd38f36","sha1":"4d1a56d6833441034c747bced4d2178a6b5bed30","sha256":"5dc069d015307ed1985a8832b19b5593e1576d39058a3c84bca8ebb6d8d3f3cb","sha512":"9210778aea9fba8b9e82f7f4814435539ac749b1dc62f607ede73b1aa69f3ed6a0a94a2b266ed2a95a36ea9ae6ca7efc03c1f1054751c64415862f9d5219b1c4","ssdeep":"","tlshash":"39413c2ac0c9b059d13e4ee5d9860c73de6aaf8e11e54e1ae32884332bda591e853642","first_seen":"2026-03-25T14:18:58.648465Z","last_seen":"2026-04-09T09:26:17.346135Z","times_seen":6,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/zh.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/zh.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-a45\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vk0u7tStaG%2B8RTvmhMmQUzZ8P6OyiZ0V7%2Fw4ewus93GVwR5vX2zn8Tk1n%2FQcIh6C8aw%2FyAlfRZ5LB1qipcIseNaexa%2Fjpb5TXhkiTcalOVf%2BoM0YdCg%2F4VR0PJ0GMFjXT%2FQ%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b1489f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c217087e92ebecfd57f84d9d96346fe2","sha1":"d9e2addfaf81d234929daeab73292b964694d61d","sha256":"69ea27b0c9f5cd098c722311e2d693f4be4e0dc25b61bdea3bdfb6422dc062b6","sha512":"98db8544c4ccfe887de485601040171bb80b05d392ec8e08248b69990b32b551e4aae73e51aac1aadf3dbc2a2408045556dbccc0be8df5fb0f3a4d98d2099771","ssdeep":"","tlshash":"3e5162f5036c88a42e1a038a7d3d2b692021b5b74c0675acb75988e93f1c85ed1f27c9","first_seen":"2026-04-09T09:25:41.6659Z","last_seen":"2026-04-09T09:26:17.337557Z","times_seen":2,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/app_image3.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:18.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/app_image3.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-d8ee\"\r\nexpires: Sat, 09 May 2026 09:25:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwI95FVXFH9jVXYR1P38NR2MrS4JGMEZu9pq%2FTRo0EYkbsHwt%2FbWARjUXJkIMRBkjkIlHTIU6FvCGpakqP3QISxyLYEnTweNWmiXp05jzWbPW1whhuLIw5tZpFV2dfY%2BWn34\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b6c8d656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 357 x 770, 8-bit/color RGB, non-interlaced","md5":"a1afa2905cc5008b402e2b2ff27eed71","sha1":"56f5937fadaab0be5ef67a37f044cc74d8614fe9","sha256":"ba702c1f0b6e19e362d9fc187b3e74ac3e57958e077c380344e6514b0f21c5a2","sha512":"5ed4058f206107f535d5ed580ba88791e647714170517355ea3b5eb39152222cac888a89dccc4913b2b1dba9967e443c6b7768f7768edb5788605e5784b2b80e","ssdeep":"1536:Lr29sbrqAbN8J4HJu7OiJ2UG9jAt2fJGCdUD7nU3hlk5:N3u7OiAzNhxrUD7U3he5","tlshash":"3d43f12f46b52ac2263494c34af138679eeb4fd297b7ee4799099842b5bff81530034d","first_seen":"2026-04-09T09:25:41.670191Z","last_seen":"2026-04-09T09:26:17.342702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/android/a-delete.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/android/a-delete.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 586\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\netag: \"67c83ea8-24a\"\r\nexpires: Sat, 09 May 2026 09:25:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbWQ%2FOn2sV0m2wfVTDrwzT1MHI36te75Y12z5aM%2FC7AO5BXlv0FxXvO6LJLvM0Py3edQOIBmLGxUQfwHZO8u2cAWZyoyJubpsJ%2BgXdxYrmUy8O5JRE4x%2FKE9PXMJOhNyUCRL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9876a4b85456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"5d362fc71c0d8172be1ff57594e59628","sha1":"089831eb60a2e7e1632524c353df712ea154834a","sha256":"780453aedd5112a64046b91c0cd36a921fe06235229740b0c9f89b529dc1f2b8","sha512":"8caf6258fb9d1b6904d5df4c42b90d99d8a52218fd74970418bedcad34caef2585933e882cf570a9d5181bd3f2782900c81f4def4f07317e1830239fb6f5ad70","ssdeep":"","tlshash":"27f00cfa952898ecde068b39125f63a1d8e9315976ec1945c8462c380b462385037902","first_seen":"2026-03-25T14:18:58.684441Z","last_seen":"2026-04-09T09:26:17.313797Z","times_seen":6,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/zh-hk.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/zh-hk.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-a51\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYXxmE%2Bk6Cg4XKz1LFeOXNQZhq1vLn6s%2Bwa%2BsVNZN5zl1Od4XN9CXQQQeK%2BIjUMIYdA5TRrCRHHcLxw196hLW6iUy3Wf%2FtDYysZ5ps8cYDdQugyiRxHBXTQLMMdtN5NZjfN1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b148a056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2641,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"a6562672a68559fc317e4b6e18919fda","sha1":"f79e053d3e48313a6352961572ca6cf916a6bf61","sha256":"0ac1370517bd0d025d7ce6b1a7346e6636a2b4b28d6dbd909d3772975395932e","sha512":"83d73690d41a987924e87797dce91bc111cfd39021bcab5603b84ce8a185ba0f366b21024fce293f41fde6b8dff3d194098f16defdcfdc8f10fa6be95a5268bd","ssdeep":"","tlshash":"dc51b6f442ac0858bf100785bdbc878c1820f5a74c1235acb25c99d42f5daaee0f56c9","first_seen":"2026-04-09T09:25:41.673547Z","last_seen":"2026-04-09T09:26:17.31682Z","times_seen":2,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/hi-IN.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/hi-IN.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-156e\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyTJKxYb%2FPGc6UDxDro8narHdU2XFEg4pctnb6fW8GwgpJctcjAy7LbfAIAxfM61E6MX3yfyQTT6IwcQWSlxvoUijl%2F1ZoHvu30p0WZZYjbuCWLzx%2FI%2BaI8yuiOrRY329xeA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b148a556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5486,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7ef4dc3af64e41f89f8e25bc4509b64d","sha1":"2e1a280576f6fda37fc8425b79f5735ccb363399","sha256":"8dd0768767e16ae7bf1fac7c1214fd11bb2f1c0787b7ef88202b7de607f86f17","sha512":"e28cfabae97b34549cb5d80ddaccdec60352759e074c81c81428af4ea81afd1d35a472e838d9d61c16eee9c79ba6718d205f76b92deb3d1a5e7febb73a8ab792","ssdeep":"96:4GN4oB+3bAXeKPvqjba2Sy+talXp9klETVjMAza7yHkQmDHcP/iBt5EA3rAv+XN4:4GFeWeKPvEa2H9UAunrZE+KF2ajUKpT","tlshash":"1eb1599cd7bdf3a41cec3897b29c0c7b56a871726be4216368c4b3d65f08c7c50a52a2","first_seen":"2026-04-09T09:25:41.67461Z","last_seen":"2026-04-09T09:26:17.34205Z","times_seen":2,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/app_image1.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:18.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/app_image1.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-19819\"\r\nexpires: Sat, 09 May 2026 09:25:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQ%2BHebUszFHB6nuNwO%2B1B677fwvXQeGS%2FFOIclXVEFXwUE1IUUtDw2vNwqmeIj9bx5Vtcw8%2BbQ3IpMzRJApZfB0QsWXDQ0%2BnmrN175%2Bphg2gl4NHGU5RzpzmShdvrvXAQDWN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b6b8d456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 357 x 770, 8-bit/color RGB, non-interlaced","md5":"7a4ad1d91f40bc52a7bbe4057520d52e","sha1":"c3981dece15785e30d11d3c5bb5ac97f8471741a","sha256":"6cc5bab52ad60d64f7a67a2c35e06ef87b140ff78b2f5a7da94c1fd0619f888a","sha512":"003e9c7e413bffc660b7f7c4641360a83c43fd07eedfa593b9a4a9edcf880b4b97230f0aa72eab26decd0573ad178c4345d1e0bdca942a4545a580604a8199f0","ssdeep":"3072:OE3wb1zpV7pz7L4qeSafqdEns9SR/F5vrRTaEl30z0oH73Zm:z3wb31JX4NSKFXvrRTZl3Ab3o","tlshash":"61a31210606a74d57aafb10deca3845da379b1d5b6053780fbb688fb00b065c06f39bb","first_seen":"2026-04-09T09:25:41.6759Z","last_seen":"2026-04-09T09:26:17.338876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":931,"receive":460,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/favicon.ico","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:19.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:19 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c83ea8-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEs90WXFf3Al%2BS%2BXGYi8k6ncn0X7jfGXG5qqHtN4k8UA6LCAGK378FbHIFf3ar41FVN7MuyW7FhPGvznLycA6HCaTu5n796pok0U6tFMs1UbmYWRYjfV8LK%2F18JKs48MgTs%2B\"}]}\r\ncf-ray: 9e9876ba28e456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"2dfdb94b686481b556927fef177f03f4","sha1":"c20d537e4c6ffba4dc85117e7b7d49a5477c30b6","sha256":"ca2799281109e6423303647ab9edacfd8087d5f242215abb34354f8ae46ef7c6","sha512":"80c5b649f61306d190c5f4a93623c965c2c87e01d523e69e2893acc6eff9ea16a4b318469e18f1bcb14d5d6dfdfa2299584a22b5950acc2fd018358e3df31a74","ssdeep":"96:do5z93T/i9WQ6urXgSjpkdROlM09AQR8kvtNr:dM5TyEaQSj23OG09RFNr","tlshash":"a99193530780c3ceec74b5311992831a82b53422f34c26d5d3f9b8f68591db129ce977","first_seen":"2026-04-09T09:25:41.677411Z","last_seen":"2026-04-09T09:26:17.326532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/common.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/","date":"2026-04-09T09:25:14.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/js/common.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:15 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 09 Apr 2026 21:25:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"67c83ea8-184\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpYhkez3gbMbcDGOuCsGob7ca0%2FtZMCsIuPH22kjzKpMHCMduWxLid4UJaG6dmdIGRoV6OL6ry%2FhrkHZnatuYOgZmPDrablfpfQ0dNQCW7euX2iB6Pa117ZjkZjaIh9K9mxX\"}]}\r\ncf-ray: 9e98769e2ffe56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"db381bcc0d0de6b4857eebe1470d7a7e","sha1":"bf201be4fb728e2cb81c1298bafa1e677957fbec","sha256":"3b7e04dd999c089e5ccf38168b493c1214e27278928a963854e6c413503575f1","sha512":"da9a924705b7bf5fc6c1a174601c25852d7be2ad5533c936645c939d03893ccb69b15ad03b5055ae840bdd999ab76989adf0adbc63e4dd1ba9ecfb8c82263af5","ssdeep":"","tlshash":"53e0228c69fb6002002b3c6d698e90057176b01ba82d1e41b6ed4bd47fa103242b7e88","first_seen":"2026-04-09T09:25:41.678455Z","last_seen":"2026-04-09T09:26:17.312915Z","times_seen":2,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/common.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/js/common.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:15 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 09 Apr 2026 21:25:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"67c83ea8-184\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZQnKyHKPf1lgyzs0rTi0xJEHLJq2ZDly2dlAh%2BoPR3xd%2B8DMx%2F3o9KoyXBjcH3XN8DSTOOhqeySUtXY5PCTjlAEx%2BVW989KvrD%2BZeyem4hrOu6B%2BuDpPhykF%2FTsaHdSpanB\"}]}\r\ncf-ray: 9e9876a4b85056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":388,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"db381bcc0d0de6b4857eebe1470d7a7e","sha1":"bf201be4fb728e2cb81c1298bafa1e677957fbec","sha256":"3b7e04dd999c089e5ccf38168b493c1214e27278928a963854e6c413503575f1","sha512":"da9a924705b7bf5fc6c1a174601c25852d7be2ad5533c936645c939d03893ccb69b15ad03b5055ae840bdd999ab76989adf0adbc63e4dd1ba9ecfb8c82263af5","ssdeep":"","tlshash":"53e0228c69fb6002002b3c6d698e90057176b01ba82d1e41b6ed4bd47fa103242b7e88","first_seen":"2026-04-09T09:25:41.678455Z","last_seen":"2026-04-09T09:26:17.312915Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/css/android.css","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/css/android.css HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-26a5\"\r\nexpires: Thu, 09 Apr 2026 21:25:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RgQuLf1dI3sb4SrsW6PZ6g2q6spCfHbRBDHRctLJzCvjDOIRbYyCGw8pKk3vgoLCqkxMBXHcU7B55VipzVNSEWNhi6ez6FpNwALPGDlZXXNmJ%2F%2BOpoMSVRZR%2BFzG70uXN5w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4a84d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4926c3674736690bc3de30e84f535864","sha1":"3821555107db5d8da701104bc9132d047044db2e","sha256":"197c14b772dee361e33dae1ed244f83bddb75a187c3c5cfa88ed3647c18b27d3","sha512":"d5ecc9d05f83b0fed772459179975b7754e37cd84d39fca015dfc3a37d7287ca314a9227503f578ed602ae0927802a3b3dda9b4db13edad4851771497a440822","ssdeep":"192:cM6dE7oRyRqBlrtd5XZCjFUh11YJD5lAa44VLqZXGHyKn0JMsNJ:cxnlv5pCjFc11YJD5llkYE3","tlshash":"b412005006f44709e452c7ab755e3f953f680801480fdbadafe62418ed8e273aa567ce","first_seen":"2026-04-09T09:25:41.680653Z","last_seen":"2026-04-09T09:26:17.341438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/vue-i18n.global.min.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/js/vue-i18n.global.min.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-12bea\"\r\nexpires: Thu, 09 Apr 2026 21:25:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xd7e0ZU9h%2BkVeCiDr8O%2BO84n5nWId0Neh5HIocwKeOSNBHbXayAWVO%2BRLFK4dXwXjO9CjDsSR%2Fj8NjahHQloyGyVofbtF%2BJQEIUVOWAF%2Ft1PAnqj%2BMd9XuajkBlvP7l9hlKL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4b84f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76778,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65184)","md5":"71a80676f2003b3bd75c754077b1339f","sha1":"ec268449dbadc37af9c76e9ef7baff3c78f956ab","sha256":"976d0238413d2b8a2d4c36870e43c01dc8eb663990ddfa8c1922f91169cf9d50","sha512":"b4587c78433fac774a92cd27cf2e9160c280f83a4c1612d0c326949f0acd921425e42d429e845cb9a9dc658c222c8297886d462a159e1d6f5401fc24255e4fde","ssdeep":"1536:V7gEgU0f7GygAiquKDb6S+H1zCuG03wZEUm4ukM5c:hgEgjf7Gyg8+JzG03wZ5ukM5c","tlshash":"c97306d275e67016877a42ea70b31101ab3d1a18340ed894f5bcda823e27c5a43fbf6d","first_seen":"2026-04-09T09:25:41.681593Z","last_seen":"2026-04-09T09:26:17.333549Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/th-TH.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/th-TH.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-14ce\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmN6%2FRJUqeUl%2B13InAN8o6HypHEHAoZ7A2Fl4FWGqq%2BH3F%2BEEdwxPJBjvTuZNnvMszPK8xjUDAyz7rJPDJOTx4%2B4cRGllARedn1nAAoq1uyGMMgG7SdoA7KlQZWat5i5%2BzYX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b148a156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7e49c0285b6d24150f268cdffefc3f88","sha1":"9e61ccb4e6113c5f034625d548f55e152f1a24fd","sha256":"32d25c4bf081ae67dcdee418c37b9709511275f0d91c722385ec995eee1c87e6","sha512":"7cb9315cc388e17a87331b33d1a38b0d798590aead1984f97ea6a7670f577e69a679b966cc2e44945469a6984619449bc94e58c9469e3088af385be30c36d1b8","ssdeep":"96:4g5u+p+5u+7wjs4RLpj4XDC6ESlD/XWQagmbFb4UsmFxD4pHQdwJ0mhuZCLsKLRJ:4g5ub5ucwjs4RLpjWDC6EED/XWQagmbu","tlshash":"9cb1457371468a9079cc390b352e77841664bd963e73f8d82588605abbf871d8034efb","first_seen":"2026-04-09T09:25:41.682601Z","last_seen":"2026-04-09T09:26:17.323856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/pt-BR.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/pt-BR.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-ccc\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9ge%2BphLrOUx41Bl3MnoLB5HQ%2BW551DaojhIu3DgXaeYXzuF%2BtvLEXFK8%2F58AS9%2FzJZ2etcNBXSmgYrIdVEt8r9I%2FUEpGpJGyY0BQEya5LtH%2FRkaW5UHavgc%2FNWrKjXDVLRL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b158a656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3276,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (325)","md5":"6e2f5f730b19ab53cdbca386184904b2","sha1":"08b2a27525c070bcd6901a5080bbef4ea32b2160","sha256":"cb17f4d16c167030377b9cd9b9caab2ac687b0b2654c1ef64abf597dbd98b01e","sha512":"7280084d38d8b51154ca462ecbd1bd123199519a41cf29bef173b2a90e150d6eb57df85cd207147dd893ccf9065981942f1ab74fd4232e2ca43340747e1a97a5","ssdeep":"","tlshash":"a1615425569d08653a1003042a778b822144771bac16786ebfde46847fdf49ff1fbe1d","first_seen":"2026-04-09T09:25:41.683608Z","last_seen":"2026-04-09T09:26:17.32089Z","times_seen":2,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/android/a-upload.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/android/a-upload.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-8b8\"\r\nexpires: Sat, 09 May 2026 09:25:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5QE8myyhkUE8BqbrVNvCKoBYEI7tnNtz4CdS5xI5FABQlSYRkUu0h2xIWDe1ipk1S%2ByGu3qbMIok%2FMpvDkmua7jTgug5T%2FYjxs7nPc4iTS5CwHmZkXQ5CdXtiFQAQnOVs12X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4b85256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f55022dfa4342d8c6abd1b55431ff0f6","sha1":"d0346698d7ab4ddf845871723c0fcf42727c0592","sha256":"2afb4d661d97f14c4d626c6fc718be9a4e3280a937924573371b91514d02cecd","sha512":"2621150506a88b81acb4f78d2bb16ae3e6d00b297956e2f31d5df97cf41483d70f4dcb11a364446e4f9072303dce335ab9b58e70aacb83cb152cc968c32f2ba7","ssdeep":"","tlshash":"2d412756d2b13aab3d5844e00b957ffe80611a8ea48c1107f2a9500e7538033aaa2af3","first_seen":"2026-03-25T14:18:58.66242Z","last_seen":"2026-04-09T09:26:17.347299Z","times_seen":6,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/js/android.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/js/android.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 09 Apr 2026 21:25:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"67c83ea8-2c5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJa3WXbPixVb9%2B9ksyf3aeiZHhGmkqvYURH30fZlY1kELgs3JkISUxgmF0L2nt4%2F5N0QM41w3Z6yqBegs1x8r9y9sq84mmb%2BOo5t1p%2Bz2dic6pW1ES%2F1V8bTpqfqrPxX07x%2F\"}]}\r\ncf-ray: 9e9876a4b85656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":709,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"a96c5eb8f9a0893f450fc7f987671b07","sha1":"5ead5504e466f34de9898c6e67b8f446c374d975","sha256":"078201472bdb31b98081fbea91b3844ba6e497b9ea03d1bbe2a69c16abfd7dc1","sha512":"fb687ae0a4a93756402b05cd4cc5fe003a8decd5f558a62ab48528d6a432c307c24d0a5b80aa3ea522f07f933f58e776e4119ded2f1e47567058c76759baae9c","ssdeep":"","tlshash":"4a01ac1a49f9a03629b3b12a4f0f6300321f4403444cee457bee8785afd2878d5619c7","first_seen":"2026-04-09T09:25:41.685306Z","last_seen":"2026-04-09T09:26:17.315362Z","times_seen":2,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/css/base.css","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/css/base.css HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-9d5\"\r\nexpires: Thu, 09 Apr 2026 21:25:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3yotekp5uP2R%2Fbl2K60BO7hPwuOH%2F9Kat5RzPWc2FfhIXQYJ5YhT%2FGomXFKxvc5Jfqt1pHiDSFV1VUCYCgAQA7JMgcIp6fgLTxE2LOGRr%2Bwn0K6uU70Zjq6FPf9vfCNUMBA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4a84c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2517,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e1621f2c7309c3a65402a0678d92eec0","sha1":"03b1c68e59ac1febdb22cc5562e1bfa89bb0056e","sha256":"061c0de484649cd6c41028790b6bdb5323e8f0b82d9d21d62c85a577fd739e95","sha512":"6b82917a06af335e1b1f5e718d844731e2e09ac8fecb037eb2fc5a2de71d6240ca6a822423bc8755c0696db5883e3b762c8f524ccbc1a7a362ebbb94cacdf368","ssdeep":"","tlshash":"4451685117742908952adb9d7b997b30633c40224b4aecec7cd1390c7eca68e61d2bba","first_seen":"2026-04-09T09:25:41.686634Z","last_seen":"2026-04-09T09:26:17.340798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/ko-KR.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:17.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/ko-KR.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/static/lang/index.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-ca4\"\r\nexpires: Thu, 09 Apr 2026 21:25:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXcuDGV0hL2zJbsnhtwzyyKOypczccXfondnH1yQGc09VSzhQahZfrKKnsfcTqspbNphIscs23zMcxS0Oi1szczAETldfJJbEvCjI%2BdvCipvDo3QBz%2BHXOoQKtEL%2BjcwHboj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b148a356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3236,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d088223edfc0ff17ab9b30d2bb569789","sha1":"9f404819e1d6f32a4f655766a0de41ea53b3df9c","sha256":"0173f3fdfd7b3290f04c914a84affdfabcc1a6eb8e9d991e07b6ead35baaf774","sha512":"bedb7e06f0923a4b0767c7bbc6029678877a1167534a3908b56e8d94a9c946ec4c18019f79d73a3c9905357009984c8721c24d610436675b70ec5a6f5380d7fe","ssdeep":"","tlshash":"336120f12aae82d9295129016efc5a4551a1f3734f5330e8be48ce587f0c49f81f0db9","first_seen":"2026-04-09T09:25:41.688254Z","last_seen":"2026-04-09T09:26:17.31871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/logo.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:18.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/logo.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-a235\"\r\nexpires: Sat, 09 May 2026 09:25:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnGXTqRyfs4eqT4ino7RRAdw0bh1s8SIc2c5NOPriexslt5DFIrIjcoaH%2FEy3%2F%2F4COftH0CP7jZShQs5ECUznNI9%2FPGmPN8t9dN71L8LAl7ruC0KwIybgIXLwj3he3ks05y9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b6b8d356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 456 x 502, 8-bit/color RGBA, non-interlaced","md5":"2d155f946a81f2d3970dc8720b6c62cc","sha1":"670e5005d1ba469b43b79995006bf348c92e6005","sha256":"2425d84754e61ea37bb492fd46f0f40608f60de0c73fef063f1d65775a180f8a","sha512":"4b852389bb8a014924bdb0ecb2162e4aa640a97428da27aca702b7f1b9f1c0f330c9563ec890ad279a01f49166fbd89cd3adf6aa02cbd7254f1d52b2fcb181c8","ssdeep":"768:JvVoQMfuSf2Hoq/+aO7mTcqlt5T3O/gxjVOr8QQipgILG:pVo9fuSOHNOq4qltIYxjVOlQubLG","tlshash":"3313f0827b1e196397407f087e2e68ac5057914f609ed16fc8c1c12deb2aec26ffd265","first_seen":"2026-04-09T09:25:41.68925Z","last_seen":"2026-04-09T09:26:17.34671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":984,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/app_image2.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:18.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/app_image2.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-fd66\"\r\nexpires: Sat, 09 May 2026 09:25:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mBU06s5UrikgggoIDTINAtvdD0BpRUfvGnvW%2BAyP2t8WfDLhIktOy7CP1bY6sjkpOBJV76IVIpZyXXREeMUKbQmHZCHO4ZR%2BBHBtIEnUPmVNU1lb%2FWDuPx%2BIndfqgG81Bce\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876b6b8d556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 357 x 770, 8-bit/color RGB, non-interlaced","md5":"169f4415776a9f4c3a093976310338a1","sha1":"a8711f429e00dda46280f6c235a4252d249b0d11","sha256":"eda943628e81bcf56204b6aa11ca6e541048538c14776783bedfcfb2ea70576d","sha512":"0ffefcac45dbee69f495cf377b6dce8d0aa7426ad2a9186876521afe45dddb660ddcc56bdd28c0efe24ecdeb41e8ae9908e9a7f714db38d79fc13853ce107127","ssdeep":"1536:lvk9YZNIMNf60Qrapt9AeDG9QpNuga00/UrGZ:iyjd+apt9AMp800/nZ","tlshash":"6f53f196a184f03171342bd0eab42b26b6f0e193b705f6e1ca1a5d4a07b36dfc773256","first_seen":"2026-04-09T09:25:41.690257Z","last_seen":"2026-04-09T09:26:17.311972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/android/a-lock.png","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/android/a-lock.png HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-4d6\"\r\nexpires: Sat, 09 May 2026 09:25:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYo8yXThcEVo%2B1T0OzMVUnsgdLR2conyWw3is%2BoclGoOU1Fay6DOs478s4YMEA3jRAWMOFbt5ZMc%2B1tt2NcVrf0vzHfcCQyyeGMfkskZbFxYWzoJ4qNYceLVVVcJ4m%2FQltIU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4b85356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7fc0dd3410b9c9710ca5f952535cc79b","sha1":"0e0326566a1c4f72064bdd31424e47d33c93d24f","sha256":"871b65bdeb5d92af1eef573e43d7efd639dd87d4ab3d512653d278eb86397e69","sha512":"e652484f37a3171a983be15c326b24fbb21f0d022e7e625e5eaf13f9c4063f5987c1dc2d622eb67c0bf87576d6c5cf30d5c093aaa1560429fa909f0c6005672a","ssdeep":"","tlshash":"ad21b4ede4aa50cc3da6ac261240082bbcbe7cd041a4503b3e1951178283fc55dfe252","first_seen":"2026-03-25T14:18:58.649743Z","last_seen":"2026-04-09T09:26:17.348059Z","times_seen":6,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/images/loading.svg","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:15.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/images/loading.svg HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-1a11\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APKAm7DNaF3Td6FvnkcfTOSpV%2F664Gic0P1wC2bW1UHjIZ81VBJwdQlK73MfpZ8A0IBtAJeCA59vBmc2TxOd5SPYcCMqEMih8zTU71nFAQMptTQt5bIh1HqjzxX9tocFjTJC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876a4b85556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"af62a5894bd9ca6006247b0da242d983","sha1":"37cca9f864af924ac9b9d04e3454a536bff66c2c","sha256":"a1722c96e8b8cbfbbe83f130c004380cb952ecf701c62cbfcd19d8a59f6a3f9b","sha512":"72d87742dd8938f573ddf642b029c1ff54ad5fcd02848d9258ae5b595b19902284a2d1caf0ff619c592496d6a9b310b607807389f8035a6885ca6c20d8bf9b31","ssdeep":"192:TWSne7yJbnyGEjk6h/+jCFjGzFrLOdVEObwd+0c:TWSL+k2+mFjEGbbQ+N","tlshash":"4cd174df93d872e4e002e3f58857a975794b3cf93901d60587c02da6d9e21ae0de8c47","first_seen":"2025-06-06T16:22:50.486537Z","last_seen":"2026-04-09T14:03:28.275777Z","times_seen":89,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.xpjqwxgz.top/static/lang/index.js","fqdn":"app.xpjqwxgz.top","domain":"xpjqwxgz.top","tld":"top"},"ip":{"addr":"104.21.15.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.xpjqwxgz.top/android.html","date":"2026-04-09T09:25:16.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpjqwxgz.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:00 GMT","end":"Sun, 05 Jul 2026 12:00:59 GMT"},"fingerprint":{"sha1":"00:97:82:D1:CC:CA:92:CA:F1:04:95:F8:F9:2C:76:2F:A8:48:57:2F","sha256":"E4:A7:39:66:2C:7E:74:18:F1:9B:88:A4:9C:74:ED:08:B5:E8:88:32:FE:BB:90:89:3C:97:54:B0:2F:CD:0B:24"}}},"request":{"raw":"GET /static/lang/index.js HTTP/1.1\r\nHost: app.xpjqwxgz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.xpjqwxgz.top/android.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 09:25:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Mar 2025 12:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c83ea8-74b\"\r\nexpires: Thu, 09 Apr 2026 21:25:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mZIZiGUi4bM7qC%2FuAtcUpT64u3kKxZItzBo1a9LEe7D34m%2FXUfWJyR%2B9tOfmUUMSzPyFhzyanCR%2Bu3KFNbi28qrf1FLnvtQKj5LWjM6xZ%2FuYFiWMjHCoTYVsA4I6QlFY6qx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9876ac188556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1867,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c5497019c2b2164cc575ea24f5dab100","sha1":"53c7c896a73da3c5d7996cac2d4f68525dfa019c","sha256":"3dcab12c131c536f2f4c26b004da5e643db0ea61890d55078efcae5f2f005725","sha512":"56c5ca6d7bf17906ff3a85c375e5b02250dbc0040ef921134a84c17fcf8c3a4b42537a0b4ebb1b681f87fe7d25939ee551121e4453f66b28f09b765bcd5daf29","ssdeep":"","tlshash":"bc31a0d3e4f72043c549a1783d0f6e229d711759b65aaf72b5fb822a1bcd00d81ee206","first_seen":"2026-04-09T09:25:41.693882Z","last_seen":"2026-04-09T09:26:17.322341Z","times_seen":2,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"app.xpjqwxgz.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}