{"report_id":"4366b5d8-678d-44c7-be28-24ceb120b019","version":0,"status":"done","tags":[],"date":"2026-07-22T18:06:35Z","url":{"schema":"https","addr":"xjxfxn.com/","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"xjxfxn.com/","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"title":"कर दंड सूचना - भारत सरकार","dom":{"size":8083,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (308)","md5":"e78f0806c57fe0c86d3815d1cbe72b9c","sha1":"bd00726de4bc321c43a4cda099729d99289f47d0","sha256":"af1fed0828237c9a36ade256bf7815640e337617d3b1247c32562c61a5a6c991","sha512":"244969ca428f18ed38ee041f21843636c1c0969a48e0fa7c3cb5b7baabe4ab30c4fedcf0330c7888602facb739c29c672eec18282601f25e6e389201bdd452d7","ssdeep":"192:rgnDU+Fk6L8GgagTU/Gj/A28yBRPJihcmMyYriAencYlpQivDyxJsO1S:eFf/J6GhU2ncYppWxJsO1S","tlshash":"d2f1751debf37135585774a8776a9b36a1606133e60bc9553d9ca3d8cf80cf0499324e","dom_hash":"domhash144defcf7ce424c12ef269844b2655cf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xjxfxn.com/","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T18:06:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xjxfxn.com","ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2017-10-20","domain_rank":0,"first_seen":"2026-07-22T18:06:34.257951Z","last_seen":"2026-07-22T18:06:34.257951Z","alert_count":7,"request_count":7,"received_data":169369,"sent_data":3336,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.india.gov.in","ip":{"addr":"23.214.96.143","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2005-09-26","domain_rank":133990,"first_seen":"2012-08-13T14:43:07Z","last_seen":"2026-07-22T18:06:34.891173Z","alert_count":0,"request_count":1,"received_data":1377,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xjxfxn.com/loader.js","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c3bddbf208d8bbe465b0d7c9649d4a4","sha1":"99128a5fe99c97a9a1c318abb48478ee46473a42","sha256":"a78009e53df3e273efb3bac36396f55afd7d528b134403ca263b32722863c2d0","sha512":"03531925100b7beb9f343a69e2213b8c146d9a23244e6d014c77fd2b2b28375e877854dca87c7ffaf9c9f3fda3c93f6a5acc60067127257e0c9cfb5f8b2b0721","ssdeep":"","tlshash":"5111c02dc5fe62300277307c2b57c1b13536886f644fda60bb0e67115f90e3589992c2","size":858,"data":"","first_seen":"2025-12-26T10:23:56.803332Z","last_seen":"2026-07-22T18:15:28.912817Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjxfxn.com/","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"371c5a3ab412cc83b3f72d11820c5d5a","sha1":"974cc08bab7c877493693e4fe3687911f57725d2","sha256":"2dd1c0e606c44886dc683e5a728aa9ea7400472a7f064c6321d83be868580ebb","sha512":"46a2216c1e375202ee47fc35d5e4839f57f0442c1952c81c7eef85b3619ed4c6f0b05bb8ba26af2313adbc15dab0d2baa5fbfd5c970794f579309c8209aed2da","ssdeep":"","tlshash":"8b31dc11f1b918314153b278db4fd118b0350093f84aed8d7d0e93a89fd08614bbfa97","size":1609,"data":"","first_seen":"2026-07-22T18:06:38.706629Z","last_seen":"2026-07-22T18:15:28.921897Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xjxfxn.com/","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T18:06:05.063Z","timestamp":1784743565063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjxfxn.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Jul 2026 02:00:00 GMT","end":"Sun, 18 Oct 2026 01:59:59 GMT"},"fingerprint":{"sha1":"F8:C0:34:C3:DB:D9:0D:0A:02:A1:6E:DB:19:E8:6B:3F:3A:9B:C5:85","sha256":"F5:99:5B:B5:29:73:B7:03:CD:11:7F:70:6D:19:33:16:EC:4B:D2:88:62:91:B2:D2:1C:69:09:B6:96:E2:02:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xjxfxn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 18:06:07 GMT\r\ncontent-type: text/html\r\ncontent-length: 291\r\nlast-modified: Wed, 29 Apr 2026 06:36:41 GMT\r\netag: \"69f1a6f9-123\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":559,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"195d5a0f23a485e2742e84f6dfdb2da0","sha1":"82af5a1109d95617df4f21ce5bbd8601a6d1c4ac","sha256":"e7d12c6751c0f92cbdfc2134d28bc3c37f548836f0f9a42923becd624992ed19","sha512":"2231610df86ca33e2679333e7bb5eec0e47c77085b78f46d01b2b2c294501fab413151ca5db1d0af0d756139ba4f1594c0254e3c94dfe58d88a0b929715c37c5","ssdeep":"","tlshash":"1cd02b4d08f680546121a4802de076481c427a9fd6c5dd6435eab078dfc935fc8474a5","first_seen":"2025-12-26T10:23:56.802498Z","last_seen":"2026-07-22T18:15:28.9209Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2417,"timings":{"blocked":-1,"dns":96,"connect":253,"send":0,"wait":267,"receive":0,"ssl":805},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjxfxn.com/loader.js","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjxfxn.com/","date":"2026-07-22T18:06:07.792Z","timestamp":1784743567792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjxfxn.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Jul 2026 02:00:00 GMT","end":"Sun, 18 Oct 2026 01:59:59 GMT"},"fingerprint":{"sha1":"F8:C0:34:C3:DB:D9:0D:0A:02:A1:6E:DB:19:E8:6B:3F:3A:9B:C5:85","sha256":"F5:99:5B:B5:29:73:B7:03:CD:11:7F:70:6D:19:33:16:EC:4B:D2:88:62:91:B2:D2:1C:69:09:B6:96:E2:02:89"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: xjxfxn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjxfxn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 18:06:07 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 858\r\nlast-modified: Wed, 29 Apr 2026 06:37:14 GMT\r\netag: \"69f1a71a-35a\"\r\nexpires: Thu, 23 Jul 2026 06:06:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":858,"size_decoded":1209,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7c3bddbf208d8bbe465b0d7c9649d4a4","sha1":"99128a5fe99c97a9a1c318abb48478ee46473a42","sha256":"a78009e53df3e273efb3bac36396f55afd7d528b134403ca263b32722863c2d0","sha512":"03531925100b7beb9f343a69e2213b8c146d9a23244e6d014c77fd2b2b28375e877854dca87c7ffaf9c9f3fda3c93f6a5acc60067127257e0c9cfb5f8b2b0721","ssdeep":"","tlshash":"5111c02dc5fe62300277307c2b57c1b13536886f644fda60bb0e67115f90e3589992c2","first_seen":"2025-12-26T10:23:56.803332Z","last_seen":"2026-07-22T18:15:28.912817Z","times_seen":5,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjxfxn.com/log1.php?t=1784743568072","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xjxfxn.com/","date":"2026-07-22T18:06:08.089Z","timestamp":1784743568089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjxfxn.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Jul 2026 02:00:00 GMT","end":"Sun, 18 Oct 2026 01:59:59 GMT"},"fingerprint":{"sha1":"F8:C0:34:C3:DB:D9:0D:0A:02:A1:6E:DB:19:E8:6B:3F:3A:9B:C5:85","sha256":"F5:99:5B:B5:29:73:B7:03:CD:11:7F:70:6D:19:33:16:EC:4B:D2:88:62:91:B2:D2:1C:69:09:B6:96:E2:02:89"}}},"request":{"raw":"GET /log1.php?t=1784743568072 HTTP/1.1\r\nHost: xjxfxn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xjxfxn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 18:06:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8140,"size_decoded":3148,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (308)","md5":"adc55374a8425423f2fee67581d89cf9","sha1":"e2f3a63d7b69a2bdfc05155c8c20fc41c046031a","sha256":"7b90e7116c10ab056fb87c40e4fbe49e160727211900904f90da2dbad1dbccaf","sha512":"fe1bc3e1d67917490d67c00b1a48f81deff9e6d573ce7dfbe0b0551a389a56ebe3f0f936508fda0a94171b8f39326f7c77d08d043fd7730c42aa8f1249eea021","ssdeep":"192:JHnDU+Fk6L8GgagTU/Gj/A28yBRPJiacmMyYriApNnsh9xQoivDyxJsO1O:fFf/J6GaUxNnsbxQRWxJsO1O","tlshash":"b1f1641debb271355867b4b8676a9b37a1702133e60bc9553d9ca3d8cf80cb149a324e","first_seen":"2026-07-22T18:06:38.697689Z","last_seen":"2026-07-22T18:15:28.913599Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjxfxn.com/favicon.ico","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjxfxn.com/","date":"2026-07-22T18:06:08.202Z","timestamp":1784743568202,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjxfxn.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Jul 2026 02:00:00 GMT","end":"Sun, 18 Oct 2026 01:59:59 GMT"},"fingerprint":{"sha1":"F8:C0:34:C3:DB:D9:0D:0A:02:A1:6E:DB:19:E8:6B:3F:3A:9B:C5:85","sha256":"F5:99:5B:B5:29:73:B7:03:CD:11:7F:70:6D:19:33:16:EC:4B:D2:88:62:91:B2:D2:1C:69:09:B6:96:E2:02:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xjxfxn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjxfxn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjxfxn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjxfxn.com/","date":"2026-07-22T18:06:08.537Z","timestamp":1784743568537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjxfxn.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Jul 2026 02:00:00 GMT","end":"Sun, 18 Oct 2026 01:59:59 GMT"},"fingerprint":{"sha1":"F8:C0:34:C3:DB:D9:0D:0A:02:A1:6E:DB:19:E8:6B:3F:3A:9B:C5:85","sha256":"F5:99:5B:B5:29:73:B7:03:CD:11:7F:70:6D:19:33:16:EC:4B:D2:88:62:91:B2:D2:1C:69:09:B6:96:E2:02:89"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xjxfxn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjxfxn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 18:06:08 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"69f1a43f-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":44116,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-07-26T04:11:06.907341Z","times_seen":13410,"resource_available":true,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":999,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjxfxn.com/4.png","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjxfxn.com/","date":"2026-07-22T18:06:08.547Z","timestamp":1784743568547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjxfxn.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Jul 2026 02:00:00 GMT","end":"Sun, 18 Oct 2026 01:59:59 GMT"},"fingerprint":{"sha1":"F8:C0:34:C3:DB:D9:0D:0A:02:A1:6E:DB:19:E8:6B:3F:3A:9B:C5:85","sha256":"F5:99:5B:B5:29:73:B7:03:CD:11:7F:70:6D:19:33:16:EC:4B:D2:88:62:91:B2:D2:1C:69:09:B6:96:E2:02:89"}}},"request":{"raw":"GET /4.png HTTP/1.1\r\nHost: xjxfxn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjxfxn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 18:06:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Oct 2025 20:47:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903cec7-18688\"\r\nexpires: Fri, 21 Aug 2026 18:06:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99976,"size_decoded":100051,"mime_type":"image/png","magic":"PNG image data, 578 x 215, 8-bit/color RGBA, non-interlaced","md5":"662b850beb7e17e21bab0c4d4242b0b1","sha1":"f3e96abc4e7e61a0a82261bd5b720ac3835de6b0","sha256":"9a9b67cae95acd32901720dd045d07a1d744b057f3ba2a372c24917b637081a4","sha512":"6c6d087a1ed0730d67b1cd272daa325bc6887861cbe3a68dd1fadf310a6f3ac5fd798f0d808abf6e1115c017a9a1034bcb70ccb25e57e3cb5e01e65437916ca5","ssdeep":"1536:rIZfuH5R3XeNMv0YOfY8BUtjqJod8vVRP7a5I5bN1bx/uBePT8m:8ZE6MUY8CVqJodqHP7Y0Zxxgcgm","tlshash":"f9a312852a1fef6d8a271ab7ce03f011a592371971480eff7259d47632449b18ea4fec","first_seen":"2025-11-05T16:03:28.286195Z","last_seen":"2026-07-22T18:15:28.918812Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.india.gov.in/sites/upload_files/npi/files/favicon_0.ico","fqdn":"www.india.gov.in","domain":"india.gov.in","tld":"gov.in"},"ip":{"addr":"23.214.96.143","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjxfxn.com/","date":"2026-07-22T18:06:08.958Z","timestamp":1784743568958,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /sites/upload_files/npi/files/favicon_0.ico HTTP/1.1\r\nHost: www.india.gov.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjxfxn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html; charset=utf-8\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://code.jquery.com https://cdn.jsdelivr.net https://swalekh.blob.core.windows.net https://reverie-stt-sdk https://www.google-analytics.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: static.india.gov.in *.gov.in *.googleapis.com *.mygov.in *.india.gov.in *.nic.in static2.india.gov.in v2.india.gov.in; connect-src 'self' https: wss: https://static.india.gov.in https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self';\r\nfeature-policy: geolocation 'none'; microphone 'none'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=16000000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 28020\r\ncache-control: max-age=2592000\r\ndate: Wed, 22 Jul 2026 18:06:09 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjxfxn.com/log_click.php?client_id=70920f88-575a-4c35-97f2-bc4abca1357a","fqdn":"xjxfxn.com","domain":"xjxfxn.com","tld":"com"},"ip":{"addr":"43.128.27.21","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xjxfxn.com/","date":"2026-07-22T18:06:10.079Z","timestamp":1784743570079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjxfxn.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 20 Jul 2026 02:00:00 GMT","end":"Sun, 18 Oct 2026 01:59:59 GMT"},"fingerprint":{"sha1":"F8:C0:34:C3:DB:D9:0D:0A:02:A1:6E:DB:19:E8:6B:3F:3A:9B:C5:85","sha256":"F5:99:5B:B5:29:73:B7:03:CD:11:7F:70:6D:19:33:16:EC:4B:D2:88:62:91:B2:D2:1C:69:09:B6:96:E2:02:89"}}},"request":{"raw":"GET /log_click.php?client_id=70920f88-575a-4c35-97f2-bc4abca1357a HTTP/1.1\r\nHost: xjxfxn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xjxfxn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client_id=70920f88-575a-4c35-97f2-bc4abca1357a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 18:06:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":373,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"4c32938e6cbb55d843e28803ed45c7ea","sha1":"2808a263424025cf9925a07f78474f07eeddb95d","sha256":"e0343618c4daa2a7dfeb84acb9ded3523c27b1e1a7ff3ddd1e75f979c64281fd","sha512":"5c7ab87ae959c5e286a60d5fca5d66bf2f4104b1629a11a97518513c877d02ee2dc267a32828252f8eb66ae99e469c856b62dd2ada67a9d360de93fe1ec7dae1","ssdeep":"","tlshash":"38d0a740f8977f47212d4341fdf349c56756fb05162b9ec15e12514c2aedc4e44b8802","first_seen":"2026-07-22T18:06:38.704867Z","last_seen":"2026-07-22T18:06:38.704867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"xjxfxn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}