{"report_id":"5039235d-e7e6-44a3-ac7a-ebabba2fbdf7","version":6,"status":"done","tags":[],"date":"2026-04-06T11:01:26Z","url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":0,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"title":"楽天e-NAVI","dom":{"size":18876,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15393)","md5":"38e8b5928a528359db10afebdb74e2fd","sha1":"cd61896ea3fb613a48d929e4f0e0c1385c3d29c2","sha256":"f746f76da00313a15c1ef91d59fb4fe02dfc7235ee3327de12471e97faa2b198","sha512":"f5c87af7e1728ef9a32cf1a626729b69590b4f571a8f07c84b7d6af53541e8c76998b6e3ffd3b013d5ebba215ff7cefb00e704d165c1f6aadf5afcbe057e1b2c","ssdeep":"192:S8lVbqIsm0MVVr3SSXzY31SO3jhxg+/fHQoq76sJnJiJP6n9/KPMS06:S8lVbqIsm0MVVr3SSXz3O3txfOSCG","tlshash":"f3821135b6006067d127c7de64b5bf0f759ef38fc14b8494a5af82a06ed2eb0f492858","dom_hash":"domhash67238a5f084bbfd943a793a4fc72b488","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":0,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T11:01:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amberxiao.cn","ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"domain_registered":"2023-04-11","domain_rank":0,"first_seen":"2026-04-06T11:01:28.096695Z","last_seen":"2026-04-06T11:01:28.096695Z","alert_count":66,"request_count":33,"received_data":702037,"sent_data":15884,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-23T10:11:22.406448Z","times_seen":235723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/B1mJW4nA.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2f1e8abb054423152c75d2abf5940c3","sha1":"a0ffe897c0ae0f0f150853f559069d1f733b3238","sha256":"7de3ca0c09d229344ed792cfe80f2e44c9bee56eaaa83c2b9509c96b8f8b6f68","sha512":"c66506da653df2ad3c718f63f3f351801d23608b5a4dfc05dfbd610b5ba67d4d0b7a7d69853b07785a00d4ef9fea4fb6d51a0062b5d0192d1a0200189dc9f230","ssdeep":"768:YzJENSox0h6wlGVpUQJfFJCy+K7WE+0cGzksqfz1BcUDxnvwTM95JhKS6DSBiU28:HzPQ9cEXMA","tlshash":"1503fac8b261546683e2a1a384750203f33999157408865cbb2ceef7ad7eeca7173f75","size":41394,"data":"","first_seen":"2025-06-24T22:10:16.163277Z","last_seen":"2026-07-12T22:39:11.977554Z","times_seen":19796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-23T10:11:22.406448Z","times_seen":235723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Cqcm225F.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5b69f2ff3e65efcb83877541dd0910e5","sha1":"99e3ff0ca3a3abc1e7b392c64fcf3497765caad2","sha256":"e9bbf40a78994adf296ebb1cf1726a69c5c74d0cf0989c46f997ac98f0d80be1","sha512":"71ecb54fe2f34752042b1d5e276962ede84929d525331cba12f7f122d0d08796436f6015a9f7016fb9b4684a2d7234e1397ecbef21c8cb15da8be3face341d67","ssdeep":"384:lmKyLrS1qvEG6hB1Ah4R4mGn6BhWDXBBKRkuPxGFs9GhEsF89wwLHUIZ3ojv9P04:lm1gqvEG6hvGn6L0ORkuPxGFsQ2ww9Wv","tlshash":"74a2b9d9efb0b2f8a98d6f4daf316c98315b25fe3e33cf54819d8b80558394c9a48854","size":22916,"data":"","first_seen":"2026-03-30T14:12:58.412355Z","last_seen":"2026-05-30T13:06:09.607895Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-23T10:20:16.547248Z","times_seen":731257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/CCDcMnWH.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08436233253089dc66c7f5fd8129068","sha1":"35716a1f66c8d6e3a47a3e5aadec09b771e606c5","sha256":"f057ed653e96e415ea281e212edad18fd77a7d0f4756770fc9c413880edc47f8","sha512":"b0b076dcf1c08f73c15065309ca6dc12afa945be917417c779cf0ccdc60838af1032f6bfa958ab0de581c00a0a3ebde0c0d6ed0ca8434015671e93af96fdec86","ssdeep":"3072:F8Etdszt3Ewixr2ILhUy2pPtIyCSUy5/GJIjLAEPtCZ/2I:apEwi52I92pPtIQ/GJIjLnPtGv","tlshash":"1d344ad97296b0a253b325f1013f200bf23a2a6a3449d4d8f15dd8ca3db954981bbf7d","size":237368,"data":"","first_seen":"2026-03-17T19:33:03.27892Z","last_seen":"2026-05-31T16:59:27.81129Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/-r9DpnrB.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0213e39b14b1273a6829bdc3f28a4e9b","sha1":"2d505a3e2c6abcec58397f36164891f0d4ea796c","sha256":"2265f9289253e3632b6ae33f262a45b32398b9c2f3325b0108ee7207dfda8a41","sha512":"1cc53439f540fd100ddc99d141b72d1d7cfcd97c5cb5c1b415d191f5dd90d8b6bc22916f9d6f52597289d43b6e34fb4fe1a3ea5c08cc61111c496c0ed1c89e25","ssdeep":"384:fiRTONOEkzqJym8UL6wjnv2YMw+axkUsW4u0W3GsCUeMyU2x6wCEygq8KfaMGECG:aRPsxMmuKrgMPXt","tlshash":"2ad2dc503e49cd6052eb8ad4f0b2192164b9b306d1c344f9fa2583f11adfc7cea7b996","size":28321,"data":"","first_seen":"2026-03-30T14:12:58.402419Z","last_seen":"2026-05-30T13:06:09.601177Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/hCK99VLp.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ce516b643c7a627bcca27ce4a4e1fb4c","sha1":"9fcaf36e656a2faa97429ca46d29f8ec72d2438b","sha256":"28cc82fac8f605434f343362d51d72484c0c08fdb941f4ce1de23640cbba63e6","sha512":"35c6a3fc9b270d518ac19538374a2fba58f9aecd930c66534d15067e5a2105a95a1b9a4476edecd781ae61e4afa72a8307bfaf056ac56f32c5529885863bbffe","ssdeep":"","tlshash":"55213fc613213234564f0bee6faf790a402e53ec8a2c05d0a85827a2f747be7f85de04","size":1207,"data":"","first_seen":"2026-03-30T14:12:58.40892Z","last_seen":"2026-05-30T13:06:09.603802Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/DOlfRIEn.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61811ab510e6e5fa8f6fa8428f6bd7bf","sha1":"b33d5848b0edf9b86c5cda35c2ba6d2bb9ba787c","sha256":"52a7d8fad6a83b9f5863f74131ffb9bc091a3349c6e5469cde68fe2b73571d3f","sha512":"26c9001aafd9fb92d65efc6bf297a6f945664fd362bde74496e97c154a2ae8c988b8c39b08db082388312fdc9b398b2521590d6e7fb32155a9b4792d48487075","ssdeep":"384:HgNWfww/A/KYJkxTWvXZr7hfkNPfq0XFWEI8NJjkLWenevDhleZO:HgNWfwwAyHxTaBhfkpq01W8oLWSPZO","tlshash":"d4b25fd873a08ab5915b85e4981f6000f039dfbae4668070f2fdc5b03d92dc97b95b79","size":25073,"data":"","first_seen":"2026-03-30T14:12:58.40986Z","last_seen":"2026-05-30T13:06:09.600594Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Dw3qHFpU.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b48227890a8515fb8b6125a027ed1bdb","sha1":"e2e03519ddfc440a1a8867913b01b853924f837d","sha256":"9fdcf69dc7a9e1e635ade466fd74877293c20d52757def15adda5c4d904c163e","sha512":"0f17f862b8ca401337b87b1f199601b142455894ffc8e762af009e3e87d8eed22fe57bad8119b3fc9e7cc4c7c7769c519a0184abb52a1713793d7572d667029e","ssdeep":"","tlshash":"8aa0120355cc26bc0d2000390b01d62c467104182f641361a40e0a2c03059512e09541","size":84,"data":"","first_seen":"2025-09-19T11:50:12.641032Z","last_seen":"2026-05-30T13:06:09.600054Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-23T10:11:22.406448Z","times_seen":235723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-23T10:20:16.547248Z","times_seen":731257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/HUrAbw0B.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7db5601b2b0bb369acbf65f8a2b1a9f3","sha1":"c70f40d35ae96903929c6b9751954c784292dda4","sha256":"d3ca37963b252b0b1c2d61d7d5505c68ec469681451546785cb31b753ae88200","sha512":"60be1304bd25afb7baa4e1d16c66f931af07f389c5c736f691ec060a46e41f1842b4dafc221fb2f9c9e587932c236c2448cccdd07426e374c827718c2cdcc1e5","ssdeep":"","tlshash":"0ca01202444d15ee0e1000594b449928057204582d3402635c0d0a2447151414e0a505","size":82,"data":"","first_seen":"2025-09-19T11:50:12.656606Z","last_seen":"2026-05-30T13:06:09.618709Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-23T10:20:16.547248Z","times_seen":731257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Z9_ezat5.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"779b37f04f5b3256ff4cc0d2e2f7ed7b","sha1":"df86ea7e19aea96b5ccbd05bca081a38fa9563bb","sha256":"c997d1b8669bfb807bad3ae27b9412a6e16a8d16cb052b85f54e81323aebd2aa","sha512":"7b1999d593eb69fdd7d7764e5b31b0b0ca8530936018c172b2c8374e8c9c52cf9650bb4139f5c00a951c59c2d1e488dee7f8634f79520ddc615817a5dd6757a4","ssdeep":"","tlshash":"2a011e7c6c95903c986ba4b8162a11434b6d6fe5779a0c70a08d417da1238bcfbcb714","size":842,"data":"","first_seen":"2026-03-30T14:12:58.403632Z","last_seen":"2026-05-30T13:06:09.615833Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/NwBb85JK.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2123cbeb8f8bf444ccffb5ca6d2a25d1","sha1":"b8936d98bbe196a5b73dadac463136b052e2614a","sha256":"6e11665d84a70ca4de091ad543286986556f390894e87ad9c591dd216d150888","sha512":"364cbc795c6cea7d845926e978b6420755ec12fbe53339bba8637e2e43b1c7e4385794212859b60e9d052356d5bf1aad0f1deba254bd0afc3fdc4cfeb99176e2","ssdeep":"384:1GERWOkfcBh0vOAxNBTxFfkhgiSHvelJ9sBFw:1GEA4BKx3xFaFM2lJWW","tlshash":"0782d83cc200c17ef07f81ad61e93154b06d2bd9d15249abe2fdc9b05a16e78e61ea28","size":18402,"data":"","first_seen":"2026-03-30T14:12:58.413852Z","last_seen":"2026-05-30T13:06:09.621183Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amberxiao.cn/s3jaas29gd.png","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:55.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /s3jaas29gd.png HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:55 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aad3bd278f678e0130de8270d76d8685","sha1":"3df1e1de8d09f143b3a86820cccba2ede497ed87","sha256":"1b99284bfc6859dc384b7c81a29eda1eb815005952a1a78f6d7b21ab30726286","sha512":"48f2c31f2e20812e8f9e9e516851bf6fc478bff4dcd0fef5f03a1a4ec4178fe4c2aefdf860da23ae064775a4dcb409bb0aad822bbf42835b7f94761a8085a740","ssdeep":"","tlshash":"6ec02b2d39137c4cc5a3317422c37880c0ca83376cba41128400800331cf2998ac3397","first_seen":"2026-02-09T01:33:08.879169Z","last_seen":"2026-07-22T22:24:58.973778Z","times_seen":4070,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/open/?apiName=bZcI9tDHuOTqOU5eTm9NlfXvqus6OYVMuUj3FBprWcaP18UFj9jppjJmijkgR3KS","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:56.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"POST /open/?apiName=bZcI9tDHuOTqOU5eTm9NlfXvqus6OYVMuUj3FBprWcaP18UFj9jppjJmijkgR3KS HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 3659\r\nOrigin: https://amberxiao.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3659,"data":"{\"data\":\"yhacy5kTY7A6wG6jpZBtsdZ8uKd8cZLEcL5vivnwYAIOiZAs40Yzz5LPKiiZ9m3LtLSEX3kwRM7o93OJStFmd%2B0Ll2EowRJWz10tQtrk2x1rJI8gJT73K8DLrcMCWFmc8lWHOB4zejhw3y%2F0IF5e%2Far9M%2BwFfXAW%2FAiHgM8FOfaIow%2BdoKiPrr2T%2BKy990tljKWfRIxqEt3DwbhJP%2F6BLrwbRK3A2ew7qwCJ2W%2F9X%2Bg3ML7VUpzCMmFhjDe5HNsRK3eGjnOowTHk0QcSsSpyPbeDdPjifCnDR9t5XFEcNsEZDeEf5F%2FfTooD7s081qa3uA5ELMKgcasaCH3eZDr1HTWhwWFE7i1osjdZ6d%2Bi3UnYuC8dmOsoUh8sf%2BkA%2FIP%2BolqEUJk8SpimD83pUK108xm7UaQscEPEjwLpuIsvlbRVQyEOFwLza3zlPVciRVbhRLSmh5w02umzIZtkfKAUGBdl1T%2BrkwBqY27zhimLnMKld4Fz0nZRaW%2FQREDs9U8poduBNWpX%2FTOqkFeITO6kD60RJTCLO2hGWHOwKMs7zbTHI78srrOegfZkKDaknMMmkcqF2Glde6H5aaDDkKe4W7wGoxKP5PLZ%2BJVOvvC61TWXNHgH4QCZuQMFTU%2FAgbtAlH9NwdRc%2FPzQfkFW%2BW6evxtP4WXTbQsExJzSnP1WodPjLlDugvlVi9%2BCz%2Bd%2BT2eeF8M6ApIbUc5LaPQDU5aUI7eolsOFMAcdXGzxKftXbiboaYOzMoFA26uCaW0Y%2FKqxFa6wNIrUoxV4hget1p9uPMxWFk4ODVpMfJBodeHuOx7Dt9sJGI5YvlWW664SOwHHU320H%2FjPYTSOpZHsF6zdIRzAgU%2FT3FI%2FI4N6cSjkyLBpkMtNC0D3kSyfFTI2FKtbvY9o5FS81nmqtjF%2BAR3dk7jcfHE%2B2BBhLzAdvTWksHOwdwNJiA0zUnABn4sne4vbuFXuLp6WGA7Az8zLsygKU64l8ByaFCXEjZVB2mCgxHccGtFKU6Kmp8lwWBg9OoMXeWI9PKmDttgG9x5K4rcrjwgzb%2B7qn54NZIFtV6HJ%2B4QpcAMJZ7Vl7Cdwr4s7lFbLRcqCgSBXs%2BylFnEDiUQLUE8aaOqgoKua2CsvV3uc27PH0vX3%2FzPQt4efr63pOGUpc3yVoHSACjfFbDjEoLNYa2FmsNZfC2cWDv8Nj%2F3ViG5Qrt7VB2DXH5LzyR%2BGwpugxVoZA6OQRchThQxg1DjJmziURQUuSL3j7x3eONUvl6ObPEkhigIvgIu%2B09Q%2FkPTkY5ORKypsGnPBlkRPkV8YEWMxcC16FGCWIu4WqYLnNgIL07y9BAA5XsJSfgWZULcBoMq2siODjNWmgWUnJovMhwO5Py6gg%2B8hdhxZPlbVkN71rfbl8PCpQHw9ZR8PAKhilt%2F12tNfir%2F8115JrOdDnbPer9CzJiRQV33BToXxdQod9yzeq6LR8TXcFqpKvsDsGl4ahPpartS3PTDbr2i5bhfKAlUT%2BovoRm6Vf0Sc0J2MJi8ufbBN1%2BFzmKHkrkziF4Qew2CPZO36riiTC3K4UkjsbR%2BwRJmXurSZexr3ypAIwfGwsis5LpeOcMPn5QjwwYBAleQEh%2BMraPyl7MgBBzAzlsyNNLwqOI5iGhhxNKqVASOnVxuIUSNpAHb12hPjgmdziez3NDdguSiP%2FwaVnNExeDYiN1rGPmQmNwSBZYfM3diGic8i91ktV2nGWQt4cB0ajiKjGXfD9Wbh3Fy2DJ%2BZeiUCpHJOIJ28ZrefQt6q3cHqFX0%2Fw6uQH9Nf3GOfAU7ohAbrRweXxGkZmCVC6CoIGH5AHxEMc4zFvjRHT88EgZmVORUAIkoORIPk0eYaJ79u%2FqoqyCiU618uBqCEW1kSG8Qk6jCAVVxCnM9Apsp%2FiHz%2FASCO1uCV4V%2FeT%2BMQCMxhSnxcE3tgEXdfhVdFSPrn72Cjwbz1xTSJUh2WdUt7izE1Kz0P1O6zGoaLjggcFAhqxKJF%2FJOIgKl3%2FX%2FZ0UqX9cN8O0%2F%2FN0e%2F89vIL1g4Nv%2FdfCJrS4KGFtFb6G5Bx2%2F5NRCH3kGRa3er8QcUY9q0DGDOxMCf5EIv%2FEccGOQ%2B0QMVu%2BffT8Y7LvsIhAmruYovOztktKdiiT%2FkOIakcg%2BnInxky8YwPHxVrayn5R%2FNqcl%2BxT3FJd%2Bk47qAxjhzmpIV76OQ8c8Jj1YW1DeRXbTuOAAP%2BA0L0ciboLgQ%2Fax79UxLRdTVi7JmBI5%2BmOzYhzPPBSI6uEKx0GiWKrVf9XRtNcSBEBsdBqfSuWEpk5pYQX236lu0ae9m287sQfUjykI1vDWGn%2BCnZF9ewWgf0xiHjK8ffk28%2FhPs7fvu5Ib2oeDSfvnRGlHP2m4eq%2F5adVjM11SUTgPXdZ%2F%2BK5cxlkxjGdRVipCUSHZgRhGnSULLNTpUcxjwokA7CYMwtGA1Yv%2Fa49czyOaqE%2Fnp0L2ftxD%2FbIPnP6Tc3ZZSnIjHO9zixucaoGY1htr7UClgCOUvCWvHE9pq%2FmZMVmpFX0fBl%2FPelLo%2BzYfBdg4zSSHR25tqPMbLdTuy%2Fu2MDW8HkgSERdgV6%2BMn1ucBL3S6gYbkTXV73p9vu3sr6KbGbu2XDUmRrsoYmO7t1qcd9YVac27Z7NYIYQxhDOekxVOClBZvhKzj2djai6AdT5TU8hvDf7aVMIpsDEG0xQdnZ%2BepSfmcQHdkIR3wBdDSx%2Bo9fS52aK5a5bD%2BwMywLj73C6%2B%2FIJhUnEqCk%2FUUAw0ieFTzmJHflhuodFbTew7ds4PBJ96tFgAw%2FZmgVitAtL41pMqsdNgg1bXsZtXlObE6mBuYUNW5SPJgo6WkAxjAYkDJzmXp%2BkwW6EEygNlSoaABt99fg48DKzMWlE%2BemQ%2Fp5eVm2K4lfr%2FYIHor0e6rdtn8mHPbzsNTPglzbd9HT3h5bMJ2llTgkeRwGalDNUoYvPEHt%2BMCrwRwuPxYmkf7Xhazo01g%2BjZROUkM3YPh1mfD2DA%2Fn5mRMem2RmLXv9sig%2FHDsts%2BCk0iUJm2hwkPWtTyVvt50lmxIa%2FA3gOpwgmuWWyoyyJ9CZPeS5l7Vp0ys7fbsUYWMKYIAIwXfdvgd4T%2Fz7Y2eVFivl%2Bfgw7CUOTsWbOUjoi%2Bas2FG88wjt1GoIa2nnle2AixzWBg0CK54mKluSWSHvyrf%2F3dRlVxo3Dcfp5T0Y4d2N6YwY6orek6JDlbNNeQV5QPdMHzpix0yUqeGr9Sc8J6gFMJRVa0hzmca9TLLB62qtiwCWgG82%2FHK81Bw4W933VDJJ%2F5nwiYZmwHLjkoFto2%2BZBbi2aandjKfUWGO7SnrswKz6oNoIgvSJpZ%2F46fwOz%2BAyzClgwzZ2cphyi%2BIpJOdsIygHHPvbdDwwNyf6uF5rIR%2FdEmTKvplP4YwXIsa6oKgEUtnUyLtxpfS9tXMw%3D%3D\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:56 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin\r\nAccess-Control-Allow-Origin: https://amberxiao.cn\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Tue, 06 Apr 2027 17:00:56 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0a4a09f97c732edeabd8580d721e7c2","sha1":"f0e11c0e56128ba246d782c8678a2f88f4e2391b","sha256":"8bc55f760a8ad956e66394c3a32b26711b660c74d20d358b35ec1e3b2ba2c728","sha512":"1eca591203c21924c9b9582a162a01001acf4b5f1449f7842a0d171e99b265a34ca9bc7eb61d77ce4601e20e8d51748cc29b8d6df0072a6b9b91b6c6da0dc41c","ssdeep":"","tlshash":"9b800082020cace823233802320e2a8820e830a0c2802aaaac2c023c8f08c28e083220","first_seen":"2025-06-24T22:10:16.160171Z","last_seen":"2026-07-22T16:23:36.508635Z","times_seen":44355,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/B1mJW4nA.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:56.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/B1mJW4nA.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/CCDcMnWH.js\r\nCookie: locale=en-us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:56 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-a1b2\"\r\nExpires: Wed, 06 May 2026 11:00:56 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41394,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"f2f1e8abb054423152c75d2abf5940c3","sha1":"a0ffe897c0ae0f0f150853f559069d1f733b3238","sha256":"7de3ca0c09d229344ed792cfe80f2e44c9bee56eaaa83c2b9509c96b8f8b6f68","sha512":"c66506da653df2ad3c718f63f3f351801d23608b5a4dfc05dfbd610b5ba67d4d0b7a7d69853b07785a00d4ef9fea4fb6d51a0062b5d0192d1a0200189dc9f230","ssdeep":"768:YzJENSox0h6wlGVpUQJfFJCy+K7WE+0cGzksqfz1BcUDxnvwTM95JhKS6DSBiU28:HzPQ9cEXMA","tlshash":"1503fac8b261546683e2a1a384750203f33999157408865cbb2ceef7ad7eeca7173f75","first_seen":"2025-06-24T22:10:16.163277Z","last_seen":"2026-07-12T22:39:11.977554Z","times_seen":19796,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/NwBb85JK.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/NwBb85JK.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-47e2\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18402,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (17902)","md5":"2123cbeb8f8bf444ccffb5ca6d2a25d1","sha1":"b8936d98bbe196a5b73dadac463136b052e2614a","sha256":"6e11665d84a70ca4de091ad543286986556f390894e87ad9c591dd216d150888","sha512":"364cbc795c6cea7d845926e978b6420755ec12fbe53339bba8637e2e43b1c7e4385794212859b60e9d052356d5bf1aad0f1deba254bd0afc3fdc4cfeb99176e2","ssdeep":"384:1GERWOkfcBh0vOAxNBTxFfkhgiSHvelJ9sBFw:1GEA4BKx3xFaFM2lJWW","tlshash":"0782d83cc200c17ef07f81ad61e93154b06d2bd9d15249abe2fdc9b05a16e78e61ea28","first_seen":"2026-03-30T14:12:58.413852Z","last_seen":"2026-05-30T13:06:09.621183Z","times_seen":8,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":321,"dns":1,"connect":151,"send":0,"wait":151,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/hCK99VLp.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/hCK99VLp.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/DOlfRIEn.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-4b7\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1206)","md5":"ce516b643c7a627bcca27ce4a4e1fb4c","sha1":"9fcaf36e656a2faa97429ca46d29f8ec72d2438b","sha256":"28cc82fac8f605434f343362d51d72484c0c08fdb941f4ce1de23640cbba63e6","sha512":"35c6a3fc9b270d518ac19538374a2fba58f9aecd930c66534d15067e5a2105a95a1b9a4476edecd781ae61e4afa72a8307bfaf056ac56f32c5529885863bbffe","ssdeep":"","tlshash":"55213fc613213234564f0bee6faf790a402e53ec8a2c05d0a85827a2f747be7f85de04","first_seen":"2026-03-30T14:12:58.40892Z","last_seen":"2026-05-30T13:06:09.603802Z","times_seen":8,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Dw3qHFpU.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/Dw3qHFpU.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/NwBb85JK.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-54\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b48227890a8515fb8b6125a027ed1bdb","sha1":"e2e03519ddfc440a1a8867913b01b853924f837d","sha256":"9fdcf69dc7a9e1e635ade466fd74877293c20d52757def15adda5c4d904c163e","sha512":"0f17f862b8ca401337b87b1f199601b142455894ffc8e762af009e3e87d8eed22fe57bad8119b3fc9e7cc4c7c7769c519a0184abb52a1713793d7572d667029e","ssdeep":"","tlshash":"8aa0120355cc26bc0d2000390b01d62c467104182f641361a40e0a2c03059512e09541","first_seen":"2025-09-19T11:50:12.641032Z","last_seen":"2026-05-30T13:06:09.600054Z","times_seen":38,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T11:00:53.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/ HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:54 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-7bf\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1983,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d7851e1a1c87b0653eb0736b6a7d2a6d","sha1":"fd1329a5237288823c2f32c46a9875c28a6bade3","sha256":"f986a23661aa7b0f57af770687035334640a5f31811690ca2db61726beb32d94","sha512":"4f6bbdbec240e221f232a92795420542e19daa9aade17124476b5d9132d1a98124614583d5574acc23932e67edea78beeed2bdded099516ea0382c4f9e6d1a27","ssdeep":"","tlshash":"e2410f43e8105c0af2318352adeaf50502e9f32dc659a9c0a4de617b58d5fd1ecd362c","first_seen":"2026-03-17T19:33:03.272774Z","last_seen":"2026-05-31T16:59:27.810788Z","times_seen":32,"resource_available":true,"data":null}},"time_used":1541,"timings":{"blocked":689,"dns":371,"connect":154,"send":0,"wait":156,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/css/LlR3imLP.css","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:54.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/css/LlR3imLP.css HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:54 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-5335\"\r\nExpires: Wed, 06 May 2026 11:00:54 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19871)","md5":"b94cdf1df609d8f6a5566ed993e90bfd","sha1":"86ba3837a0d758d827de302ec4cdc6d25e9ebaa9","sha256":"1af2f392ba08ff724b76602cdac8776dfff98d9580b25fd6f7f138d077d7c998","sha512":"919c1b7213af013eb46b7dd6567d003d74d610426c4e3f7eda5bc99dddfed4f183bd8dd260c25d659525bd9b0bfea9bf95716f398931ee2cde4e4abf1043711f","ssdeep":"192:4xwOW9JyW9JyZ8a9WsfGqq/hobmMY22/r7cz1w/HZNU/dE8Lb3IoALP:qw09YqEoSwzw/HZNUQP","tlshash":"32a2162e6e10017a7c5380f6f5e5eb89b22671c1ef26a7fefd422500d7c73a65c92618","first_seen":"2026-03-17T19:33:03.265841Z","last_seen":"2026-05-31T16:59:27.810248Z","times_seen":32,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":310,"dns":1,"connect":149,"send":0,"wait":152,"receive":1,"ssl":160},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/open/?apiName=lUM%2FNLpz%2BfnHbq1NyYU6mVAKqb1wjQ6iEYu01fiUCeJSPcJMkGHUsxY1sfwoi3mO","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:56.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"POST /open/?apiName=lUM%2FNLpz%2BfnHbq1NyYU6mVAKqb1wjQ6iEYu01fiUCeJSPcJMkGHUsxY1sfwoi3mO HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 545\r\nOrigin: https://amberxiao.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":545,"data":"{\"data\":\"hKAsPg6Z7vfwK4Wk0q7Sgze%2BNDlO2wxrvP%2B46jnzSb6npmEAiFcBS68II5TtRSIPFdFtzD58UWVABqyRxZH5eLBS7wyi53BZHRzBTSi98M3i5ZIRUUYKzIyN0WjoPLOACT2pHDUftKMOEOl926vLaXVjcUIaBK0pmFittunSdTDlr4CGbR0hX1tpYyyemgFCYemWsbYGcdlsHqmyugt8Bz2maj7DlFSc9voQ742oJrYNvev13LudRzT3lCMmulfqeqWVR4vUuCf%2F6Jn19S2TItcMjf640bkPjibbFwbYVJQ00JoF17%2B%2BcVxLmOoGYrYoIEN2mKFwsXDa6N5aEvdi%2FmUgX3ciAclAE6WnKzWo6704qbM1YhWDiu6S%2B4ed7BUpKbDBwZiVQdu1oEWQJaaEdvVCt87G9%2BTuPR0VW2Lktedb6WIRN0ttOX58guikBTCh1%2BfQpBwzJ%2Bm2peli4EE40JINwE%2F9JKcJp0Tyv1giXlThkOs0sgmvtmXgfaIlVari\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:57 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin\r\nAccess-Control-Allow-Origin: https://amberxiao.cn\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Tue, 06 Apr 2027 17:00:57 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":475,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a04669161c6eda04a9d6a025e16f7bb","sha1":"0075054c18f7a46d11dccb9b0068ffc07928670b","sha256":"991161d6092442c1d7a9e69e0d5dd86a850bfff245fc3f4f81c09f20ef7000d0","sha512":"c6bedb8fa1128f86a2735fe19027a481e087260c06e3311a4e50d76b7b62455acdb584e62665bd59c8d20fce84fcecf799d225cd6ebdb16ea6543deca6aebd79","ssdeep":"","tlshash":"88f0d41910a4c6385e0b278f450d5d181eec6043b75d6c1ddf4cdf2159e36755537057","first_seen":"2026-04-06T11:01:34.746657Z","last_seen":"2026-04-06T11:01:34.746657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"amberxiao.cn/socket.io/?type=user\u0026uuid=b5fdd78c-4980-4e77-ab85-bc22337d8e69\u0026isNewUser=true\u0026EIO=4\u0026transport=websocket","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:57.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /socket.io/?type=user\u0026uuid=b5fdd78c-4980-4e77-ab85-bc22337d8e69\u0026isNewUser=true\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://amberxiao.cn\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1hPEfpCf3IqDLbFmRCxQAg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:57 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: aVpfXqs8upXgktXhKHTB46ZDp44=\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T10:24:32.331905Z","times_seen":17474225,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":1,"connect":150,"send":0,"wait":152,"receive":1,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Dw3qHFpU.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/Dw3qHFpU.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-54\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b48227890a8515fb8b6125a027ed1bdb","sha1":"e2e03519ddfc440a1a8867913b01b853924f837d","sha256":"9fdcf69dc7a9e1e635ade466fd74877293c20d52757def15adda5c4d904c163e","sha512":"0f17f862b8ca401337b87b1f199601b142455894ffc8e762af009e3e87d8eed22fe57bad8119b3fc9e7cc4c7c7769c519a0184abb52a1713793d7572d667029e","ssdeep":"","tlshash":"8aa0120355cc26bc0d2000390b01d62c467104182f641361a40e0a2c03059512e09541","first_seen":"2025-09-19T11:50:12.641032Z","last_seen":"2026-05-30T13:06:09.600054Z","times_seen":38,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":316,"dns":1,"connect":151,"send":0,"wait":149,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/-r9DpnrB.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/-r9DpnrB.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-6eaf\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28335,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27272)","md5":"0213e39b14b1273a6829bdc3f28a4e9b","sha1":"2d505a3e2c6abcec58397f36164891f0d4ea796c","sha256":"2265f9289253e3632b6ae33f262a45b32398b9c2f3325b0108ee7207dfda8a41","sha512":"1cc53439f540fd100ddc99d141b72d1d7cfcd97c5cb5c1b415d191f5dd90d8b6bc22916f9d6f52597289d43b6e34fb4fe1a3ea5c08cc61111c496c0ed1c89e25","ssdeep":"384:fiRTONOEkzqJym8UL6wjnv2YMw+axkUsW4u0W3GsCUeMyU2x6wCEygq8KfaMGECG:aRPsxMmuKrgMPXt","tlshash":"2ad2dc503e49cd6052eb8ad4f0b2192164b9b306d1c344f9fa2583f11adfc7cea7b996","first_seen":"2026-03-30T14:12:58.402419Z","last_seen":"2026-05-30T13:06:09.601177Z","times_seen":8,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":446,"dns":0,"connect":154,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/DOlfRIEn.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/DOlfRIEn.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-61f1\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24068)","md5":"61811ab510e6e5fa8f6fa8428f6bd7bf","sha1":"b33d5848b0edf9b86c5cda35c2ba6d2bb9ba787c","sha256":"52a7d8fad6a83b9f5863f74131ffb9bc091a3349c6e5469cde68fe2b73571d3f","sha512":"26c9001aafd9fb92d65efc6bf297a6f945664fd362bde74496e97c154a2ae8c988b8c39b08db082388312fdc9b398b2521590d6e7fb32155a9b4792d48487075","ssdeep":"384:HgNWfww/A/KYJkxTWvXZr7hfkNPfq0XFWEI8NJjkLWenevDhleZO:HgNWfwwAyHxTaBhfkpq01W8oLWSPZO","tlshash":"d4b25fd873a08ab5915b85e4981f6000f039dfbae4668070f2fdc5b03d92dc97b95b79","first_seen":"2026-03-30T14:12:58.40986Z","last_seen":"2026-05-30T13:06:09.600594Z","times_seen":8,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":321,"dns":0,"connect":158,"send":0,"wait":157,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/HUrAbw0B.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/HUrAbw0B.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/DOlfRIEn.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-52\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7db5601b2b0bb369acbf65f8a2b1a9f3","sha1":"c70f40d35ae96903929c6b9751954c784292dda4","sha256":"d3ca37963b252b0b1c2d61d7d5505c68ec469681451546785cb31b753ae88200","sha512":"60be1304bd25afb7baa4e1d16c66f931af07f389c5c736f691ec060a46e41f1842b4dafc221fb2f9c9e587932c236c2448cccdd07426e374c827718c2cdcc1e5","ssdeep":"","tlshash":"0ca01202444d15ee0e1000594b449928057204582d3402635c0d0a2447151414e0a505","first_seen":"2025-09-19T11:50:12.656606Z","last_seen":"2026-05-30T13:06:09.618709Z","times_seen":38,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/CCDcMnWH.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:54.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/CCDcMnWH.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:54 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-39f38\"\r\nExpires: Wed, 06 May 2026 11:00:54 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237368,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30160)","md5":"a08436233253089dc66c7f5fd8129068","sha1":"35716a1f66c8d6e3a47a3e5aadec09b771e606c5","sha256":"f057ed653e96e415ea281e212edad18fd77a7d0f4756770fc9c413880edc47f8","sha512":"b0b076dcf1c08f73c15065309ca6dc12afa945be917417c779cf0ccdc60838af1032f6bfa958ab0de581c00a0a3ebde0c0d6ed0ca8434015671e93af96fdec86","ssdeep":"3072:F8Etdszt3Ewixr2ILhUy2pPtIyCSUy5/GJIjLAEPtCZ/2I:apEwi52I92pPtIQ/GJIjLnPtGv","tlshash":"1d344ad97296b0a253b325f1013f200bf23a2a6a3449d4d8f15dd8ca3db954981bbf7d","first_seen":"2026-03-17T19:33:03.27892Z","last_seen":"2026-05-31T16:59:27.81129Z","times_seen":31,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/css/uSExCp71.css","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:57.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/css/uSExCp71.css HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-1426\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3728)","md5":"4562d4ae284462a96d1a7de488078f2e","sha1":"30277c5e32c81b68236385b8df66f00aeef2e813","sha256":"5f430b05f41fe414ff0018f7a1cfbc6fc7b6f3b19f77574b8a5553bc6e785090","sha512":"705e124b6c753b223793d6d86ed5faf54102a725c1fea7c6ae7bf98df5cd27f00cf914510c2f974ba444d2a7a57e0df0ffc1fe4085303b6e6d946f62da454d27","ssdeep":"96:ci/HogH6GjRmsAkxo0eqwXtX96jFMO2qwXtX96jFMxLCtojzm:ci/HogHvj4sZxo0eqKj65MO2qKj65MxW","tlshash":"4cb120a31e44d368f817d6613af2a747a535a823bde13bbe4d113960c38f359d812b86","first_seen":"2026-03-30T14:12:58.416421Z","last_seen":"2026-05-30T13:06:09.605898Z","times_seen":8,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/rc-logo_Card_1.svg","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/rc-logo_Card_1.svg HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T10:24:32.331905Z","times_seen":17474225,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/favicon.ico","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:55.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:55 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aad3bd278f678e0130de8270d76d8685","sha1":"3df1e1de8d09f143b3a86820cccba2ede497ed87","sha256":"1b99284bfc6859dc384b7c81a29eda1eb815005952a1a78f6d7b21ab30726286","sha512":"48f2c31f2e20812e8f9e9e516851bf6fc478bff4dcd0fef5f03a1a4ec4178fe4c2aefdf860da23ae064775a4dcb409bb0aad822bbf42835b7f94761a8085a740","ssdeep":"","tlshash":"6ec02b2d39137c4cc5a3317422c37880c0ca83376cba41128400800331cf2998ac3397","first_seen":"2026-02-09T01:33:08.879169Z","last_seen":"2026-07-22T22:24:58.973778Z","times_seen":4070,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/css/BBN0Z9RD.css","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:57.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/css/BBN0Z9RD.css HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-5e9\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"34961cc4227836e4a3178c4d4ca7c8f5","sha1":"b25d0dcfd1d5fedbee3b1f5c31a32acf83584033","sha256":"122794aab3a2bb9072b7d46b6fcf6851efefa42875447aecb0c9ed3bbe98970a","sha512":"303791f09db921f48a03ca2a6d9bf7f4d85fdfac565ff015ec6978ffe489a31589bf471bddcb3fd4e77705ed64542af425bcae4bb2df2d558ff3a06b6e080a3c","ssdeep":"","tlshash":"92315c030d04e7a1f883c422a9f7d71b10b94157bce23abf1d58bd50eb5f20dd949284","first_seen":"2026-03-30T14:12:58.401472Z","last_seen":"2026-05-30T13:06:09.611595Z","times_seen":8,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Z9_ezat5.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/Z9_ezat5.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-34a\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":842,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (841)","md5":"779b37f04f5b3256ff4cc0d2e2f7ed7b","sha1":"df86ea7e19aea96b5ccbd05bca081a38fa9563bb","sha256":"c997d1b8669bfb807bad3ae27b9412a6e16a8d16cb052b85f54e81323aebd2aa","sha512":"7b1999d593eb69fdd7d7764e5b31b0b0ca8530936018c172b2c8374e8c9c52cf9650bb4139f5c00a951c59c2d1e488dee7f8634f79520ddc615817a5dd6757a4","ssdeep":"","tlshash":"2a011e7c6c95903c986ba4b8162a11434b6d6fe5779a0c70a08d417da1238bcfbcb714","first_seen":"2026-03-30T14:12:58.403632Z","last_seen":"2026-05-30T13:06:09.615833Z","times_seen":8,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":320,"dns":0,"connect":154,"send":0,"wait":152,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/open/?apiName=QlSOByLybnuRktxLfcx%2FRrjMHqKrRGZzUnlt%2FWUpZJfsSIRZDJ%2FTtmQZnloargU6\u0026uuid=b5fdd78c-4980-4e77-ab85-bc22337d8e69","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /open/?apiName=QlSOByLybnuRktxLfcx%2FRrjMHqKrRGZzUnlt%2FWUpZJfsSIRZDJ%2FTtmQZnloargU6\u0026uuid=b5fdd78c-4980-4e77-ab85-bc22337d8e69 HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Tue, 06 Apr 2027 17:00:58 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b31d2e449dea837b0a1667e0cc568ccd","sha1":"f2a9342124b0738dba571aa4a25f816d62f58a18","sha256":"8eb434031c800898502e49fa1b85131f3ab143b27d0cfceff7c7f05026f5a823","sha512":"a7b60b301b8da23327accbca029866cf274f76c8b566b5c7ecc52427e3d1739b95d71c69a04c37b7d8f689ba47e21898538df2cf04f9d5370c8c07ca4cc37c7b","ssdeep":"","tlshash":"0da0024116085ca8de527481390e1568afe53245f5441515999c553c8f05828e1a6924","first_seen":"2025-04-09T12:11:12.713224Z","last_seen":"2026-07-13T18:09:18.180467Z","times_seen":249,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":1,"connect":151,"send":0,"wait":164,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/DOlfRIEn.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/DOlfRIEn.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/CCDcMnWH.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-61f1\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24068)","md5":"61811ab510e6e5fa8f6fa8428f6bd7bf","sha1":"b33d5848b0edf9b86c5cda35c2ba6d2bb9ba787c","sha256":"52a7d8fad6a83b9f5863f74131ffb9bc091a3349c6e5469cde68fe2b73571d3f","sha512":"26c9001aafd9fb92d65efc6bf297a6f945664fd362bde74496e97c154a2ae8c988b8c39b08db082388312fdc9b398b2521590d6e7fb32155a9b4792d48487075","ssdeep":"384:HgNWfww/A/KYJkxTWvXZr7hfkNPfq0XFWEI8NJjkLWenevDhleZO:HgNWfwwAyHxTaBhfkpq01W8oLWSPZO","tlshash":"d4b25fd873a08ab5915b85e4981f6000f039dfbae4668070f2fdc5b03d92dc97b95b79","first_seen":"2026-03-30T14:12:58.40986Z","last_seen":"2026-05-30T13:06:09.600594Z","times_seen":8,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/rc-logo_Card_1.svg","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/rc-logo_Card_1.svg HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4686\r\nLast-Modified: Sun, 02 Nov 2025 11:47:28 GMT\r\nConnection: keep-alive\r\nETag: \"690744d0-124e\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdfce34b0d48c10adb6c8752c5647cc0","sha1":"eb908c34a18277adc3fd5ea2c214af297d705f6a","sha256":"2621dd1a508014e3adeca5857a2df1226f9321bc74039fbf86ee1d7b218a8f96","sha512":"ada1e13981ab451fd047bec18b767010fbc54672b9b517f38d2a9cd81acd8a28b5245e8cba26844bf490ab691c3475daf5ce0c990ad6ae8259939a99874099ba","ssdeep":"96:l1va0uAPfZs4S37MZ/YBUp5STzix0neZ85qXEuEzxnaPJW:l1KkpsaaeyVhzxnp","tlshash":"b5a181f3361d22e0ee430fa4a6961c39952f28f72ea28ed981a457f97c3606d54cdcc4","first_seen":"2023-06-10T07:08:00Z","last_seen":"2026-07-15T00:23:49.536802Z","times_seen":204,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Cqcm225F.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/Cqcm225F.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-5984\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22916,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22915)","md5":"5b69f2ff3e65efcb83877541dd0910e5","sha1":"99e3ff0ca3a3abc1e7b392c64fcf3497765caad2","sha256":"e9bbf40a78994adf296ebb1cf1726a69c5c74d0cf0989c46f997ac98f0d80be1","sha512":"71ecb54fe2f34752042b1d5e276962ede84929d525331cba12f7f122d0d08796436f6015a9f7016fb9b4684a2d7234e1397ecbef21c8cb15da8be3face341d67","ssdeep":"384:lmKyLrS1qvEG6hB1Ah4R4mGn6BhWDXBBKRkuPxGFs9GhEsF89wwLHUIZ3ojv9P04:lm1gqvEG6hvGn6L0ORkuPxGFsQ2ww9Wv","tlshash":"74a2b9d9efb0b2f8a98d6f4daf316c98315b25fe3e33cf54819d8b80558394c9a48854","first_seen":"2026-03-30T14:12:58.412355Z","last_seen":"2026-05-30T13:06:09.607895Z","times_seen":8,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":459,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Z9_ezat5.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/Z9_ezat5.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/DOlfRIEn.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-34a\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":842,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (841)","md5":"779b37f04f5b3256ff4cc0d2e2f7ed7b","sha1":"df86ea7e19aea96b5ccbd05bca081a38fa9563bb","sha256":"c997d1b8669bfb807bad3ae27b9412a6e16a8d16cb052b85f54e81323aebd2aa","sha512":"7b1999d593eb69fdd7d7764e5b31b0b0ca8530936018c172b2c8374e8c9c52cf9650bb4139f5c00a951c59c2d1e488dee7f8634f79520ddc615817a5dd6757a4","ssdeep":"","tlshash":"2a011e7c6c95903c986ba4b8162a11434b6d6fe5779a0c70a08d417da1238bcfbcb714","first_seen":"2026-03-30T14:12:58.403632Z","last_seen":"2026-05-30T13:06:09.615833Z","times_seen":8,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/Cqcm225F.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/Cqcm225F.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/DOlfRIEn.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-5984\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22916,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22915)","md5":"5b69f2ff3e65efcb83877541dd0910e5","sha1":"99e3ff0ca3a3abc1e7b392c64fcf3497765caad2","sha256":"e9bbf40a78994adf296ebb1cf1726a69c5c74d0cf0989c46f997ac98f0d80be1","sha512":"71ecb54fe2f34752042b1d5e276962ede84929d525331cba12f7f122d0d08796436f6015a9f7016fb9b4684a2d7234e1397ecbef21c8cb15da8be3face341d67","ssdeep":"384:lmKyLrS1qvEG6hB1Ah4R4mGn6BhWDXBBKRkuPxGFs9GhEsF89wwLHUIZ3ojv9P04:lm1gqvEG6hvGn6L0ORkuPxGFsQ2ww9Wv","tlshash":"74a2b9d9efb0b2f8a98d6f4daf316c98315b25fe3e33cf54819d8b80558394c9a48854","first_seen":"2026-03-30T14:12:58.412355Z","last_seen":"2026-05-30T13:06:09.607895Z","times_seen":8,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/css/dp1rDZPC.css","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:57.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/css/dp1rDZPC.css HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-5ee\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6adb8ce462e3b5070d20b6aad5d8f80f","sha1":"d9608e4302efb7f8593caae1c5d53370ae5422c2","sha256":"5e664208dc27d9a245571cc70206f756622349f95de3cd7d556a6a25b41bf753","sha512":"e6d51901957f052da97db127092998337b26286e9bf90a3891da578d4fa8a19adbc4355d18aa2d7a9165e243cd0d5bd2589a6a37344d3ad2be48ab9860dd083e","ssdeep":"","tlshash":"bc3139131e45e381ee97e42128f78723643a6807bef63bff1d457810e75f608a615245","first_seen":"2026-03-30T14:12:58.417992Z","last_seen":"2026-05-30T13:06:09.602459Z","times_seen":8,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/HUrAbw0B.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/HUrAbw0B.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-52\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7db5601b2b0bb369acbf65f8a2b1a9f3","sha1":"c70f40d35ae96903929c6b9751954c784292dda4","sha256":"d3ca37963b252b0b1c2d61d7d5505c68ec469681451546785cb31b753ae88200","sha512":"60be1304bd25afb7baa4e1d16c66f931af07f389c5c736f691ec060a46e41f1842b4dafc221fb2f9c9e587932c236c2448cccdd07426e374c827718c2cdcc1e5","ssdeep":"","tlshash":"0ca01202444d15ee0e1000594b449928057204582d3402635c0d0a2447151414e0a505","first_seen":"2025-09-19T11:50:12.656606Z","last_seen":"2026-05-30T13:06:09.618709Z","times_seen":38,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":459,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/NwBb85JK.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/NwBb85JK.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/CCDcMnWH.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-47e2\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18402,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (17902)","md5":"2123cbeb8f8bf444ccffb5ca6d2a25d1","sha1":"b8936d98bbe196a5b73dadac463136b052e2614a","sha256":"6e11665d84a70ca4de091ad543286986556f390894e87ad9c591dd216d150888","sha512":"364cbc795c6cea7d845926e978b6420755ec12fbe53339bba8637e2e43b1c7e4385794212859b60e9d052356d5bf1aad0f1deba254bd0afc3fdc4cfeb99176e2","ssdeep":"384:1GERWOkfcBh0vOAxNBTxFfkhgiSHvelJ9sBFw:1GEA4BKx3xFaFM2lJWW","tlshash":"0782d83cc200c17ef07f81ad61e93154b06d2bd9d15249abe2fdc9b05a16e78e61ea28","first_seen":"2026-03-30T14:12:58.413852Z","last_seen":"2026-05-30T13:06:09.621183Z","times_seen":8,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/-r9DpnrB.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/-r9DpnrB.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/js/CCDcMnWH.js\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-6eaf\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28335,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27272)","md5":"0213e39b14b1273a6829bdc3f28a4e9b","sha1":"2d505a3e2c6abcec58397f36164891f0d4ea796c","sha256":"2265f9289253e3632b6ae33f262a45b32398b9c2f3325b0108ee7207dfda8a41","sha512":"1cc53439f540fd100ddc99d141b72d1d7cfcd97c5cb5c1b415d191f5dd90d8b6bc22916f9d6f52597289d43b6e34fb4fe1a3ea5c08cc61111c496c0ed1c89e25","ssdeep":"384:fiRTONOEkzqJym8UL6wjnv2YMw+axkUsW4u0W3GsCUeMyU2x6wCEygq8KfaMGECG:aRPsxMmuKrgMPXt","tlshash":"2ad2dc503e49cd6052eb8ad4f0b2192164b9b306d1c344f9fa2583f11adfc7cea7b996","first_seen":"2026-03-30T14:12:58.402419Z","last_seen":"2026-05-30T13:06:09.601177Z","times_seen":8,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/css/Do-L4wNu.css","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:57.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/css/Do-L4wNu.css HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-2f3f\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12095,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10665)","md5":"6f01635f360e7e2d9b9627992a56416f","sha1":"7521628eca83bc9e3b610fc3b93661f61fe8a31f","sha256":"c499fa8d06d6c3e84b1d99f760daf9858c13c73a73889129b0a0279520027102","sha512":"4ea563648687171b32ce903e90eb2877facf72fd4afb1a9d02fabbad8177438eb7f68258db82ff9fad947d4d082c165007442d6d7901081842a64bf5be100285","ssdeep":"96:DSrI1G+51dY/BeHmPzJTu/hJrOPlFn1xEnppK2t/INyktCdiG9ox0nF:Den+ZY/BeHm1ChJr4fgaPNykYdiGU0F","tlshash":"7242b8327f0cb216e43bc71b1571630d292db3cfa95333b9bd2fa960ca6b2857595248","first_seen":"2026-03-30T14:12:58.411359Z","last_seen":"2026-05-30T13:06:09.617571Z","times_seen":8,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/assets/js/hCK99VLp.js","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/assets/js/hCK99VLp.js HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amberxiao.cn/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 15 Mar 2026 14:32:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69b6c2fa-4b7\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1206)","md5":"ce516b643c7a627bcca27ce4a4e1fb4c","sha1":"9fcaf36e656a2faa97429ca46d29f8ec72d2438b","sha256":"28cc82fac8f605434f343362d51d72484c0c08fdb941f4ce1de23640cbba63e6","sha512":"35c6a3fc9b270d518ac19538374a2fba58f9aecd930c66534d15067e5a2105a95a1b9a4476edecd781ae61e4afa72a8307bfaf056ac56f32c5529885863bbffe","ssdeep":"","tlshash":"55213fc613213234564f0bee6faf790a402e53ec8a2c05d0a85827a2f747be7f85de04","first_seen":"2026-03-30T14:12:58.40892Z","last_seen":"2026-05-30T13:06:09.603802Z","times_seen":8,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":259,"dns":1,"connect":151,"send":0,"wait":153,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amberxiao.cn/jp/login_bg.png","fqdn":"amberxiao.cn","domain":"amberxiao.cn","tld":"cn"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amberxiao.cn/jp/","date":"2026-04-06T11:00:58.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amberxiao.cn","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 16:03:10 GMT","end":"Fri, 03 Jul 2026 16:03:09 GMT"},"fingerprint":{"sha1":"33:C3:20:E2:4F:FF:30:68:2F:E6:0B:56:B6:A1:85:C0:AD:0C:07:03","sha256":"3E:92:84:1A:BD:CB:DD:70:49:90:0A:F0:A2:D4:BD:A8:B1:2F:E6:FA:A6:72:46:0C:EA:92:0B:86:00:98:F3:46"}}},"request":{"raw":"GET /jp/login_bg.png HTTP/1.1\r\nHost: amberxiao.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amberxiao.cn/jp/assets/css/Do-L4wNu.css\r\nCookie: locale=en-us; uid=MAcuL7irpI6rr125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 06 Apr 2026 11:00:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 168838\r\nLast-Modified: Sun, 02 Nov 2025 11:47:28 GMT\r\nConnection: keep-alive\r\nETag: \"690744d0-29386\"\r\nExpires: Wed, 06 May 2026 11:00:58 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"17dfd5a87f5f086ec24fae2c8ed18536","sha1":"9be903ac49909bfe28bdf394cc4f56eace951b4b","sha256":"fc771caa3d3acd497a986e47b49ea37d54524c1d840e3a70ca16e9e32247213c","sha512":"0724b3f098a57f297f94e1bd8d3b56f4c1855d7761e22390cb3ae789f930ead10f83ac8fbe62d9f5218619e1b9f7e5d0a8ad920160e243c07baea9f60c4dde3a","ssdeep":"3072:1jZ7a3f3al4Iy6XZnflsVR3TFQ6LKCt2vFAOCh+oYgvVaewajapE52BN1dMOoGtv:1Na3fIk6XKN5Q6+BUILetja652BN1dhn","tlshash":"4af31266ce1e6493ffbc487563d5d8f2e7c81aff1baa480436879404b6238941adb41f","first_seen":"2025-03-17T02:22:56.851932Z","last_seen":"2026-05-30T13:06:09.623324Z","times_seen":45,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":454,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-06","alert":"Phishing Block","trigger":"amberxiao.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"amberxiao.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}