{"report_id":"51417a61-6e64-4463-9382-14c6f479c623","version":6,"status":"done","tags":[],"date":"2026-01-09T03:21:23Z","url":{"schema":"http","addr":"xbull.top","fqdn":"xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"104.21.79.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"title":"XBULL","dom":{"size":61179,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58918)","md5":"b30b76b9d82880c4a4445320bfd21707","sha1":"ac2a78f92f197244f864a8313124a5dfa6ebd601","sha256":"beda4df9ef891a2f661325dcb87789884c034f8faeed849b7a89b8c452304704","sha512":"07ef0f834a4c9cbf51df9d643f59f37a7c7db95fdedf54b9fc2a2510a31e00fedaedee6ce38dc366c659fa421d193ceddd9d4b8eabbb785b34630458131f3872","ssdeep":"1536:j150TWG9M7KxcT/ml3g4lNpI6ZgF50WOis/uNvImZw72ZS7fW75Ev7au7DD17CNu:RnG9M7KxcT/ml3g4lNpI6ZgF50WOr/uA","tlshash":"f353b6716118256753b7d8c0b4617f4e71a2e71bc20b85513bfcb2651fc7ea0fa2a0ea","dom_hash":"domhash92fed30032fab6e9d1a55ad6730dee7f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xbull.top","fqdn":"xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"104.21.79.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T03:21:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"web.xbull.top","ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-09T03:21:29.401071Z","last_seen":"2026-01-09T03:21:29.401071Z","alert_count":66,"request_count":66,"received_data":32630214,"sent_data":33508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}]},{"fqdn":"xbull.top","ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-09T03:21:29.41383Z","last_seen":"2026-01-09T03:21:29.41383Z","alert_count":1,"request_count":1,"received_data":3919,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"012e7c1ffb2c3c4411822a39ffcd924d","sha1":"2eb6150d80f9ef0f122e76338ff0292cad3c6cff","sha256":"ab99fae4703691c02d49c674d0aa49b360de33c88e90cee2254f6f31c731031a","sha512":"170cfbe329b2e2b5a830f339821c1afb184f6d505ff69f3e2268497b8ca74e882448f981c7352fdee11f5618292bd655e063eaad1354cde4c2ac9996856bc9c3","ssdeep":"","tlshash":"27d0ea5f14f9510bb3e1e641273d497e254c148c13791517b5a73c5be0ac91528df7c0","size":272,"data":"","first_seen":"2026-01-09T03:21:47.706044Z","last_seen":"2026-04-30T10:35:33.590612Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"2c6fc71320cbb628d5f15941b453f0e6","sha1":"a5d68b04af59f889c03aef290a3d38de79591307","sha256":"2b744412286afb4fb3173e0147279aa377c0295d1bf91137d369a69d68c531ca","sha512":"be04902af847648d2a63a16f0f7fbe014b2a73e797a485d59632e0c2d84f6be3a6f4e2a1806acbba47402287c542f010b953527980ba36f877b6414e8cdcc6d0","ssdeep":"","tlshash":"16f08b6c19e2c92024f1268c7cbc5cc5e0ba17075a8549c3383c9aac0fb9951977de01","size":650,"data":"","first_seen":"2025-03-18T22:09:14.272896Z","last_seen":"2026-07-17T15:49:47.091603Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b534fbf6d569d28f5083563bb0522458","sha1":"7b1b153f6943d00e7cb6a4bcdf57900017e5814e","sha256":"e774d3e0a7aa6d03dc94ee671ca3125a40dfd6bb4841aa309d53bd65213ac600","sha512":"d52fabd7662bd8e9806bc81eb598afab57b38207a0d4a02370b99c3d81364c4390d6aa2c896026c3c8627f2b52d1462da8adc7b760b54a7bd9ea7d7ab63f4169","ssdeep":"","tlshash":"2bb012db28d9f443074b718c002b485e5f8eabc50c886311f5f0a4a8699e47a5130dce","size":113,"data":"","first_seen":"2026-01-09T03:21:47.709799Z","last_seen":"2026-01-09T03:21:47.709799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"477b82c3269001e51a1c1ae479001099","sha1":"ed409be1d3848dbb45d2fa1e0a2f7737b2386d90","sha256":"0dd1e9af9dc79df121dc4733b63a4d6928b9386403e92f69d3cdbfed7b35b0cd","sha512":"2b1305b5aef66cc77fc4dfd8801d497d574e10dde91f9dbfdb39238941e5e8ab82d786f073c947cb32fa87addde1509db2cdd02491dda495a99567fad444a225","ssdeep":"","tlshash":"388004c530c57405011331100417c00d555c1ddc054404105c3044d0753341d51115c4","size":36,"data":"","first_seen":"2025-03-18T22:09:13.476025Z","last_seen":"2026-07-17T15:49:47.302457Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"47c5c49d70b9539ad2c5e964c04287c0","sha1":"1d8ec28a6f7e77a65c451e8feb352fa3258b6c23","sha256":"7b29db55b725323936858b265206f863d0965c0b3ae2cd6e9fc62b3f9733534d","sha512":"14ac2553dc0cc25ed08630b7b4e873b75877db7332ba13e9740d36d51c757751617d95048b3aeb376635bc84171ea27bb2a266fa6f1289e0464d6210e0fe902d","ssdeep":"","tlshash":"6061e7f640e26c1a0a7272a5d8660e14e4cf973f8e5909f23d3d4399cfba096428df16","size":3382,"data":"","first_seen":"2025-03-18T22:09:13.479143Z","last_seen":"2026-07-17T15:49:48.472Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"76f81403b4023f21f39b154c893c7bd6","sha1":"c82b4ed9aa4ecfb8b09fc321ec03b62161082ecb","sha256":"04ebf3194481fcc4ac22db0163464fbd5e00f3aff97b0b2768184681e98657ee","sha512":"ae296c34d807bcdd96fc5897de455e5e67bbdbe48599b62aec29cf6a20ebce6cbf66a90e26259f7ae53dbfd18cc194eee6d4bfd51188f4a8c9063ee9650c50e4","ssdeep":"","tlshash":"9ae08cf790e6299620e3761051fe6601a13a56cb8d48bd637b6e98610f0e04db437dd8","size":346,"data":"","first_seen":"2025-03-18T22:09:12.709012Z","last_seen":"2026-07-17T15:49:48.060753Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"76f81403b4023f21f39b154c893c7bd6","sha1":"c82b4ed9aa4ecfb8b09fc321ec03b62161082ecb","sha256":"04ebf3194481fcc4ac22db0163464fbd5e00f3aff97b0b2768184681e98657ee","sha512":"ae296c34d807bcdd96fc5897de455e5e67bbdbe48599b62aec29cf6a20ebce6cbf66a90e26259f7ae53dbfd18cc194eee6d4bfd51188f4a8c9063ee9650c50e4","ssdeep":"","tlshash":"9ae08cf790e6299620e3761051fe6601a13a56cb8d48bd637b6e98610f0e04db437dd8","size":346,"data":"","first_seen":"2025-03-18T22:09:12.709012Z","last_seen":"2026-07-17T15:49:48.060753Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"dd2846004388bcc70b71f4b0df3d0ca9","sha1":"cdfab9cf4f65928b63124ecd83fcf5aede640e28","sha256":"8a9c9058f06974ddda43a9593dc0602e962e335702b05bbe13ea313c51a28d31","sha512":"2697ee7523d5860f0226c3032887ba1b9f5e47ba51c9b8c2d7b4b675a4653950cf224d6c3b0be9ad4779654835fbb5298b2b00f5a3a72402baadd6973222adb6","ssdeep":"","tlshash":"95d0234d54d6dd3830b4325976f40d4bf0210a4715800892343c2c7c3f754292029d40","size":240,"data":"","first_seen":"2025-03-18T22:09:14.197579Z","last_seen":"2026-07-17T15:49:47.76364Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"477b82c3269001e51a1c1ae479001099","sha1":"ed409be1d3848dbb45d2fa1e0a2f7737b2386d90","sha256":"0dd1e9af9dc79df121dc4733b63a4d6928b9386403e92f69d3cdbfed7b35b0cd","sha512":"2b1305b5aef66cc77fc4dfd8801d497d574e10dde91f9dbfdb39238941e5e8ab82d786f073c947cb32fa87addde1509db2cdd02491dda495a99567fad444a225","ssdeep":"","tlshash":"388004c530c57405011331100417c00d555c1ddc054404105c3044d0753341d51115c4","size":36,"data":"","first_seen":"2025-03-18T22:09:13.476025Z","last_seen":"2026-07-17T15:49:47.302457Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"012e7c1ffb2c3c4411822a39ffcd924d","sha1":"2eb6150d80f9ef0f122e76338ff0292cad3c6cff","sha256":"ab99fae4703691c02d49c674d0aa49b360de33c88e90cee2254f6f31c731031a","sha512":"170cfbe329b2e2b5a830f339821c1afb184f6d505ff69f3e2268497b8ca74e882448f981c7352fdee11f5618292bd655e063eaad1354cde4c2ac9996856bc9c3","ssdeep":"","tlshash":"27d0ea5f14f9510bb3e1e641273d497e254c148c13791517b5a73c5be0ac91528df7c0","size":272,"data":"","first_seen":"2026-01-09T03:21:47.706044Z","last_seen":"2026-04-30T10:35:33.590612Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"2c6fc71320cbb628d5f15941b453f0e6","sha1":"a5d68b04af59f889c03aef290a3d38de79591307","sha256":"2b744412286afb4fb3173e0147279aa377c0295d1bf91137d369a69d68c531ca","sha512":"be04902af847648d2a63a16f0f7fbe014b2a73e797a485d59632e0c2d84f6be3a6f4e2a1806acbba47402287c542f010b953527980ba36f877b6414e8cdcc6d0","ssdeep":"","tlshash":"16f08b6c19e2c92024f1268c7cbc5cc5e0ba17075a8549c3383c9aac0fb9951977de01","size":650,"data":"","first_seen":"2025-03-18T22:09:14.272896Z","last_seen":"2026-07-17T15:49:47.091603Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"53715471f5ea9d8f50f0abc5fed10d33","sha1":"357c549dac8323ab31ca229937388ede46e9e265","sha256":"2ea1da1ff090923e7a12907d07ab8dab8f49438762cd848e3c527df7a19361b4","sha512":"4affa729f41c0f058bb571df1d876aa12ab2e728eda518f9b402b01c694263ebdbb51d80cefd663cc80ded9963c8933e2c12e3b9bfcec60c832a2a7142e46aca","ssdeep":"","tlshash":"a7c08c0024e20c5106b22238c8558e8ee6df1b0ecbcb31913c3c46416ff9824d3cef40","size":177,"data":"","first_seen":"2025-03-18T22:09:13.873117Z","last_seen":"2026-07-17T15:49:48.209805Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/js/app.41d66ba9.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98395f98564db78f02e7d7a353772acc","sha1":"0f51fa2bcc18c0ebd9dc79e81d93f7b494579852","sha256":"c3f284f16a686e86fcac587e62502cd6a84071e50cffa06ed263f0b0c1cda1b8","sha512":"632d882deeb488409dc9eda9be93d8c81e42f252cdb97dd8257c321a18a688441f608b4edabe540d8384b5009bd7fe401c28d0947b665e2d505a47050a8eefe2","ssdeep":"12288:flWFfEhzJosaTtLlhV8lrQHGTAkhqqmQ2IkCXSTVUAIGhYAOq0kU7janKtr4lsWI:EEhQLCX/AIGTuTybw2s9FAUShG6E2TI3","tlshash":"7395072aa2dadcad47006ebb754f3b06e0bc1ee96b46e8d168c4781731f4211c167d7b","size":1997181,"data":"","first_seen":"2026-01-09T03:21:47.719253Z","last_seen":"2026-04-30T10:35:33.601887Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f4a9483d7da6c9cd681eeb110c5f505","sha1":"a7296439b37e73795f8aa7e09596414128697b3d","sha256":"bd652747a1f0084fa318fc8ba75cbd229781f575f8ce7e033dd4b0c73c0ed574","sha512":"003528cde6f01362d2751487f0590984ad5dc0e2939ec3666a75684bd7608c5c62562c3bdd37b64027f69d728e5b26f50fb0ed3feb1a67896d9e55c4b8ab65a2","ssdeep":"","tlshash":"6be0c08cbaa329014713395ece5a100230f3d82f1088fe42799d8dd0ef6413883a799c","size":390,"data":"","first_seen":"2025-06-22T10:39:37.567946Z","last_seen":"2026-07-17T15:49:47.067419Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"32e0159719dc411ded6975fe294d2b47","sha1":"90bce48b49f48962e833d575c9443cef2afd4a90","sha256":"73c643c8ae38fb4a7704e9c7d1428f57b7f3c08398c7369a0415fe9e85f969fc","sha512":"6e922c3d35f14ea6f045698410fa53e8065a2d113f86835dbd88f084805f41689364923be3eb934e152b34099406a071121bd40fb43fadc6a40c81dd1dbbe883","ssdeep":"","tlshash":"8401445499b80c9a58f911ecd2b40f50d3ea4b1f84c898e7bd3d094d5fb5809e04ed98","size":821,"data":"","first_seen":"2025-03-18T22:09:13.719769Z","last_seen":"2026-07-17T15:49:48.055138Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/vue/2.6.10/vue.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-07-22T02:15:32.636081Z","times_seen":4388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"32e0159719dc411ded6975fe294d2b47","sha1":"90bce48b49f48962e833d575c9443cef2afd4a90","sha256":"73c643c8ae38fb4a7704e9c7d1428f57b7f3c08398c7369a0415fe9e85f969fc","sha512":"6e922c3d35f14ea6f045698410fa53e8065a2d113f86835dbd88f084805f41689364923be3eb934e152b34099406a071121bd40fb43fadc6a40c81dd1dbbe883","ssdeep":"","tlshash":"8401445499b80c9a58f911ecd2b40f50d3ea4b1f84c898e7bd3d094d5fb5809e04ed98","size":821,"data":"","first_seen":"2025-03-18T22:09:13.719769Z","last_seen":"2026-07-17T15:49:48.055138Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/js/views.094d7a39.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4c4d9208d7457ff1cd62a17c7c2f19","sha1":"fa440bc54cebf268ab2424a987177ecbeb37acb2","sha256":"9b7d3453b0584058da836cd1d9bb92a46aa06bf7b85765c802bcddc65e9ae011","sha512":"2b2d01019929b56f4d5fb9848ff97ce2a823f712563ee9fad8bdc0712c9f920c59b0c66cd989ae2d6c77e9ac45f7b968dc535f592da61c1794f785c1e59f5149","ssdeep":"6144:oGdjCNHwCA5yLU6dtuM6+Ife8cjsXvhSZGY/a8UBT+Q7QB9btFTAx92o5IAWI2aZ:PPyLLGwL9pFKdWIFIqbx3w6O01bT","tlshash":"2f551a0db187f9bde89b6114402f1628b1753fa8b146c09af374cec69ae8d54731eb2d","size":1399340,"data":"","first_seen":"2026-01-09T03:21:47.726231Z","last_seen":"2026-04-30T10:35:33.603801Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6cc5350698b7e3291748a0ac0d987133","sha1":"501a4a512c5be163a79d251dccac2c54bcb3d5ab","sha256":"4933bafa619e517f1a9982b76f8b29d6f00e170f1e27f4d836c673349aa79ad9","sha512":"c748402773041cfed00f6cfcee0c5c5ffdc60b6c2807bf9f76811bf8b45063550b27eb13c1f8d988b37f468fc91825bfe849aa3071f765c51aba0d86456e4356","ssdeep":"","tlshash":"32115e160af918bd0175111ce9451f08f6cf6f4bca894aa27d3c4b0a9fb8824e34ef18","size":1106,"data":"","first_seen":"2025-03-18T22:09:13.529988Z","last_seen":"2026-07-17T15:49:48.026003Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7656f4be720b1580847f9783d6ab4dd","sha1":"d3582fc6fb317199378638d2a12b4186fdee19eb","sha256":"9d5542c396b2102deb7390b39061aa7ae35f9329dfab9a34823cf84396b8cc13","sha512":"e31c23718a86b6a46355b975f29854ad874351005a9c634a56cfe8f4126198be7d6ca67cd95ba24135ce8cceb3b6dd1b4eaa8f9d4aadfe4061210f4c7b8052b4","ssdeep":"384:Oxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:Fp+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"b0b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","size":24555,"data":"","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-18T21:01:07.01037Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6cc5350698b7e3291748a0ac0d987133","sha1":"501a4a512c5be163a79d251dccac2c54bcb3d5ab","sha256":"4933bafa619e517f1a9982b76f8b29d6f00e170f1e27f4d836c673349aa79ad9","sha512":"c748402773041cfed00f6cfcee0c5c5ffdc60b6c2807bf9f76811bf8b45063550b27eb13c1f8d988b37f468fc91825bfe849aa3071f765c51aba0d86456e4356","ssdeep":"","tlshash":"32115e160af918bd0175111ce9451f08f6cf6f4bca894aa27d3c4b0a9fb8824e34ef18","size":1106,"data":"","first_seen":"2025-03-18T22:09:13.529988Z","last_seen":"2026-07-17T15:49:48.026003Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/vuex/3.1.1/vuex.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccce53cbb3813a63f1420eba489574af","sha1":"94ac9c787b2b96236356286c44350260c9f08a33","sha256":"1610512a47faf745fe96ac631be8ea3ea50a222fe7d7cca691f7ff8194b934bc","sha512":"78a2cf9dd160d4a451c1536de4d0037330d8ed11d07f0edaa427de7131a190af3c86d1a3f5bd858cac14f16ca70f78b2dc4bbe0124f7d3a2a4cce8872b95b8bd","ssdeep":"192:ViDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:VeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"6a32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","size":11653,"data":"","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-21T22:55:55.55374Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"47c5c49d70b9539ad2c5e964c04287c0","sha1":"1d8ec28a6f7e77a65c451e8feb352fa3258b6c23","sha256":"7b29db55b725323936858b265206f863d0965c0b3ae2cd6e9fc62b3f9733534d","sha512":"14ac2553dc0cc25ed08630b7b4e873b75877db7332ba13e9740d36d51c757751617d95048b3aeb376635bc84171ea27bb2a266fa6f1289e0464d6210e0fe902d","ssdeep":"","tlshash":"6061e7f640e26c1a0a7272a5d8660e14e4cf973f8e5909f23d3d4399cfba096428df16","size":3382,"data":"","first_seen":"2025-03-18T22:09:13.479143Z","last_seen":"2026-07-17T15:49:48.472Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/axios/1.0.0/axios.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76235a7ee6b454034b80a390ccc92f37","sha1":"8a84e29a036660955f3ebc42d43bb522730b5707","sha256":"3c92bac09bac9bfd77f2ced65b63e009c9b67c109a9d37de637b3573d7ec7adb","sha512":"35c36d820651548001703c6458cfb922c55c12bd8c0ed73a8d095f0656e45c345e0f4fb2fe0e037d14009020dc38bed1e349d110b3f9f2f50dcfa0f05f8cbd08","ssdeep":"384:3ao8KGKMMT6nbNp0nkJFP5F0YS6DagzzNYT9eei:VGNp0EPb46DaT9e1","tlshash":"f242a7ce78a1b0d747f320f0905f5a0fb2b6992a644d84a0e560e8f66db546e8737f4c","size":12969,"data":"","first_seen":"2023-06-26T22:56:34Z","last_seen":"2026-07-21T22:55:55.53828Z","times_seen":321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8999762d612ed04a2229453aba2aeb66","sha1":"2ab8feecaba51e34b764fe4d5d9fb44c62c2e500","sha256":"d23b06c335dd2511afaffd71fb52ff540dfc52ce966ed482fa4b5a68a931a4b3","sha512":"a185d54ac939fe89529bdda35711cad32ca8139a14edb12f4349b56a01d0af546fc9a51906ae5f002cc5e3a86ee2c3b61c512b250882ea9812844c38395ea776","ssdeep":"","tlshash":"a0814dd594d81d3d69b2631a2eaa8e18e05e139f87c59cf33e7c135c2f354625098b7c","size":3899,"data":"","first_seen":"2026-01-09T03:21:47.74228Z","last_seen":"2026-04-30T10:35:33.594054Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3c303ca5277037b399e9644e3520302c","sha1":"98813c6cab868961ba7951f76405ab5d220a2c5f","sha256":"9bbf3e836825c66e7b651b3e3e0664c2f76c625a34dd4208f23a104838e137dc","sha512":"62db1b2a8faa744b8ccfa397bc2fb19d056a274952a44cbf7958a6aed751140db4e154b397199cf5fe1fcc35fe2ad1adf059c49d73810c0efb129a04fde00b75","ssdeep":"","tlshash":"85c01249b1d8a46640f365b61967850dd55c96490808140d77f881ac25b7c0c2505d84","size":178,"data":"","first_seen":"2026-01-09T03:21:47.743464Z","last_seen":"2026-04-30T10:35:33.593227Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"53715471f5ea9d8f50f0abc5fed10d33","sha1":"357c549dac8323ab31ca229937388ede46e9e265","sha256":"2ea1da1ff090923e7a12907d07ab8dab8f49438762cd848e3c527df7a19361b4","sha512":"4affa729f41c0f058bb571df1d876aa12ab2e728eda518f9b402b01c694263ebdbb51d80cefd663cc80ded9963c8933e2c12e3b9bfcec60c832a2a7142e46aca","ssdeep":"","tlshash":"a7c08c0024e20c5106b22238c8558e8ee6df1b0ecbcb31913c3c46416ff9824d3cef40","size":177,"data":"","first_seen":"2025-03-18T22:09:13.873117Z","last_seen":"2026-07-17T15:49:48.209805Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"dd2846004388bcc70b71f4b0df3d0ca9","sha1":"cdfab9cf4f65928b63124ecd83fcf5aede640e28","sha256":"8a9c9058f06974ddda43a9593dc0602e962e335702b05bbe13ea313c51a28d31","sha512":"2697ee7523d5860f0226c3032887ba1b9f5e47ba51c9b8c2d7b4b675a4653950cf224d6c3b0be9ad4779654835fbb5298b2b00f5a3a72402baadd6973222adb6","ssdeep":"","tlshash":"95d0234d54d6dd3830b4325976f40d4bf0210a4715800892343c2c7c3f754292029d40","size":240,"data":"","first_seen":"2025-03-18T22:09:14.197579Z","last_seen":"2026-07-17T15:49:47.76364Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/avue/2.9.5/avue.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"750459dc86246c289cdf5b760013f43b","sha1":"8103e042309fe4007cda921497f28410a75656ba","sha256":"5df0b88dacc1f9ae9edc0adc120da6190632e03cea789186cfc49d532918d6bf","sha512":"f9db639a43a21ca3a54d2546999e885bc0057f1b29eb9c2a1b7e5510dfd284530992a97c9642d4ed87357a472b7274b229279fdd45251ad9bc7c03564747375d","ssdeep":"3072:8mWzlkGK5sT4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:8mXqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"50540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","size":300353,"data":"","first_seen":"2025-03-06T09:16:43.423938Z","last_seen":"2026-07-18T21:01:06.995445Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3c303ca5277037b399e9644e3520302c","sha1":"98813c6cab868961ba7951f76405ab5d220a2c5f","sha256":"9bbf3e836825c66e7b651b3e3e0664c2f76c625a34dd4208f23a104838e137dc","sha512":"62db1b2a8faa744b8ccfa397bc2fb19d056a274952a44cbf7958a6aed751140db4e154b397199cf5fe1fcc35fe2ad1adf059c49d73810c0efb129a04fde00b75","ssdeep":"","tlshash":"85c01249b1d8a46640f365b61967850dd55c96490808140d77f881ac25b7c0c2505d84","size":178,"data":"","first_seen":"2026-01-09T03:21:47.743464Z","last_seen":"2026-04-30T10:35:33.593227Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8999762d612ed04a2229453aba2aeb66","sha1":"2ab8feecaba51e34b764fe4d5d9fb44c62c2e500","sha256":"d23b06c335dd2511afaffd71fb52ff540dfc52ce966ed482fa4b5a68a931a4b3","sha512":"a185d54ac939fe89529bdda35711cad32ca8139a14edb12f4349b56a01d0af546fc9a51906ae5f002cc5e3a86ee2c3b61c512b250882ea9812844c38395ea776","ssdeep":"","tlshash":"a0814dd594d81d3d69b2631a2eaa8e18e05e139f87c59cf33e7c135c2f354625098b7c","size":3899,"data":"","first_seen":"2026-01-09T03:21:47.74228Z","last_seen":"2026-04-30T10:35:33.594054Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/js/chunk-libs.513f0824.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c96fc50e97f7c6269912c6232ac16a3","sha1":"75c3afe1a6e43dfb00c2bd2d6d663292e04d5dfd","sha256":"7c2abe1d2523f326cd0fe0fb95f7635145ea5e05d6ee28d89bed22d9a0519a6d","sha512":"24f8e07851fcab560f31f138a74ecb3aab4978aa463825b6277e3c3b0ee51711c46c8913fe14ef2401b458278b8ded2ecc3cd86a6c79269c28405b8cee16dfa8","ssdeep":"6144:uDYiT6TavaeZ+RZAQU5z4LUOyOSp4K1Hf+kJzWXGnKDiKwPQ8oCZSI6:uca6kae+RSQU5z4QOw4K1HfKXGEwPV36","tlshash":"64c408ccfac6b06543a375a4403f610bf27b6a18b80d89d4f266d5d2ac7898e4177f78","size":574427,"data":"","first_seen":"2025-06-22T10:39:37.546917Z","last_seen":"2026-04-30T10:35:33.575583Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b534fbf6d569d28f5083563bb0522458","sha1":"7b1b153f6943d00e7cb6a4bcdf57900017e5814e","sha256":"e774d3e0a7aa6d03dc94ee671ca3125a40dfd6bb4841aa309d53bd65213ac600","sha512":"d52fabd7662bd8e9806bc81eb598afab57b38207a0d4a02370b99c3d81364c4390d6aa2c896026c3c8627f2b52d1462da8adc7b760b54a7bd9ea7d7ab63f4169","ssdeep":"","tlshash":"2bb012db28d9f443074b718c002b485e5f8eabc50c886311f5f0a4a8699e47a5130dce","size":113,"data":"","first_seen":"2026-01-09T03:21:47.709799Z","last_seen":"2026-01-09T03:21:47.709799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b534fbf6d569d28f5083563bb0522458","sha1":"7b1b153f6943d00e7cb6a4bcdf57900017e5814e","sha256":"e774d3e0a7aa6d03dc94ee671ca3125a40dfd6bb4841aa309d53bd65213ac600","sha512":"d52fabd7662bd8e9806bc81eb598afab57b38207a0d4a02370b99c3d81364c4390d6aa2c896026c3c8627f2b52d1462da8adc7b760b54a7bd9ea7d7ab63f4169","ssdeep":"","tlshash":"2bb012db28d9f443074b718c002b485e5f8eabc50c886311f5f0a4a8699e47a5130dce","size":113,"data":"","first_seen":"2026-01-09T03:21:47.709799Z","last_seen":"2026-01-09T03:21:47.709799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/element-ui/2.15.6/index.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","size":586253,"data":"","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-07-18T21:01:06.837569Z","times_seen":545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/#/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b534fbf6d569d28f5083563bb0522458","sha1":"7b1b153f6943d00e7cb6a4bcdf57900017e5814e","sha256":"e774d3e0a7aa6d03dc94ee671ca3125a40dfd6bb4841aa309d53bd65213ac600","sha512":"d52fabd7662bd8e9806bc81eb598afab57b38207a0d4a02370b99c3d81364c4390d6aa2c896026c3c8627f2b52d1462da8adc7b760b54a7bd9ea7d7ab63f4169","ssdeep":"","tlshash":"2bb012db28d9f443074b718c002b485e5f8eabc50c886311f5f0a4a8699e47a5130dce","size":113,"data":"","first_seen":"2026-01-09T03:21:47.709799Z","last_seen":"2026-01-09T03:21:47.709799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1598229929599741953?pageSize=-521\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1598229929599741953?pageSize=-521\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BsRd8r1J1OFc24WIfAWAg%2B88Q%2B8vUbAQL%2BPbW6VV5aORwLMd7qcjCw0yF7WndXYQOCdHJQaXQSUvnKB3Xa4DTxrmmtZO3ICb12C\"}]}\r\ncf-ray: 9bb0cd6cdd2b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81820,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63744), with no line terminators","md5":"6502d128a5479929f1542da4f4916ab0","sha1":"4fff6ff99297604074daf45b16147bd5d09ca085","sha256":"bbdd8dfd268b3a749ce04fbbde06b44c5e722c7ba1db145b34cba7a70e266a67","sha512":"4471a4d1663466c3d6fd7c79316a574abd450cc648ef341ed6139c49db09e5b2f739e7bdd4b5f00203bf853f8aba4400aa63be252b61304f39dea63dec63c8ff","ssdeep":"1536:qfAc3cOsZytqe6WQ6fqPvM0HFJcMM+8hFtHkMCgwDZSUoxzEYXnTUZjjIjdJ9Ux/:xJ","tlshash":"7f83df0e2bb9d8d962f452870a3f7186f6c5f46284c309ee7e5acd8dc6d47934a0b1d8","first_seen":"2025-06-22T10:39:37.504174Z","last_seen":"2026-07-17T15:49:46.7505Z","times_seen":113,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530431184536666113?article_type=1531192711602548738\u0026article_issue=1\u0026pageSize=4\u0026pageNo=1\u0026column=id\u0026order=desc\u0026article_lang=en","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530431184536666113?article_type=1531192711602548738\u0026article_issue=1\u0026pageSize=4\u0026pageNo=1\u0026column=id\u0026order=desc\u0026article_lang=en HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wuk1OW%2FPDMK%2Bng3zcXXKysTykuqeAdmjiKu3B1oUegyqFsGIOjH9NC9Ec7SgIRXl7Km03uc9Ry9J7XUPecDX9hheAwO0uxRfAPgT\"}]}\r\ncf-ray: 9bb0cd737d4956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"71d08917b54622d5f887ccda373f05c6","sha1":"5923b7a17adc1f9acd31d9f389dad49fb15162b7","sha256":"6d1129802e92e3450423745271c0e0c7fa59e1ffee09098085438919e8045ea1","sha512":"34dbe5e78b02f57b3bd3929e4235d086d6fad1d4ede5423d8000d9a10ff98dec086b7f1f2a2a487cb09f305210758d2f4dfa7341913221bdae684ac0cb3e89be","ssdeep":"","tlshash":"0bb012496d1c0292a1835196e01e3b12413c33f342045d38cccd9754c5de17035c1419","first_seen":"2025-06-22T10:39:37.53475Z","last_seen":"2026-07-17T15:49:46.756079Z","times_seen":156,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/iconfont/avue/iconfont.css","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/iconfont/avue/iconfont.css HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvbGBweRYblj0jLDOwzXV3Ov3JHV%2BT4BtbEOzpxevW9gp8glKMYHMTIFqNrq0wX94HnOSFXHQxDgxy5L7Jxir4WpRluVPwio4xvI\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9bb0cd500c9056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/js/chunk-libs.513f0824.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /js/chunk-libs.513f0824.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-8c3db\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FkWlV3KkJqeJ1QWSyrU96%2BeR5SDRL%2FZNdfNI%2FygXhraG%2Ff5xv7%2Bxs6vOpwNW5wcVAO97IlSP3hygkC6OL%2Bo7MToPoe35Q0fx5iOA\"}]}\r\ncf-ray: 9bb0cd502c9e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574427,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"3c96fc50e97f7c6269912c6232ac16a3","sha1":"75c3afe1a6e43dfb00c2bd2d6d663292e04d5dfd","sha256":"7c2abe1d2523f326cd0fe0fb95f7635145ea5e05d6ee28d89bed22d9a0519a6d","sha512":"24f8e07851fcab560f31f138a74ecb3aab4978aa463825b6277e3c3b0ee51711c46c8913fe14ef2401b458278b8ded2ecc3cd86a6c79269c28405b8cee16dfa8","ssdeep":"6144:uDYiT6TavaeZ+RZAQU5z4LUOyOSp4K1Hf+kJzWXGnKDiKwPQ8oCZSI6:uca6kae+RSQU5z4QOw4K1HfKXGEwPV36","tlshash":"64c408ccfac6b06543a375a4403f610bf27b6a18b80d89d4f266d5d2ac7898e4177f78","first_seen":"2025-06-22T10:39:37.546917Z","last_seen":"2026-04-30T10:35:33.575583Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":596,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1531553843420971009?pageSize=-521\u0026country_flag=1\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1531553843420971009?pageSize=-521\u0026country_flag=1\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEZBD7Fs%2F6dLVl7p8wA%2Fb5ZdaRgvho98onlHLTecKu4o2%2F%2BbmNitPc8lsOi9YAv6gwRBIbRR6DmafcOw4JN4y5xdGwgCF9bTeSHw\"}]}\r\ncf-ray: 9bb0cd6cfd3456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4264,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"95d19aa6c09ee215b5d77ad524849340","sha1":"623d94fbd606ad1a7a29966acf4b81d529874a10","sha256":"723619faa49ad4c94e0d3c87e110c3f969380f477438877d2ab53c036925ba78","sha512":"a8dcb16956e493f38529720b79d4bda8da09dd744ea485736fb040b2be0bab7b5ba76ab2e0c329eeb4f7ff738ff8fec935b53dae27e063bb8b1cf60bbcee63ae","ssdeep":"96:qKDcqE/ogEO/8PEFIRE3q1Eg4JBEECvEWncoEWUq7GbEfeHEls4dt:qKDcqE/ogEOUPEFIRE3q1Eg4JBEECvES","tlshash":"b991e00813b9ecffd5e250472867718da16db85680c609fe5f6dcf8e89e2981d40fae4","first_seen":"2026-01-09T03:21:47.646029Z","last_seen":"2026-01-09T03:21:47.646029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/phone_usdt.d32e41ec.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/phone_usdt.d32e41ec.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 164995\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-28483\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAqzhhWxS4Fq4JVrvLFeexJWtB8vJ4EraBF7p18pPlIawghkdhlJQyGkG1N5p22993Gmq3Ee1XNH%2BKe2DvmJgJd5GQeMrZty%2BHnR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c1d1d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 513 x 1056, 8-bit/color RGBA, non-interlaced","md5":"d32e41ec5c6cdc0ac4d08a967895e8ba","sha1":"227f7734aa9ef25ba1a017759bde21b57166b497","sha256":"453e3052b4e0c3d77fa7cda354d9681d670f734931153046a855887f92a8a19b","sha512":"f8ff5313578d7df32c6932ca00cb3a8784c7833ad3456c559c55e34ee96d9bc299bc4450d9709fee121dd4ac7c7de654d7480724fb6e01e79acc5be83f4aee00","ssdeep":"3072:F+QXKLqgJudYLQRu24lM0PUSAuZ/3oOwnkJ6b7IrNdj8G/kKoi26y6Kt7yGSv:F+sKL/E7Ki0PZA83oTnCdj8G/kKoilKA","tlshash":"bdf31246a2a0c34f08c491350de7fff276aff26d069f2928d230d151c4ae6d85d19add","first_seen":"2025-06-22T10:39:37.537615Z","last_seen":"2026-07-17T15:49:46.836323Z","times_seen":112,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xbull.top/","fqdn":"xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T03:20:58.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 09 Jan 2026 03:20:59 GMT\r\ncontent-type: text/html\r\nlocation: https://web.xbull.top/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wl%2FaHY0TSfKC%2BJyVW%2BQ8FB%2FU%2BF7WdjZe09gYjhScZX3EJvwYflx%2BI9g9cxkt691kBwhsFCSKjTZnpBt91dc1zRC47KkOt2tAvQ%3D%3D\"}]}\r\ncf-ray: 9bb0cd474ab9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3366,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":1104,"timings":{"blocked":348,"dns":329,"connect":1,"send":0,"wait":408,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/avue/2.9.5/avue.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/avue/2.9.5/avue.min.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-49541\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upAmo1t%2FS87lZ42SJvlwn8xzbxNaOqSVOA72LYjOxqN0xn1i1qaiMoyYo1DJ6ZzPJNeC%2BG3ZrvZNCEu67AgMdno%2BJB%2FtuusP%2BaE%2B\"}]}\r\ncf-ray: 9bb0cd501c9d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300353,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55624)","md5":"750459dc86246c289cdf5b760013f43b","sha1":"8103e042309fe4007cda921497f28410a75656ba","sha256":"5df0b88dacc1f9ae9edc0adc120da6190632e03cea789186cfc49d532918d6bf","sha512":"f9db639a43a21ca3a54d2546999e885bc0057f1b29eb9c2a1b7e5510dfd284530992a97c9642d4ed87357a472b7274b229279fdd45251ad9bc7c03564747375d","ssdeep":"3072:8mWzlkGK5sT4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:8mXqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"50540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","first_seen":"2025-03-06T09:16:43.423938Z","last_seen":"2026-07-18T21:01:06.995445Z","times_seen":236,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/block2_bg.ec46926c.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/block2_bg.ec46926c.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/views.349aec66.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 5697100\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-56ee4c\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2F0H2Q3ODRP1pzlAIgyNTlDlb%2B2D9hy%2BSb6%2Fx0YiCwQT1iV%2BtzSUiA%2FLJ0B1qK97ZqS6rAploZ9fGupfXRcrwQWVEyKFGlzVOcu2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c5d2056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5697100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 1760, 8-bit/color RGBA, non-interlaced","md5":"df9b315f08e0ee2d0bf8f919798e33f6","sha1":"485c500d3a7fdd61b35f19c979c6b297f085ac82","sha256":"55f218be6c019de7f34a7d769cb99051671974727c0ce4d9970e1938aad15b1d","sha512":"ef0936f9439ba43cf179f6f76719d962b4cedd558901fcdf30bf8c0d626bfe9e636286e08afbc9dedf8ae41af4f9c75e935075349130612e8c63f1c4299355fb","ssdeep":"24576:etK770K+pozs5zGW7B022SvZLVZ8UXwcrdq3u1mVVaP9N:etK770jpozm7B012AHcxq3hUf","tlshash":"3e25338ea5f3ec1a0777f9888cef95b76f230768c114f26c09dd63490da91844bb859e","first_seen":"2025-08-11T23:53:07.701656Z","last_seen":"2026-07-17T15:49:46.811009Z","times_seen":136,"resource_available":false,"data":null}},"time_used":3117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":2703,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/download.38bca2f0.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/download.38bca2f0.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 660434\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-a13d2\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXECEMNkcmaUCYycbfzqPvWxzdILqNWNhtaaOl1ZzPOSfRbXLu6FbDgcNP8QsQmk%2Fb7YYPSWlJE8GKkxIikJQuC11uB8BufPhJ9E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6ccd2a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":660434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 916 x 916, 8-bit/color RGBA, non-interlaced","md5":"38bca2f061370ee904ed6c1f5015818d","sha1":"eb091148d388273757026b039ceb96b1851842f7","sha256":"4ebf9024c2917af702f5660f8170830a110923c6f4812fbb31602847dbc27402","sha512":"2fbfbf34a724b46b61eaaa3cf7c82dab29c2342bc5300471768ce271e8895790a96a35561f4fe600f5a8145ee4d9e5e920ef84324599b5afb0aa69261af67aa0","ssdeep":"12288:Bv7p2btnmjtv5FM4VLVadLMvMobqCaKUJoMeyNaehBqRxK5:BDrLFJV0+MuaKUJB3Nvh4n+","tlshash":"3be423e4b850a971ffbeca016b468140af2df93589ef114852c497e2147d8ac5f93f63","first_seen":"2025-06-22T10:39:37.489174Z","last_seen":"2026-07-17T15:49:46.766158Z","times_seen":135,"resource_available":false,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1040,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/avue/2.9.5/index.css","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/avue/2.9.5/index.css HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-110ea\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJ2I1UbHNaq76p3OSweXEfgCmKEH7kyWBxXZjThucG6GeEj6Qmw2y0FhnduNtRDM7jwBNmbU%2F%2F9gqCF%2BZemGc%2BuMV5tMcok4bol4\"}]}\r\ncf-ray: 9bb0cd500c9156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69866,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65519), with no line terminators","md5":"099d53e848eb529426786d25d42cab87","sha1":"3484d2f16a9dbf5e3e1c38b97190f6c17e3af27f","sha256":"9b15d825fb99ba5bfc57bc8dccff4297be2529a503930e066f65e8a387148f9b","sha512":"c2eb8c230a3b9d6f1c027ed28a602bbcc5def1b3845851ecc7e940e0d2ea521ba56e48ad9203802620fd16ba16f42e3d5d7008d27cf4cc7faf84fa78c93a869f","ssdeep":"768:TD2VGwXtUD5Q6yoLbYP3RdyQj3VydcbDl3TXghT:TD8XCC9T/Vyd6Dl3khT","tlshash":"226361335a6b1529e417dd2166c067be3628b123db0282baf9713621cbc739e1f7760d","first_seen":"2023-07-20T05:03:08Z","last_seen":"2026-07-17T15:49:46.763399Z","times_seen":169,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/css/chunk-libs.b57e4bfb.css","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /css/chunk-libs.b57e4bfb.css HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-49e\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csWdEN80CRlPpFkgtmM7YbHmAJ2rSgtLu1B4Q4P7%2FUJa508A2XcQdTZ5pzLFanDljhMHbjiGPTcsMRu4bwAe9c2ldycnTao73J3x\"}]}\r\ncf-ray: 9bb0cd500c9256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1182), with no line terminators","md5":"bfb572ddf961ce1e5d366017ddcf75dc","sha1":"5581fb5a4ba4645e0c7a08788b80c8f9adea0321","sha256":"10092d48c11ed6efd7474aa904ac1d89d6ad919b01efcc718fbb93715a92d87a","sha512":"f088f406fd3511782ff0fc2dbfba3d2adab4e676fafbba20235ffcb845b6bc275cbc08fa588251b3a317ec35a7d7c6d663b05531d89748bdcf6cb75af298795b","ssdeep":"","tlshash":"c221ab32cc900566a2276e07b6ce0a9a03aac602913bc1dd7f557519c386b6c1cdaf8b","first_seen":"2023-06-15T19:02:17Z","last_seen":"2026-07-18T21:01:07.001901Z","times_seen":304,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/vuex/3.1.1/vuex.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-2d85\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zukmniwW05Z62Y5yJ36Wu6fzlOAmp7Rbo0MDQ9nh7SIyJidL1m2kTnZSoFZSZ9FgssDYgytUxwkgicNJjvDKrnIOi6mUVunxLWJw\"}]}\r\ncf-ray: 9bb0cd501c9856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11653,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11593)","md5":"ccce53cbb3813a63f1420eba489574af","sha1":"94ac9c787b2b96236356286c44350260c9f08a33","sha256":"1610512a47faf745fe96ac631be8ea3ea50a222fe7d7cca691f7ff8194b934bc","sha512":"78a2cf9dd160d4a451c1536de4d0037330d8ed11d07f0edaa427de7131a190af3c86d1a3f5bd858cac14f16ca70f78b2dc4bbe0124f7d3a2a4cce8872b95b8bd","ssdeep":"192:ViDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:VeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"6a32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-21T22:55:55.55374Z","times_seen":269,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/vue-router/3.0.1/vue-router.min.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-5feb\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTtjexudbzCODWyWFVwPi7TGK56ONJ1RGU6MgvBKoZ5m%2FoNX%2BPFAJ9aFfH0%2B0h2a8670NVpiy86VX33b4B5rBSwyqtI0LQ6epygx\"}]}\r\ncf-ray: 9bb0cd501c9956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24555,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24485)","md5":"a7656f4be720b1580847f9783d6ab4dd","sha1":"d3582fc6fb317199378638d2a12b4186fdee19eb","sha256":"9d5542c396b2102deb7390b39061aa7ae35f9329dfab9a34823cf84396b8cc13","sha512":"e31c23718a86b6a46355b975f29854ad874351005a9c634a56cfe8f4126198be7d6ca67cd95ba24135ce8cceb3b6dd1b4eaa8f9d4aadfe4061210f4c7b8052b4","ssdeep":"384:Oxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:Fp+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"b0b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-18T21:01:07.01037Z","times_seen":274,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/download.38bca2f0.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/download.38bca2f0.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/audio/y1561.mp3","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /audio/y1561.mp3 HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://web.xbull.top/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 123715\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-1e343\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-range: bytes 0-123714/123715\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzzaPN6BACKIFY4MuUGrZcpjpP51IymZ6YXNhUqFr0cmqVX5T7lKp1187F8ELY1FQWS7TAoTIFkycc7ypElcM0FqF98kOtjk8N8c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd736d4756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42051,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 44.1 kHz, JntStereo","md5":"3651a665a824c5233d890099f7d99549","sha1":"3681323b6318b0959a0c565601b1defcac57132e","sha256":"d2ecc662f628e6e6d8bac93eee5d605d0f69232f703df798e0295949c110b3bb","sha512":"afca747af1b88bc61d41a584c58059e9db185efda6e5d5e43acf233a9f7d418b8a62ef58e2bd81de6f1168834c7393e237939b38ab93a831ac124afe8a5cccb1","ssdeep":"768:LumcqGYneYVhEcTl0jS2eoC9t2eIvYOs53FuW2eYcYrHLXezP/eOR:NrG6eYPEclwS2ex/TQYL3B2bcoHLOzPl","tlshash":"3013f11805d327dfa34168afff82e0390d8559582bd634c9c6c3b99c69eb2a31f68d5c","first_seen":"2026-01-09T03:21:47.657784Z","last_seen":"2026-01-09T03:21:47.657784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/sys/sys/dict/getDictItems/coin_lang","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/sys/sys/dict/getDictItems/coin_lang HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGCk0HNHh0pPAWsi36iFPE%2F%2BM%2B1Nzw1h8tsU2nhQVQBfGXFYcpe1VC9azONM0gS8%2BbfQ4hEcBWs3h6rNXw7NTX7C1u1TBXjo5%2Fm%2B\"}]}\r\ncf-ray: 9bb0cd6cfd3356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c3571e7f3dae28f7c25eb61c53fe3062","sha1":"69c5033f64d09a01a58557109775ba8dafd215d1","sha256":"c57f5d727f4a6ee2df67ee9180a67050ad899530d19d7446bc21f644597fc521","sha512":"986a69fc1dae8129150423763d2266b991a15417485122dd34f7e445e698b378fe36073c58895a4e0e0ff815cf8e97ba74289eb9f4bcc46410b160c5bf956d7a","ssdeep":"","tlshash":"bb210a1435e54c3bd38c2a8750db9c0b36dc6b6b21e1cc8da2b9dfa85f84e514c2a167","first_seen":"2025-06-22T10:39:37.525156Z","last_seen":"2026-07-08T14:56:22.355465Z","times_seen":49,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_type=footer\u0026config_code=bottom_content\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_type=footer\u0026config_code=bottom_content\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnbZ9h7oAuWqDoQeOWGWh5p9Dmr0kjw%2FvR%2BijNtbUOfKimuovkfsNMRGrE1e2RboF0jLdm50r05Q6hM3UIrJ%2BtAgKm%2B7nvntwoPJ\"}]}\r\ncf-ray: 9bb0cd6d0d3556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9293,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5e5962ff1c7874a12b27615821199273","sha1":"b0b8001e1ed664ec2fba6d1df2a395121b2bdfe9","sha256":"d78b5742e76674135b07997a7219ffdee8cd25a6db271ecf95d1b281efeaa69d","sha512":"d721ffa3f8ce2b570dbbf5a3708b831e58b3391072e9a13b056703ffcd6d3ef8e3557b1d8c639aff855a4e317be292d32aae63f8345bfe971b99448b60a1ffa7","ssdeep":"96:BGG2p5d2qScfSCcsSHzKKiSsKkL3LB8dFgBet:BAn5EPKR+6Bet","tlshash":"ab12c689589df83b5ead50a61f5fb66432cd318df78cd9b2bede0308d30006611266fa","first_seen":"2026-01-09T03:21:47.660049Z","last_seen":"2026-04-30T10:35:33.55333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_email\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_email\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mxDThMsxDmzoEqKHwrzRhJKm2mgVhXS9meOQ11qXfzucz5y3csx%2FNHWSFdSo28iGz9ciUDnu9l%2Faug9HxXsRiuPdtLk1sTidoLo\"}]}\r\ncf-ray: 9bb0cd6d0d3656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d47f180adc2fe09b7345d23bb9769cc0","sha1":"56fa42eb51f5a6684067d71c028743dc3deff47b","sha256":"3ce2746b3f759f04ba6a8d40f6a64f3187e38c86b8a30dd5d1a10875248ab36e","sha512":"177f473cc73fbec6890470e88f6a2fa03a2db2258f55a7280bd303cd9f38e84cfbe0cdb0d9b67e98888cedf1727e12e0d9561ed0d041cc4bd140a84fdbba540b","ssdeep":"","tlshash":"6bf0ac8d7f7cecf282e111a6443f3899e18e23c141c41d2c6fc4ea4cc4e6d042a035a8","first_seen":"2026-01-09T03:21:47.661258Z","last_seen":"2026-04-30T10:35:33.584497Z","times_seen":3,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530431184536666113?article_type=1530476503358046209\u0026article_issue=1\u0026pageSize=4\u0026pageNo=1\u0026article_lang=en\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530431184536666113?article_type=1530476503358046209\u0026article_issue=1\u0026pageSize=4\u0026pageNo=1\u0026article_lang=en\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RIFVZJKqNho5pYkfa85up4dtIKULLBokm5O%2F7MKdO0yxNiJRP8MycPfEYO3EVfKiek4p4eE3MbWNan66Qy%2BaKT6dvenD1GUrG3J\"}]}\r\ncf-ray: 9bb0cd737d4a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11272,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b77ae05a448dd41a6c03eba4030b11a","sha1":"893814dde576adb063a57227d2b21ac994650197","sha256":"d14c85e443bbbf4709141312e9daaef44285f4de037a06c50fcb2f10c851d938","sha512":"18a31ec0f48c7845adc966b3c0790a457419a91cf5b81eae9205c760c92a66f661145170d8fa74868de91d0151001f9f3ca252d3937c227d945fa9bb1e34bae9","ssdeep":"192:K9CBFbbENJlverlhnZRmbg3oEVkHmzcEGA9DMAKm1cgm413kBCg9VWP60PpO7t:zBIqrjZMbEFcvA19UlBCg8PbER","tlshash":"e732c707bbed677a825000c9276e33d89319416923514eb93c2c847ce29695ed3bbfdb","first_seen":"2025-06-22T10:39:37.527799Z","last_seen":"2026-07-17T15:49:46.812452Z","times_seen":130,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/coin/open/market/initData?type=index","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/coin/open/market/initData?type=index HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjGJtF2VbkTRIWqNPhhex4vsvfot0cb5CWrUedVMizJ%2FdCrOOswUsTppK6yeT%2FYEZ%2B7t6WapBUGmxT7CCzBYTM78oHlOEAKTwQeK\"}]}\r\ncf-ray: 9bb0cd737d4b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42139,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f27c08a3691db3b9e210ea215d1b6780","sha1":"2fd93210c6acf325477e53900395a51f46a4e5a4","sha256":"b76f30e7a745b40332d9457967ffd0fef1a973e9f77a019fe0307b4918ff06f3","sha512":"4294c49c746f380ad13b1f7e4c5fe09f71ebf64d21d9900627461f45aee7afaa28b6aad5ce5e8a2ab1174b2bdeeab61de869146e0c44549aaacd4b9218c4ed49","ssdeep":"384:PhOsUCbgEaIAdnnqzfi1D6W5m2wnHcjHxWzjoJKiNtnh6hr9:PhORCbgO4WfUD6W5m2eCHxWkKCP6J9","tlshash":"21132108b5456169f1b305c12be33a62768d348e9dcb0f85eadaceee05e06b3b357714","first_seen":"2026-01-09T03:21:47.663423Z","last_seen":"2026-01-09T03:21:47.663423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/css/vendors~views.91aa3c18.css","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /css/vendors~views.91aa3c18.css HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-3427\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSqfUglVdFqkCY7h09EyC6uYZ15R0tP%2FPjYwhhdoOK2fPnLVMqthBBUMyLOjVSskZGw1nXWel3KOkCxLQ1%2BxuiYZgAH5m0PHEj1X\"}]}\r\ncf-ray: 9bb0cd5a1cba56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13351), with no line terminators","md5":"9eaaa03f95c294d151665c8bc6faf2e0","sha1":"b1b453d74b47f0b4477bc1f20844ec80b6fc54bc","sha256":"5376a83f09008dafef4f5666de7755231764549d97bd176e6339c2f3f0f108dd","sha512":"2c11a48e700f6a71b12ec8a4edb085052c7ee5ea7cfc18a5262433d4035e60f3b263112799034ae027b106453aeb661efcb2fe70d6a3eba84dc70fe1eb5ac318","ssdeep":"384:2UbeQSCRgt9BUArb6C6if65WJ1mXAA0TH5x:fb6CObhrb63if65WJ1mXAA0T3","tlshash":"8452326457003837f3774f6e0aa1e6b59f60cc838a934d9db2c0dd44d6f98b9132eaa5","first_seen":"2023-04-11T17:45:13Z","last_seen":"2026-07-20T23:44:53.560672Z","times_seen":328,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/fonts/AlimamaShuHeiTi-Bold.5826f736.ttf","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /fonts/AlimamaShuHeiTi-Bold.5826f736.ttf HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/app.2c4d0afd.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1375772\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-14fe1c\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBeb9AkkwP80sUvcdGKS58G%2BfFBMaBly5vYJl7CjUnxQybJc50PTLaAnTUivy09ODC327u3nvkGTnWwoWsLSzCdVv9aZoq6U405l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c7d2856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375772,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"DSIG\", name offset 0x1372ac","md5":"6402e8c09d623a2f3965733c85e4bbc4","sha1":"84f717581094847fef17cd69f3437498548d02ef","sha256":"6de72cec146a1943996e2c209926c8c722aa6ccc5f8381f0a1de7b68277c8b47","sha512":"c7473d5c59d3a25f9abaf4c7ada0cb4b8a794d68e022645b0c6f6f99786ddffca80f43a9f68e241332b3d50d12496c09f7c6962d96909491afbb6477d06d260d","ssdeep":"24576:+1G7a3x0lrP7hPABYNAsiV9hWT3IGJTFB3cHbhJvC:V7a3QRPAy3iVo4GJZmH6","tlshash":"4e253942e6e8bf3d9a21f23e6521655df18ec8251b9487918fae3c36487e4170c0ddeb","first_seen":"2025-08-05T05:04:11.433985Z","last_seen":"2026-07-17T15:49:46.760962Z","times_seen":165,"resource_available":false,"data":null}},"time_used":1610,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":1220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/coin/open/get/download/url?type=Ios","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/coin/open/get/download/url?type=Ios HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWM5GIqwgZ92a8njJ%2BntHnXlRKYRlaMytFb4Dkoy%2Fi07jmcwGvAOK%2FNUm9R9Tdj%2FOMfQOYzqAklflrLXqkESuZS5kVuvqhREQEro\"}]}\r\ncf-ray: 9bb0cd6d1d3956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cf076ef11383a5945a3a7837f72c2619","sha1":"937d021fe35b99174303c02a1609828c94d54306","sha256":"59dc84f05b748c76c030af50d56a4ce91f174f04a2d2b1f1f626cc6ad91b4139","sha512":"ec44aeec37e63d6f357f3dcbea3eb8083c22f550222fed7b09ccb2ef7ef913518f977e8273b8136242dd383c7813c8b3b1948052557024103ad6e5f8667b715c","ssdeep":"","tlshash":"e7a002861e185293e48321a4a92e1b1515b833625108d258dd9d5e298559161358282e","first_seen":"2025-08-09T13:54:05.523257Z","last_seen":"2026-07-17T15:49:46.770603Z","times_seen":119,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/coin/open/coinBanners/1?clientType=2","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/coin/open/coinBanners/1?clientType=2 HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U43A%2B5sgko%2FF%2BbtLB0jERdlwq%2FFzK4YTd83q60XiZAfBSm8htZJIJpURIy5qJc5%2Fh2G9ORSAa89ucs7K9mYT0ME6D2P1z%2Bkq3zyn\"}]}\r\ncf-ray: 9bb0cd737d4c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":852,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"298f4629574d3c7f1dd0dc20562d1440","sha1":"c87c7d33e4bdaadbe6bd35259007f35d4879591a","sha256":"924990580da2503f9f59d1615a4947fe7906f8dd3d4080547ec2bad81face4a2","sha512":"94d9ea1dc1ddcd18427f5fba6bf0858fb1f93ef9ad54a333988c07ee5c92d395094fab83a2c9f629099db6c826401e9a5b42409e15a7e02e529114d3f6b7e6ae","ssdeep":"","tlshash":"d301af050779d0b725d8328744e6b58beac43511894992b6bf5dcd5cc8cc3a25b0b3cd","first_seen":"2025-08-09T13:54:05.553519Z","last_seen":"2026-04-30T10:35:33.578871Z","times_seen":5,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/oss/file/upload/20250820/8a4e68037940f0ddeb6f8c7bf5d26b09.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:02.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /oss/file/upload/20250820/8a4e68037940f0ddeb6f8c7bf5d26b09.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:03 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 647623\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0a7908bc7b5c24536e3d5d562379503d\"\r\nlast-modified: Wed, 20 Aug 2025 05:39:04 GMT\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1888F1EF19D63221\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zh%2BQyj%2FPSe1i2wlNt9KcN%2BQsCvrZiiYH0KEte2EfcyKvwZA6NSBgbnRx8p0vKj88nluan%2FZfpqKGX4fkLweHy1ldgpoAagM0qg%2B5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb0cd5facca56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":647623,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0a7908bc7b5c24536e3d5d562379503d","sha1":"534cd52ac52f98a2c1f14d07295c0a891ca22c74","sha256":"0815ed226cab76bb90ecb84e87f241986083d7a8460b307001a35d4804634dfa","sha512":"fe10f4d07fb30cd307c393a6f18f0e94a5269c9eb70be1cadf6fa1af9be46c7fcd5ff697d487ee5b8c24124935a120d2845cc0bf0d8255108d85039f2c7e2bcc","ssdeep":"12288:JDEkHzDLIQ2iYzIVJpHqVPLFkb5b6jqsH5TX/+qoohknQX39ZggqMq:JLHbyGftwjqiX/+qTinc9Zgr3","tlshash":"72d42339bd67a06764cd19238dd436ec966c157c791e4dad4f0eea200ee40ee3c25eb8","first_seen":"2026-01-09T03:21:47.669356Z","last_seen":"2026-04-30T10:35:33.559004Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1469,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":1053,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T03:20:59.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:20:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dhD6FlQghY4sZ1d05DgvcneCCN2bKKvzhieEzfl1I7BbYbrheTThBLcthQ%2BWpffqIC28OsT9knON%2BCf6XGi6rFcfZR65iZiv8PLw\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bb0cd4c2bf456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3366,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1086)","md5":"77dbdcb362e1e1be1fd03baafe8d997d","sha1":"f05b24deb2f5195b626c549ec0f34df97d2c38f9","sha256":"dfd9c2deac5e356acbced855c2df9f7ce3498cb3984ba9cfae5fd150823e20cb","sha512":"16230229564fdf7fc2bc6b7fbd334a32159eb5c5da4f92bab94c3be30b30cfa4d2151de196857ab94c11fb55e4df8750c06093c9a14699e4f691c0d140c91587","ssdeep":"","tlshash":"9a61578b9d13514e32031898eae2b1180465f41bf554cca87cfc559d4fedbcc89e3694","first_seen":"2026-01-09T03:21:47.670502Z","last_seen":"2026-04-30T10:35:33.569235Z","times_seen":3,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":367,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/css/views.349aec66.css","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /css/views.349aec66.css HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-d7053\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvnoalpFMx%2Fq66MCE%2F6hIUT26p91fN6lw4ldovtJoOJmiSmNA0k1l5LWgIN4dVvxgPQIMRWw0ALTsbvcmpfWH0PHh6vzoYtnc%2BAJ\"}]}\r\ncf-ray: 9bb0cd5a2cbc56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7cbceabf63e668b7b7d59fbe8c5f63ae","sha1":"c2fac355f7f82944adfb786e9e4f08c15940a20b","sha256":"7ef836d57a7ab62a4b98914483af55cd88a14eaa249a2bb3ca169230de7c6e73","sha512":"f298df75ef0632548167d4e71f993a9e3a58d001b10ecf537ecdccf26a70ffa41331b4bde22d0bd424e435d5dbba1d58ef87425cddc8398dd0d76800d1969426","ssdeep":"6144:XZ1ul/W+oAsw/gvso/WSlXUGICAL3j+MQBEltmixRVQcUmrGQ/MwD9Kz:H0o/WSlQn9Kz","tlshash":"6d1594b2375e2a28b037f938c9d225e13a24f3ab520651f6fc45547acfd71c63a11a2d","first_seen":"2026-01-09T03:21:47.671603Z","last_seen":"2026-04-30T10:35:33.566094Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":619,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=customer_service_url\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=customer_service_url\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cuaahD6882IXOJwDRIWBK83kwbeLx6%2FCi6JYCNjQBtzeowk5xOSuMAba%2FsdoSTqBY5fQ8ApAZIPzFiKWjvxqWaJat5oWpmjfOY5\"}]}\r\ncf-ray: 9bb0cd6cdd2d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":544,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f8bc38b5c9abdb60dca74d428bf1d2d5","sha1":"9670fdb795c465cf56a7abff6bb2d329314c3404","sha256":"6247566afcf2a8114c866d097d3966751321a8166a72e023b3e2f24b37400b86","sha512":"91ecbb5e700f3f2a624c6f6e986da75202b86e7109bf9395e2c9b89e7441e5566f5f7db6ff7eabdb4a7fc40142da0f54c994b3b5e91519facde054b13586463e","ssdeep":"","tlshash":"66f0c0db2f7cdce381d52486853f3a09aa4e738381c11e696ac9ea4c84dd15154061de","first_seen":"2026-01-09T03:21:47.672805Z","last_seen":"2026-01-09T03:21:47.672805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/sys/sys/dict/getDictItems/coin_plate","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/sys/sys/dict/getDictItems/coin_plate HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfTC2FCPzPQ%2BVAjt4nz5t8WRiNTyqO3jQ1aI%2BRsOMB9r8B5PBcr78M1krrdV2qRsDBL4AusyuBzOfhfHv4Tgi%2FWpGaE7pEX%2BFXWU\"}]}\r\ncf-ray: 9bb0cd6ced3056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":965,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fe58a2871e0f0bdf2ed3e626907164b8","sha1":"6c6a045831316c7291703c0304b90bec0eac6fc2","sha256":"95f68e930e14ef306d3b93038790290872ac60751380a4719fe9c727e5c7e5e5","sha512":"41eaffdbb265c4e039941725b97b1ac475176f577b70d3ff19985cba430746a6d21b5c6f7c6e6449d1f008ded50f7c2625a98b8e80b44b849193d5c6ba396fd4","ssdeep":"","tlshash":"fe11e71238b01db793853e8a60cf585732dcbb5b62d0899ce6b6dfac6e5cb40481747b","first_seen":"2025-06-22T10:39:37.553729Z","last_seen":"2026-07-17T15:49:46.797619Z","times_seen":150,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/js/app.41d66ba9.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /js/app.41d66ba9.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-1e797d\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzjMmnrePs%2FsCkSuuJ1NF9u5zeBxL4eAGEUy4p%2FAQV6Nm4Wd9rzwwBErw%2FTJC1r4hYNo4xgKo%2BBk2wErCyD8u9zCthzjIvb401s1\"}]}\r\ncf-ray: 9bb0cd502c9f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1997181,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57037), with no line terminators","md5":"d78f43f0e5ec5eb8abfec0e97970d07b","sha1":"350c2df1651b215f12e5829d04f4223833472bcd","sha256":"978b5b42e07ede19cc07b08b62e55d867bd0738e0d4cd2b1a9a76ddae0b08029","sha512":"e01fd540287d50b8f1423ff7a8cc5d51f2d01ea24bbf60228f15771607d7d4f2e9e7f0403e1b9bbb62264dc6213394c78e6573c039fe6a84148af584204bdeb4","ssdeep":"12288:flWFfEhzJosaTtLlhV8lrQHGTAkhqqmQ2izXSTsUAIGhYAOq0kU7janKtr4lsWdM:EEhQcX8AIGTuTybw2Jra0deUor","tlshash":"fc55061691d6cfac47c03ef6354f3b42e6bc8ad9578ed8ee19d8f91721f8120c162866","first_seen":"2026-01-09T03:21:47.67513Z","last_seen":"2026-01-09T03:21:47.67513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":1024,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530112754394718209?column=id\u0026order=asc\u0026pageSize=-521","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530112754394718209?column=id\u0026order=asc\u0026pageSize=-521 HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4KCMhmbcLnVPikAOrqu14fhrXAbNML%2FnQlBuU%2BMU1ANiiBY%2BiROjJi1AwL6s64C5s54z0pp%2FiYEOKfdPhhZs%2FV3GzxIUucVLEvl\"}]}\r\ncf-ray: 9bb0cd6cdd2e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13520,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"93a5e569691f7cf3943fbdebca0cbb3a","sha1":"cb60b7ea633886899afe2b93964cb21f673eef6c","sha256":"d9aeda491f5884c722a69ad1d75c2801e8840e7f84a729df10b0350be87c1d55","sha512":"db75a25363380f181c6599628f60adba6b621d17424916cf3d00d4e9620ba747c40ce9f1d81104381975bb9682699a75c3f62a2cbc60ddf7abb0fe5d08f3d2b6","ssdeep":"384:qir2FlmRcq4W8EnLlVpfNz+IBnyJNM4RklAaXwaT1RSsh/7ajRVIakRXBOoAzbrs:qqKlqB6spnVy4yTxkHAoguW7/2RXu3Xc","tlshash":"4752ad4a6fb6ece950db614305ffb586f1ceb563a0c21dfeae41d90e84d4392050bad8","first_seen":"2026-01-09T03:21:47.676299Z","last_seen":"2026-04-30T10:35:33.587692Z","times_seen":3,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/coin/open/get/download/url?type=Android","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/coin/open/get/download/url?type=Android HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAjgFFY61LMBHtZOvnVh5SUFIvCFNPJyneimvGVtMECbOfepHhBlbetI0umbcCJczkxgjj%2Fm5mbBlHaetD2QlhFPXP01ZHi1NImU\"}]}\r\ncf-ray: 9bb0cd6d0d3856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cf076ef11383a5945a3a7837f72c2619","sha1":"937d021fe35b99174303c02a1609828c94d54306","sha256":"59dc84f05b748c76c030af50d56a4ce91f174f04a2d2b1f1f626cc6ad91b4139","sha512":"ec44aeec37e63d6f357f3dcbea3eb8083c22f550222fed7b09ccb2ef7ef913518f977e8273b8136242dd383c7813c8b3b1948052557024103ad6e5f8667b715c","ssdeep":"","tlshash":"e7a002861e185293e48321a4a92e1b1515b833625108d258dd9d5e298559161358282e","first_seen":"2025-08-09T13:54:05.523257Z","last_seen":"2026-07-17T15:49:46.770603Z","times_seen":119,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530431184536666113?article_type=1530429800596701185\u0026article_issue=1\u0026pageSize=3\u0026pageNo=1\u0026column=id\u0026order=desc\u0026article_lang=en","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530431184536666113?article_type=1530429800596701185\u0026article_issue=1\u0026pageSize=3\u0026pageNo=1\u0026column=id\u0026order=desc\u0026article_lang=en HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCzGFWYHH0Ux0537zEAy3GNmJIHfJUHUROLSxa3S2rCHruLmmyut8O9EC%2FXPnjSmjTVnj0zB8C6qRbOupWgbIIKicBVmpqX4Js9%2B\"}]}\r\ncf-ray: 9bb0cd737d4856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13639,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"824edb5dfa628dcd63977f7042ed1fe9","sha1":"e32e5f1c703bf3c71becf93f51e53064516f8b20","sha256":"501d4fa083b23fed1ce6b1967d76f48bc0c419c6ae4d9095dcf01921b1ed3e0b","sha512":"cd0d4084ee77f704a9500acf49e035ecf767808315924ad74bd1dfeab0a7271360dd1e39ebff130456f42c92ffab0ef6d336070c778a6e6bb386d5c743cbdc93","ssdeep":"192:BE+BU/tQiq4UiTBwe43goIy2Nk1lKJ1lGqNiZq4zPWa1eh282586nWwSQt:BLBUfTBRU1AJ1ziTH1qK","tlshash":"2b52b57321ee057b783200e8557f1344b2667118dbb68ea9bbac85ec13ce4a5753b2c6","first_seen":"2026-01-09T03:21:47.677532Z","last_seen":"2026-01-09T03:21:47.677532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/oss/file/upload/20250821/29b81e4508416a8d98fe4bd1ff3f8bea.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:06.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /oss/file/upload/20250821/29b81e4508416a8d98fe4bd1ff3f8bea.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 622183\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"098cca1e20a7761344bc571123ef41bb\"\r\nlast-modified: Thu, 21 Aug 2025 16:40:45 GMT\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1888F1EFEAF1BB0E\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKfIgMsNqDRYMQcYBgskMeNK3QCuCP8IMWYArLWO9hz5mEEdOIbvA3Ijz3bxZMEWY0nQOQXj0d6Rnre%2BFltWcSvUCTG%2BpXCBWEbG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb0cd758d5256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622183,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"098cca1e20a7761344bc571123ef41bb","sha1":"3acbbd99a9816deda1f79f7fbf959284125ab487","sha256":"d243b43ea5826abc46ecb46f25c3d09a54070e10dbefe27037342f5d220c023f","sha512":"7ecba660a59d571846544269c793cee32e294dcc9e5a1cd25e67bf9d6899f321ed9825614948f3bf5f6c7c54e15e4ee6cfd32010589e0c862c3efa832dee6211","ssdeep":"12288:wrrjbnMPfJLxkfgnllMD5V1df9iYJiqwGuHnswUPK:wQxBgVVv9iYJGfUi","tlshash":"20d423e430174a5f75977fd4b59bbf0dbae7097b41b20200f1cfbca8886a99580b215e","first_seen":"2026-01-09T03:21:47.67844Z","last_seen":"2026-04-30T10:35:33.55386Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":1255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/block4_bg.f0ecee60.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/block4_bg.f0ecee60.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/views.349aec66.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 6650651\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-657b1b\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLvUNVRvXmY6OBlL3tMnqPPO8F0kcmfxeYKApNxxoqnJ9lRa2pWwmnuRJF7bqUW%2BdGfUp0nRuPqoWfWckCS%2FYBacfYMrD%2FG1C14u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c5d2356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6650651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 1760, 8-bit/color RGBA, non-interlaced","md5":"feeb0cde58784247e38795f1bf08fc27","sha1":"6ec068401028e29f2c550bfc08f55941c113832e","sha256":"d13d0cce7ba9b60f7fe0152bcffada21061b4f3d76a1018b89f29b8f82767403","sha512":"bef3a7d863bf7d7a168198c10e36daada753c8aa5907e492b0ffbd7bfefeb52cea9943542f0a7815bdfc35c73bc7c724554550be378baba7992adfcce32c1871","ssdeep":"24576:QT08OVuM2hYtQVs86U9t6WOsxhfDQQKmcXz9KL+E7O9O/O:YlOuMsYtQ286UTJOsDfi5ZKL57rO","tlshash":"322533ddf85fde0792cc43b44e2abd9da16b269190fec7e60849f49a8e908517c0c4ed","first_seen":"2025-08-11T23:53:07.728083Z","last_seen":"2026-07-17T15:49:46.80549Z","times_seen":137,"resource_available":false,"data":null}},"time_used":2762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":2378,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=exchange_nav_data\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=exchange_nav_data\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP71YQbZG%2FMGCF6Y6nmoQKY7d2OERoRYwnp2L0BUT8EUUDw7ZWzKp6eUIIR3froP6YjfRTV8nwysumaAM8HR27LLh4UjQI4Jo9Fb\"}]}\r\ncf-ray: 9bb0cd6ced2f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":806,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"539585c61b244c42253b637c26aa55a9","sha1":"e6889992035cd3644f26d453ea6cb908875ff82e","sha256":"00424a0120245bcd34f153f6e79fdbc5d307272d52f64c67ee34e488a6c5840b","sha512":"b1d54d9382860b12bb28f123ab8fa85940b6a604689c921bb5cfd5921b50089cd8709ad5636d389a6fcef3b54e135e63673bf1eac0b520cf682a62ea48b910ff","ssdeep":"","tlshash":"9901bd476a2cdcf681d2244181f9360194ae33e3c140496bbb5efd46874b241740b9e4","first_seen":"2025-06-22T10:39:37.559524Z","last_seen":"2026-07-17T15:49:46.742556Z","times_seen":157,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=customer_service_url\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=customer_service_url\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfGLnsHmtaVUgF%2B7RSwWFHZ0NHzwyGkQ2CXedsSdoCwNi3icVaAd3oCP42a8t8wMPcymIHYyK%2FmaaRqrEBjhC5CijbDDi3OAlvbu\"}]}\r\ncf-ray: 9bb0cd6d0d3756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":544,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f8bc38b5c9abdb60dca74d428bf1d2d5","sha1":"9670fdb795c465cf56a7abff6bb2d329314c3404","sha256":"6247566afcf2a8114c866d097d3966751321a8166a72e023b3e2f24b37400b86","sha512":"91ecbb5e700f3f2a624c6f6e986da75202b86e7109bf9395e2c9b89e7441e5566f5f7db6ff7eabdb4a7fc40142da0f54c994b3b5e91519facde054b13586463e","ssdeep":"","tlshash":"66f0c0db2f7cdce381d52486853f3a09aa4e738381c11e696ac9ea4c84dd15154061de","first_seen":"2026-01-09T03:21:47.672805Z","last_seen":"2026-01-09T03:21:47.672805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/coin/open/get/download/url?type=AndroidAPK","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/coin/open/get/download/url?type=AndroidAPK HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fh1CS0Sn6DNQ0F7HwKl4maGi8FoIA%2F2yJpyZatlNrpzaqdn%2FV3fzrlv4vVsDOrELDrHhgPk1esMO1uCQ68jtFMHh6SSY7yebhPrL\"}]}\r\ncf-ray: 9bb0cd6d1d3a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cf076ef11383a5945a3a7837f72c2619","sha1":"937d021fe35b99174303c02a1609828c94d54306","sha256":"59dc84f05b748c76c030af50d56a4ce91f174f04a2d2b1f1f626cc6ad91b4139","sha512":"ec44aeec37e63d6f357f3dcbea3eb8083c22f550222fed7b09ccb2ef7ef913518f977e8273b8136242dd383c7813c8b3b1948052557024103ad6e5f8667b715c","ssdeep":"","tlshash":"e7a002861e185293e48321a4a92e1b1515b833625108d258dd9d5e298559161358282e","first_seen":"2025-08-09T13:54:05.523257Z","last_seen":"2026-07-17T15:49:46.770603Z","times_seen":119,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"web.xbull.top/ws","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"104.21.79.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://web.xbull.top\r\nSec-WebSocket-Protocol: mqtt\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IFbs4uDkY6Zi/130lkZqkw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 09 Jan 2026 03:21:06 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nsec-websocket-protocol: mqtt\r\nupgrade: WebSocket\r\nsec-websocket-accept: 1TsD4y59uUiDdn6+5HcN+jXKB4I=\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: interest-cohort=()\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WEET5ivrCuujtsWsQJItSEf%2FnyGGbITt3yBxP3deVZDKtLuihiSdcVcv%2F4OtRvbtBGFDYGE0IXIGOh1bXnqwmAwWDkUJ1CsX251nygRjKT6FxOVEIVMSBsNYBQx4Rhl7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9bb0cd73cc692678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":24,"connect":24,"send":0,"wait":206,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/oss/file/upload/20250509/05e993ea325b7593a25c69fbd0026f10.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:06.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /oss/file/upload/20250509/05e993ea325b7593a25c69fbd0026f10.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1309192\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"c75c2311e9e9235154c5bf91309c6eed\"\r\nlast-modified: Tue, 19 Aug 2025 12:56:41 GMT\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1888F1EFEB2CC055\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-amz-meta-mtime: 1746804682.044\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHR9Xe%2FLaWyU8LWGd8yR6KQqShcX%2Bw69p8wGGMCy1ACoNA45pSojEZpjrSOaGDc4F5rMO48a7eXgnz7GGQKaa5QISSqPsd0YOskW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb0cd759d5556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1309192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 644, 8-bit/color RGBA, non-interlaced","md5":"b3be987a5d21f8ff9c15221f8064c2df","sha1":"c8a0e5f134a5aee15e8dbebd7ab474aefe315e5d","sha256":"cfc7001f3caed0958d742b46a8a313c0b3e53fc4e4f6fc59d316d3ccafe4c27e","sha512":"d114d780e31a32c0ed5587e276555b2ed061e8bf6106709719082b6d1f850a1c69dcd9be2ccd67a1debae9f59be38857d69f6cda3a1b890334303a3adbb3d9c4","ssdeep":"24576:6f99AYb9KNDkGjZoCWcECFVQJsMlD/2Jir7mJYnraNzML:6frAYhKNDkOZoCWcjGBDuzWra6L","tlshash":"212523bef15302a3d96ab76059584c37f1bcc447035cc7342ea9bee91a5eed4680ec86","first_seen":"2025-08-09T13:54:05.515564Z","last_seen":"2026-07-17T15:44:21.72942Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1754,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":1336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/js/views.094d7a39.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /js/views.094d7a39.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-155a2c\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8V5kReTeKgfOBb8aY31ezHXEEFRhRGC%2Fdo9gFiaAhTr4bDBxYfJYy7ydeq0BCsahfqEqFMTlvnSI2aOcir9RX9vYBxvKXM%2Bl5gJo\"}]}\r\ncf-ray: 9bb0cd5a2cbd56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1399340,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65218), with no line terminators","md5":"310976cd1d5d06d1426200ad5aa65a4f","sha1":"d3a9fa1baa69b89172465bb993c22bc0cf914325","sha256":"445af60b461f2e44f83314b7e38e535d3e386559e37f67a8341e144ddab96e87","sha512":"a062b063f1d6799a56ad2c18674061d29edd5cee4c29116bba27d4659417875999d1ca948fe167a26e8a0dcf46b88c47cf3e6bf37ed16718454dea827e6cf403","ssdeep":"6144:oGdjCNHwCA5yLU6dtuM6+Ife8cjsXvhSZGY/a8UBT+Q7QB9btFTAx92o5IAWI2aY:PPyLLGwL9pFKdWIFIqbx3wF","tlshash":"eb252b0db187f5bde88b6014402f2628b1753fa8b146c496f375cec69ae8d94731eb2d","first_seen":"2026-01-09T03:21:47.682729Z","last_seen":"2026-04-30T10:35:33.547299Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":842,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_logo\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_logo\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l1bj64KjadlzpFjHaGSf5qbOtBw%2Bd%2FITxZXDjCuEy1rIYmrYjxokNoe9ODXn3Uc78sHYQuEOPgv%2ByjwiADBuYHQKpV6skOaTlRR9\"}]}\r\ncf-ray: 9bb0cd5a6cc156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":590,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"df2b4200248a72d28006a8e4f28e37ea","sha1":"5e763a111c7c9dd8140863c61b17a5022d077d0f","sha256":"3114a49a0dce8dba7db7625efdd8938692b76e0b9048e57b8b30413c2f2fa390","sha512":"e292570af1249b6897f48559829acc2e638de91d2864a11e605d7cca6b1dc4b23c19c92e62378376dcccd39d58620b8abf7fc9d4efc86136f2a5e9c655e718b6","ssdeep":"","tlshash":"e8f0e12f2f3dcde280cd1657857eb88ae4ad73c2818218a87dcef78cc6d9154648319d","first_seen":"2026-01-09T03:21:47.683791Z","last_seen":"2026-04-30T10:35:33.555206Z","times_seen":3,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/oss/file/upload/20250820/03406162406bd8cb7cef1f0e9fb3d5ab.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /oss/file/upload/20250820/03406162406bd8cb7cef1f0e9fb3d5ab.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 647623\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0a7908bc7b5c24536e3d5d562379503d\"\r\nlast-modified: Wed, 20 Aug 2025 05:40:09 GMT\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1888F1EF9075768D\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqkJ%2BONJ%2BFOIwNLBjaH2NajHhjLQAnuI%2F96cqOIyHWw8EK48vMwtMBNeBX%2B7lwTCPaRzZTFObdf6prph6ImgPi83J8B3iksQYABD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb0cd6c0d1b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":647623,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0a7908bc7b5c24536e3d5d562379503d","sha1":"534cd52ac52f98a2c1f14d07295c0a891ca22c74","sha256":"0815ed226cab76bb90ecb84e87f241986083d7a8460b307001a35d4804634dfa","sha512":"fe10f4d07fb30cd307c393a6f18f0e94a5269c9eb70be1cadf6fa1af9be46c7fcd5ff697d487ee5b8c24124935a120d2845cc0bf0d8255108d85039f2c7e2bcc","ssdeep":"12288:JDEkHzDLIQ2iYzIVJpHqVPLFkb5b6jqsH5TX/+qoohknQX39ZggqMq:JLHbyGftwjqiX/+qTinc9Zgr3","tlshash":"72d42339bd67a06764cd19238dd436ec966c157c791e4dad4f0eea200ee40ee3c25eb8","first_seen":"2026-01-09T03:21:47.669356Z","last_seen":"2026-04-30T10:35:33.559004Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":1029,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_logo\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_logo\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXFJ5F3u5KWJnL%2FSFJdAXQVjjvdpN%2B4KMrwE%2BW9CXOaIbw2Wqrop%2F4Rpx8Eg3WojNRz%2BFst2JncQrjIGZj%2B9TSSR3X4X6S8AgPZw\"}]}\r\ncf-ray: 9bb0cd6cdd2c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":590,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"df2b4200248a72d28006a8e4f28e37ea","sha1":"5e763a111c7c9dd8140863c61b17a5022d077d0f","sha256":"3114a49a0dce8dba7db7625efdd8938692b76e0b9048e57b8b30413c2f2fa390","sha512":"e292570af1249b6897f48559829acc2e638de91d2864a11e605d7cca6b1dc4b23c19c92e62378376dcccd39d58620b8abf7fc9d4efc86136f2a5e9c655e718b6","ssdeep":"","tlshash":"e8f0e12f2f3dcde280cd1657857eb88ae4ad73c2818218a87dcef78cc6d9154648319d","first_seen":"2026-01-09T03:21:47.683791Z","last_seen":"2026-04-30T10:35:33.555206Z","times_seen":3,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_favicon\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_favicon\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOv0hO8q5o26EijYjf0KhIdTqlNxwB9%2Fo7rGX3DZjymMHYqupCVyuukICBd4ZBu3D4tWa%2BlO5l9qPDzV9Mvy5U53%2BkYwdidlB5f4\"}]}\r\ncf-ray: 9bb0cd5a6cc056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e2fd05360922ee093c3e7522021da516","sha1":"5789d6f44d60b704288a759585735d988f118b0f","sha256":"e54b937bc10b33586b3af1ed49c9c2c48cc13b2fcaf591fac639bdf919039de6","sha512":"09c90a25042b61f5181137724882f370b5169d9f4f4e97fd8d0f23db2941753312456248ed32601d8116393baa83eb7aca004b9eb382752e2060aaee150be283","ssdeep":"","tlshash":"7cf0a2061f3dcce350d5114b853d6d4af6d9b3d2ca8115a9798ee64dc6de19110071cc","first_seen":"2026-01-09T03:21:47.684789Z","last_seen":"2026-04-30T10:35:33.583212Z","times_seen":3,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/block4_block3.f6f754bc.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/block4_block3.f6f754bc.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/views.349aec66.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4827\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-12db\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iv3NAV1rVHiZ6OYTJsSJsE%2B7W72uxLyX0X1VCSCT0HBuueeeQoeT%2F1%2B3sFM%2FSGhnziPhoXvA5kxXi6Q0ekfGtI2d0rWO7HNepcT%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c6d2656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 428 x 496, 8-bit/color RGBA, non-interlaced","md5":"f6f754bca7331ca20a29926509625270","sha1":"dfb2d0fe5b7e3d7862d044f19d349f85da46bc96","sha256":"081efee2917770245ef4b05cbf60d3fa87fa21f2f43a57e06454fdcb4b6c4515","sha512":"9cb9ef4b52bb1d5994f2b39a5823e56479f74995707985d5b76851de8edf7b693b3dbb4bbb761ea4686c757bd951701b2fd587d865ab9f341b7fffd13b8efccd","ssdeep":"96:kHnBukr6BiBv9oLKeF/xKHChl3BdtqZ0XVBR:kHBKBin41kChN02Xh","tlshash":"f9a119b74e66e31db22ae5cf89f11460752ab92db073b5049f834c9f7416c822e247c2","first_seen":"2025-06-22T10:39:37.558202Z","last_seen":"2026-07-17T15:49:46.806444Z","times_seen":144,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/coin/member/getSysNotice","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:05.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"POST /api/mjkj-web/coin/member/getSysNotice HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nContent-Type: application/json;charset=utf-8\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nContent-Length: 23\r\nOrigin: https://web.xbull.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":23,"data":"{\"current\":1,\"size\":20}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: X-Requested-With, Tenant-Id, Blade-Auth, blade-auth, Content-Type, Authorization, credential, X-XSRF-TOKEN, token, username, client, knfie4j-gateway-request, platform, knife4j-gateway-code, request-origion, mj-lang, model, Logintype, Dept-Id, Email-Code, Role-Id, Captcha-Code, Captcha-Key\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,HEAD\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 18000L\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xpcH0HwCyYsZiQ0EsM7qO6ZtNbaNC3Y8GWNMKWDeQBtjMCdN5LSbRO3OyZ%2BMsAGFdc0zZTIdXytZFSG1PUWjA8WVuM%2F1aGm7sJYC\"}]}\r\ncf-ray: 9bb0cd737d4d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26954,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"92ec8c0ca19c4620b0e16e4c396e7cfd","sha1":"fc1763d1f547b6ef6f3d350cfe4ece5f285b84a2","sha256":"8fc5ac649282c4e0522a12f320e06356288c63dcbc7c7b1df50333584ee83ca0","sha512":"8070150bd065fc6e3a2877c38635806912222e946a6f6e0fd514e225ae9622d095c1756f71845c77a05184500156e13db7c33a361360c3d429320ad2ee652588","ssdeep":"384:Z6vuFRVxTLBPdjpZc6QTOeCOR3wtuzoI11sgZmrsl7ib/Te:cvuFRVx55QTO0R3w8z9TUscbS","tlshash":"e7c27410e3e8026155a141ceb6fb23f64298547463d30d6f666cce7cd9ce82ad6f62cb","first_seen":"2026-01-09T03:21:47.686836Z","last_seen":"2026-01-09T03:21:47.686836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/oss/file/upload/20250509/7c5e5d52f384f76a103f55fb880b896b.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:06.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /oss/file/upload/20250509/7c5e5d52f384f76a103f55fb880b896b.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1756233\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e92e8192582738f3090e597dbca4f011\"\r\nlast-modified: Tue, 19 Aug 2025 12:56:43 GMT\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1888F1EFEB841DE3\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-amz-meta-mtime: 1746804674.496\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKT5R%2BG17ICjTfuuxy6AuLzOAeZMoXJCyHMgFF75%2BZv9Qg7uzDNzLwdCKvcQHSGW0xoH7TL7NhiFihUUqj3ClLiGm1GtC09WyltN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb0cd759d5456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1756233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 644, 8-bit/color RGBA, non-interlaced","md5":"5c3ad8966b2a76730f8511282c7948e5","sha1":"e8af7fbf43db10bc3c1c297c641f95472bb56bf7","sha256":"44fa51e19460fb0bce92e8c6ec07a4c510aa5000a7908aa9c9283fe2c67f2418","sha512":"80088990856a3e24ceba8af54a6bf723c31b8332880af4bb541691d06e66e751c9a639be54ef17135e2d06eed76157c9c339b4ea147d75faf0febe78215768d0","ssdeep":"24576:/XvyKbZkjshLc5HC0cFDuWvc1gqhJa8NLVpicxY/dWlYXnZC:3yOZkHHtcxbErC8NJpicadWl6I","tlshash":"6a2533e767f8af30304e8ebfb11fa8c2762cf524ba5d3da04e499547ab574015168e23","first_seen":"2025-08-09T13:54:05.558342Z","last_seen":"2026-07-17T15:44:21.718262Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1813,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":1391,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/svg/loading-spin.svg","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /svg/loading-spin.svg HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-1a6\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1SAHNLuPg3Bk4AKHGbUusswjaVQFON%2FM9rKdjyBigr%2FfB3%2FE%2B7eWDjW0k5GtLbMAyLu22heYp1DheW34Xa0U4QMKcZBR2bLeJNN\"}]}\r\ncf-ray: 9bb0cd500c9556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"037f0a4f642ab8e77b624c3397411ebb","sha1":"32472bcb995af56caeecb9dd747bd56545fa0b8a","sha256":"8af421d321398026263f9eeb85acf0130787e4d66ee173dd2023d291b021d59f","sha512":"fc66e5c04f76fd183f2e64aa86ea80c93d24805219d3ac5b59968a535b27a4631905f389d02d93979bd1e941b81ca683040926d6257ef584ed341ce216ccdc6e","ssdeep":"","tlshash":"00e02bb9ec1e660f402e479b6aacd800239dd2f127050096e72c1c39680f419eae7149","first_seen":"2023-08-28T22:21:58Z","last_seen":"2026-07-20T00:56:03.664495Z","times_seen":305,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/js/vendors~views.7f54d06c.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /js/vendors~views.7f54d06c.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-175134\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74d0IIhemzvYRpeuxR4MZeNic6C%2FavaEQFNoRShEPcq6PXIBR6G5pAP79GT4FaLjZN59b5PWwTFENhhRkxY6HnXkp5eLe3qOCRIm\"}]}\r\ncf-ray: 9bb0cd5a2cbb56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65449)","md5":"a5b7446abb220bf4ec7a73ba9f14529c","sha1":"e1d00bf20563c3fff3f29e35e2dc2c4ff93437de","sha256":"a7e125470539850e716b887b91853b943ec0c779ea0dac5aa1694c4c537037ea","sha512":"e675164912b72e17b1f17892618c3dc347cf89f9457dbab82832f90bf2b46f76e934993850bb0ec8012a6432ac9dcfa04f5638c67b090be31d6867e41ae9eb39","ssdeep":"12288:RpkJD00IaveH+7MXTEm9uLJ1u17BmOpf9ns54BwHRCwv78gmODXX/BtVTWNhue:RpkJDrIavEj1djlRD8RQgHn/3VTWjue","tlshash":"b025099cb654b03543a731b4016f090fa336680db54b85a8fa69d4ea6cbd44f323bf79","first_seen":"2025-08-09T13:54:05.531909Z","last_seen":"2026-04-30T10:35:33.571687Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":1012,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/pc_usdt.995d8d60.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/pc_usdt.995d8d60.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 541588\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-84394\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrjkaD2TmsNZqFteE2Zi77v%2BVp91vPAMYdN%2Ffk8AnDISH4e0lwsy28iuxRS3wYdIOq3kKzqECtrCymI9wgfNmkDXh6Y04KZjSQwI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c1d1c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1388 x 1214, 8-bit/color RGBA, non-interlaced","md5":"995d8d600394ae6c0b871d71f4877757","sha1":"421b838edca01f25eee84090efd9e11deb97d00d","sha256":"db891ddd14dc4845aff803ad66a025b40d71cc068598ae9e887526034590ab38","sha512":"9c957aee12a0158154a6e9a397ecc29180e98fc7724011a7e86d189bdddb38d55dc4e15d2b230e77d781fe3120798fd52b4c4c02cf5a0ffb62f6c988ad409df8","ssdeep":"12288:4ZEGuEaXh2cUpvEFxc4OjbvYCHf7HNlTyHxHKM1XxUerUP:4ZE2Cxr7cNr7HbNhSJKM0OG","tlshash":"0bb4232a88e2c1b2f5dd393c01de8b678306900ac6ff5e3bfb11a456a14ad454d94b7f","first_seen":"2025-06-22T10:39:37.500835Z","last_seen":"2026-07-17T15:49:46.799901Z","times_seen":112,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":1036,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/element-ui/2.15.6/theme-chalk/fonts/element-icons.woff","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/element-ui/2.15.6/theme-chalk/fonts/element-icons.woff HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://web.xbull.top/cdn/element-ui/2.15.6/theme-chalk/index.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-6e28\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RcQAt0JDcGlXoukiWPRqKjNB35T1PbNQUAi7AZX%2Fh2wfKFf8ZgUgIthOOamuZYTzCCtR4ekLVgczVNc6JYg6NY7%2BU8okOpCjGSxb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c7d2756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-22T08:20:58.46665Z","times_seen":26899,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/coin/open/lang/en","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/coin/open/lang/en HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXLiddlAu6jS%2FuID0VgNEm7Mn%2F%2BmSHeQS45woUUWttxqW1xMbsAeB%2FHcmZrAz8he658DI6bWWLe6hTY90N32RqInm9B4UQ5RRE0Y\"}]}\r\ncf-ray: 9bb0cd6cfd3256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ffaaf6730c089fbd7b410c19ac963457","sha1":"347d87711d0cd453492509c03e88c09e6b5875f9","sha256":"91011ee658dae21b1d9a2c5f1f524df3cd4b1490516254b62ceccd9bc8da01a7","sha512":"c106c187e3621199ed8585e78115c892b44e328eece9dba3aaed6154831b8c1aa9e4c5f86626c3f000b3e097a16f22ddbf4a911ae1719cedd9ff51c5c3765cd6","ssdeep":"","tlshash":"76a002971e1852e7e9832164b92f1f15147833726104d668dd9d563d85592a2b48382e","first_seen":"2025-06-22T10:39:37.543468Z","last_seen":"2026-07-17T15:49:46.744381Z","times_seen":150,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/css/app.2c4d0afd.css","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /css/app.2c4d0afd.css HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-9902e\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yw6zJTtdo%2FeYxfZV0lF638Fe7rooNyIJwAOCKtC7n5CJNFmQRud56pcI29KxMOY8GCqGdBo7j1iP%2B%2B2mdjAlFe71P8JqPFZrqWM3\"}]}\r\ncf-ray: 9bb0cd500c9456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":626734,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"023d6cf2fb7f8c3d0e9bf5c22c586484","sha1":"993533e52cfdfb5660236ca672d8a12d4bcb6f1c","sha256":"45a7bfb5dc5ba3723a24d181b1f9f4c2e9f6adf7cf3b7251ddb94814b349a7e1","sha512":"8e4cff9403fc2ef35b00f01309538fb0ff4856fbdeb3256a9294776f2118fd255d389ae1357b4202ada0f27a43da963cb82178e5019f17d012835fa63ed013e7","ssdeep":"3072:oTJP5tVhkEDTzw7+ZMnKlokyfHnz7cM7DedoPK5k7WKtcpJkn+5obCt8uoYZzJnw:oPGjanfnf/ye65","tlshash":"26d422e3fae12008a11ac6a7d252b7bc7e3fe8d053429e97e3067b7587441d76a1052f","first_seen":"2025-08-09T13:54:05.547627Z","last_seen":"2026-04-30T10:35:33.545893Z","times_seen":6,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":404,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_type=home_index\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_type=home_index\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSu2wVLfSjj%2F27IW%2FDuYGOI0nIEstSiD%2F7wwwIxnfX%2B%2BKCQitHz0OyPPK2FMYZn7MMRvbSEZPo%2FZOwhCpr%2F4%2FDlvMr4QSGtXgQCw\"}]}\r\ncf-ray: 9bb0cd6ced3156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9001,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e7ea6d3db4545420f80d7899025cad49","sha1":"46fbfe50bd458c83b3672ab6de647af7fd4c4c68","sha256":"c38b1542e007fb1befb05fda1bd60060da9affb000dddae17868eacecd332e7a","sha512":"efcc0ff6a6eaac9e1bb4cfaf79bf16051513249488e5e086440ab3d2a7d9a31acfe5efeb6722f0322403a134a76808d799f8376e853b6e4f01d068ad455d5075","ssdeep":"192:uslF+blKu96GJl9wYsGv/gljaHvnhpOCCt:us+b4w6G39LsGv/3HfhpOCG","tlshash":"0302bb9e1eb9bcb9069520e989736d9431cf7758eac409f53eacca0dc3f844a924f351","first_seen":"2025-06-22T10:39:37.542038Z","last_seen":"2026-07-17T15:49:46.79316Z","times_seen":155,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/vue/2.6.10/vue.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-16deb\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7%2B2MKrRI8T4x7lOiPfR1oRF64kY%2FkLtWHP73Vl15cfOWp7Hdvvsz9jKWRTLYjMX7jmzLMD%2FE%2FcCibwIdSghZo5%2Bwu01it7RE%2BTv\"}]}\r\ncf-ray: 9bb0cd501c9756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93675,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-07-22T02:15:32.636081Z","times_seen":4388,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/oss/file/upload/20250826/911d56e299c4f279e1964add1cf2f1b3.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:06.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /oss/file/upload/20250826/911d56e299c4f279e1964add1cf2f1b3.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 952\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"82e867e2325ed1ac5295b9c3e8fedd12\"\r\nlast-modified: Tue, 26 Aug 2025 22:47:03 GMT\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1888F1EFDE60D860\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMYCl%2BiKjuFe1JGF%2BzaErPcq%2FpkBAFBXd95rM%2FSCJ%2F22WYFOj7mg9gBwjYF0ZjadHKAUwdclz50S%2F%2BRbS%2BC67tgSDsATwS2HTdDP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bb0cd758d5156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"82e867e2325ed1ac5295b9c3e8fedd12","sha1":"8182d0bbf6a8e680414f5ae3485ab7f33874d0db","sha256":"eedcb4ce61662044ec321ecb0398771cd2744984f7588943b3a0c1df8ae467d8","sha512":"efeb57987655fe7f26aaa99f8a3db7eab0e30197bb064a238b984e8069c78c9294141a4b077627a43b9658d5917a35e054ea67b3f5f37a56ae17de3eb214966d","ssdeep":"","tlshash":"211154d9e1103dae3743360250ad12a04a4e5ae6d6e5901b1a7544bd2c51e0692aa362","first_seen":"2023-10-22T04:22:57Z","last_seen":"2026-07-17T15:42:04.891274Z","times_seen":95,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/element-ui/2.15.6/index.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/element-ui/2.15.6/index.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-8f20d\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPAxWygLVJgXMgiSUanB1vyHs548sxe8aja1NO0bMmDW1yBIaIn0uVeI6VNyckwkiPbCrNgGuBBeOZ1cUkMPVgyZMfs%2BxiRXSajp\"}]}\r\ncf-ray: 9bb0cd501c9b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586253,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-07-18T21:01:06.837569Z","times_seen":545,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":594,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=empty_lang\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=empty_lang\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svVYM9QwM4z5Bu96qSZgCUxYIAkUEoHXsU69rp7B9dcExEAOcB1riGB1%2FFIIg6gRG6eokrgHeFVG4q6OtD0GrcFq4lItG5FYlT7O\"}]}\r\ncf-ray: 9bb0cd5a6cbe56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":491,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1d042199b9a7b35aeae679ac56cfe9d3","sha1":"b405ed8e9dd90217777b2c17b6355614a0c6fb1d","sha256":"27c4380ff1968b4f2f979375f0640f23591b0fade2e8bc7ec3090ae031105119","sha512":"399cbc2b99639e12e77a8d9ba242ca0dcb20aa7c506682b29452519231424789734aa3cddec21967a2fd5a94f33c106747f6881340ff0c3544c957229c3617ac","ssdeep":"","tlshash":"56f09e0a2f6cccd785c051d7853e7505d8d933f382850ea96995e60ccade652340b2d8","first_seen":"2025-06-22T10:39:37.548621Z","last_seen":"2026-07-17T15:49:46.809851Z","times_seen":158,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_title\u0026column=id\u0026order=desc","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:01.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /api/mjkj-web/cgform-api/getData/1530464853989064705?config_code=web_title\u0026column=id\u0026order=desc HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nAuthorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0\r\nmj-lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnoRazdzf4DiW2687ZwyvAHqaV7ZIiQcJ4rkK8MSB9coi3K%2BtsnSU%2BRvLDIj6BjjzPITRNcSYrZ1kwNuO35dU93ts7rTjWZDdGXg\"}]}\r\ncf-ray: 9bb0cd5a6cbf56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ed4eef3416fc011c4f676ad20536fbed","sha1":"2b8a766845ed833a8403d9a1239906a4c2d73353","sha256":"fca7dce831aba9c8cb97707af683971e984977b07d771714aea0aa0b20ed1da9","sha512":"77ef0b6dfee13235ebf7d6013200df430c6f80b2958fa26a7a5554142fcbf4cec00e78eb653740655a7c46f95c4f382fc7c34b87d011726b83f809cb0e78eb9c","ssdeep":"","tlshash":"141138ad9ea8ac7142cc9f7a642becfd70cb5ac1d180042a7448fd4ce59d8d390d296c","first_seen":"2026-01-09T03:21:47.698538Z","last_seen":"2026-04-30T10:35:33.569967Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/block4_block1.41051661.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/block4_block1.41051661.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/views.349aec66.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 4777\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-12a9\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8T1sF%2FKRllc7UkQ3p6Nh202LUTxJJkhSyIyQnV4QSWR5lOW0jgbNR7G54r4nDX9KYrjTucx7uaLDwpXqAUW1eXN2cts5A%2FaFi7Uq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c5d2456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 428 x 496, 8-bit/color RGBA, non-interlaced","md5":"410516612fa491e6298d89039e672c86","sha1":"f8a2bbdd71d25a67015d553e983ce1a960f7498f","sha256":"bbeaa83cdcb019f15749a2650d8607d8a793d23750fbba6a52a88bbe75dce664","sha512":"8ef8c226ffb63fdc751e2efda3bad4315c3cd7c23bf1b0a534278dbe36429dafeb7b76fe8e9b2f6eb6471bfe212bfc37862934d6c35c346d91fd9b9f86747aa9","ssdeep":"96:aIWpsbuKH39V8rra2MjtTHnrxvx8b5uMKCXyeQs:Tmsbu8y2bjtTHj8l/nX","tlshash":"09a12c33446df31ecd5bf5424c714829b917f7cea23170990b99850c3e5ea52ccb9615","first_seen":"2025-06-22T10:39:37.533849Z","last_seen":"2026-07-17T15:49:46.789709Z","times_seen":144,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/block4_block2.462b278a.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/block4_block2.462b278a.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/views.349aec66.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4851\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-12f3\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U73wlv6G7CfzF2RV319Sqc9PnlCFroKr5D6RwAl1O5ZJ%2BUfFE9jLhseT3jkpBcoaFDk00vrs777IyFtgXL57Drj3VT6rJiLW8AMK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c6d2556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 428 x 496, 8-bit/color RGBA, non-interlaced","md5":"462b278ad9d0dc579fb04ce43cf672b3","sha1":"25e1fc982482429bc9218d4abc22225887253c30","sha256":"d3cb87807ef9d0070359c2966b6eae32dadf2e7e39a31125e581621cb1939b2b","sha512":"20f9c5bd3caf0708d7f2e874772afed38caf336ff659de001a884decbf49171ce9e3811b71ba42bb65998563a41102feb4906877f43456103d69e1f6d3839d74","ssdeep":"48:MqjmE3Op0SQmqirQVl6NMiCO8u3p5B/bl/q7vxQAKp1NFy6Cg+lf/G5BbBQep0/D:vF7TrVI8uHVhAvY1iBQ/bBQe0RTl","tlshash":"00a11bc5d30271a7bc7664633dcb2ba5530ac306025566be07dce641b25cdeacf75117","first_seen":"2025-06-22T10:39:37.552831Z","last_seen":"2026-07-17T15:49:46.835272Z","times_seen":144,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/axios/1.0.0/axios.min.js","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/axios/1.0.0/axios.min.js HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-32a9\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrI2eFlnKMbyR%2F9vHJw2vzh1f4roqRB7OXShTbao3LobFgOIAA2X8DCBTW0ssPlKgg1vjLnzVh5CTL5LGyJEeaPpRkwKJ6H6S%2BiH\"}]}\r\ncf-ray: 9bb0cd501c9a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12969,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9720)","md5":"76235a7ee6b454034b80a390ccc92f37","sha1":"8a84e29a036660955f3ebc42d43bb522730b5707","sha256":"3c92bac09bac9bfd77f2ced65b63e009c9b67c109a9d37de637b3573d7ec7adb","sha512":"35c36d820651548001703c6458cfb922c55c12bd8c0ed73a8d095f0656e45c345e0f4fb2fe0e037d14009020dc38bed1e349d110b3f9f2f50dcfa0f05f8cbd08","ssdeep":"384:3ao8KGKMMT6nbNp0nkJFP5F0YS6DagzzNYT9eei:VGNp0EPb46DaT9e1","tlshash":"f242a7ce78a1b0d747f320f0905f5a0fb2b6992a644d84a0e560e8f66db546e8737f4c","first_seen":"2023-06-26T22:56:34Z","last_seen":"2026-07-21T22:55:55.53828Z","times_seen":321,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/fonts/AlimamaShuHeiTi-Bold.5826f736.ttf","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:06.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /fonts/AlimamaShuHeiTi-Bold.5826f736.ttf HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/app.2c4d0afd.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1375772\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-14fe1c\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdO%2BGzsucLbhEnAN5VY26mqQq3CimuFRu%2BvV253tFsNPRbmeO6fIFZ8WAkQEDDcAPhYMI3JxD7xb%2BegqVS%2FHHjAHwjLeSgXhVEZ9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd776d5a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375772,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"DSIG\", name offset 0x1372ac","md5":"6402e8c09d623a2f3965733c85e4bbc4","sha1":"84f717581094847fef17cd69f3437498548d02ef","sha256":"6de72cec146a1943996e2c209926c8c722aa6ccc5f8381f0a1de7b68277c8b47","sha512":"c7473d5c59d3a25f9abaf4c7ada0cb4b8a794d68e022645b0c6f6f99786ddffca80f43a9f68e241332b3d50d12496c09f7c6962d96909491afbb6477d06d260d","ssdeep":"24576:+1G7a3x0lrP7hPABYNAsiV9hWT3IGJTFB3cHbhJvC:V7a3QRPAy3iVo4GJZmH6","tlshash":"4e253942e6e8bf3d9a21f23e6521655df18ec8251b9487918fae3c36487e4170c0ddeb","first_seen":"2025-08-05T05:04:11.433985Z","last_seen":"2026-07-17T15:49:46.760962Z","times_seen":165,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/cdn/element-ui/2.15.6/theme-chalk/index.css","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:00.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /cdn/element-ui/2.15.6/theme-chalk/index.css HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e098cf-3a424\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bX6S6XFuTtLSfjNio7pHHw8z3oSMtMvUl8oTWLihSHq7jsYMrRvKJulLv3DQ0DZ5CQthIWvUVyyYTH1%2Fjvn%2BhOpAvJROulAfsHA%2F\"}]}\r\ncf-ray: 9bb0cd500c8f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"27474edeabad5a86b17a4e2dcf3b6ece","sha1":"942c0ab66ac1efb0343763eec946e65cac3f71f6","sha256":"85a22fbdbbb8db72c5eaace4af0fd5d0f2c97de98482237620739eea022d778f","sha512":"d54741e4c862482d4ef8f1e4783c12edd4dde4182d03210b9cafb6f2b8f069252148ea4c79912f3e8b5e7b9874e39caf319709b2cc61dd2a0690181e7f985c43","ssdeep":"1536:f28Y7SrW3YeWXA1u9w4HCe/l4Ttg5fqMEL0e/78OaiZkW1YO8eQFsGQtf0IcXyrO:k3H0RifeylzhUEDw","tlshash":"4034a7219b07216b612bde6db6c0ba895f18c323d4725bbbfe95740cc7d34891263a4f","first_seen":"2023-05-06T09:42:14Z","last_seen":"2026-07-17T15:49:46.831814Z","times_seen":405,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.xbull.top/img/block3_bg.2cfadbb1.png","fqdn":"web.xbull.top","domain":"xbull.top","tld":"top"},"ip":{"addr":"172.67.146.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.xbull.top/","date":"2026-01-09T03:21:04.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xbull.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 13:08:08 GMT","end":"Wed, 11 Mar 2026 14:03:05 GMT"},"fingerprint":{"sha1":"C6:BE:F0:D0:E0:FE:68:DE:F4:A4:D0:56:8F:9A:A2:05:1C:4F:B2:A5","sha256":"17:C5:19:87:BE:4C:FC:9E:63:5D:85:4F:8E:EC:23:9E:B6:C6:B7:47:3D:9D:5C:DF:34:C1:14:68:FA:9D:04:82"}}},"request":{"raw":"GET /img/block3_bg.2cfadbb1.png HTTP/1.1\r\nHost: web.xbull.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web.xbull.top/css/views.349aec66.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 03:21:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2458455\r\nlast-modified: Sat, 04 Oct 2025 03:47:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68e098cf-258357\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25%2Fxkpemz0FRyCsV5tf9Aq%2FDIYRabtJFWvfmTb%2F3WfzVnSUl6lTJO9zvx6E%2BPRR7UXfSYzRwsQAEPbrNwVrrNtG%2Fi4rdHBNGuC94\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bb0cd6c5d2256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2458455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 1600, 8-bit/color RGBA, non-interlaced","md5":"a33f22c04251eb751a3a42213d70ba33","sha1":"2332e161bedadad3d4628ac0ed07799838ee00b1","sha256":"9048cf041ee954c448aba167ec1020bcf3cc5ac1527bff4a2ecd7c41c6482d68","sha512":"6793ff2b5b626f685f3f8ef86d5bb2841fa9ad7d9c355a567f482ee474717952327a654ec41534f7ee34f408e2759c7d6b28e0b464901aa0ac1f9b17bebfa81e","ssdeep":"24576:3vUHVcTyGz6YkqjDcJjL0kZiVri+8PrCqgtIOwUi2RS1cmXJJTByr07dp08Z:3vUHiTyGz6YHjDcJFA1i+8DTgtIOFJRS","tlshash":"9d2533c4c224e71c9bd8c87d22710259a750b777c74cca9e67b69cb00e45861fca9ebe","first_seen":"2025-08-09T13:54:05.522147Z","last_seen":"2026-07-17T15:49:46.811683Z","times_seen":144,"resource_available":false,"data":null}},"time_used":2067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":1636,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"web.xbull.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}