{"report_id":"6dc0b7df-9fa2-4f9b-ba57-09fbe49b63c7","version":0,"status":"done","tags":[],"date":"2026-07-06T02:27:25Z","url":{"schema":"http","addr":"x32i.top/m","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"45.196.247.166","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"x32i.top/m/home","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"title":"welcome-BET365","dom":{"size":486360,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48963)","md5":"e5a6d176562f5fef5a8f267b0d31052f","sha1":"3f171279566c2e2964d41489e47c092c3a2964f1","sha256":"f1a3fd26063392db7cc721f332871d14535b988ad8b5401d647d4e8fa91034d4","sha512":"f05539ddb80b06703f8b1e954767f13974315336900b2d08eade4f952b48f5a639c7c6ba0a703f2c16802d500b6444196a5766834e5c1c4f3b8d638cd7c97350","ssdeep":"1536:LLJYS1rx/sXEoxXgadcbFTZH6Ybib9ihwiQDFb0oRbYhfbO1l37URT89VYO2eiVn:Ta7ihwiQDoTO1l0T9plCYVke28","tlshash":"cfa418f4039c43f4f40b879dec363c6122a534fb7fc44648f3ad59a1ab7268aa85d865","dom_hash":"domhash8090c164ec2b6427365cec03828adc6a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"x32i.top/m","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"45.196.247.166","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-10T02:27:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"x32i.top","ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-04T20:42:01.332232Z","last_seen":"2026-07-04T20:42:01.332232Z","alert_count":725,"request_count":145,"received_data":12717805,"sent_data":81457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-17T18:41:28.517464Z","times_seen":234079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/18936.1781011881923.c4835433.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef933198ad34a7c7161b09ebc222fa1a","sha1":"dfe195c35c6ec7eb06f6b74d0913dc2f1744644a","sha256":"72d500e30f9bf8e13269348c415470f37f645001ba9d85971caf568021f75b08","sha512":"6d5838601b1a70df73169b6a4ca0242d346d2e390f23345426526934da5f17381d789723790cca2db384ebba800ba6819ee4880e4299cafeb6a11e76a46f478f","ssdeep":"96:0RIRXZ6PHCVBNlteeU4D+XuNSvUPPVor0Wvhl8:0RIRXZ6PmjGeU4DovUPPur9m","tlshash":"59b1fd8cb281b07007af2674862f155bf23f9890a58df46ce1b1e5d07ef151a827be69","size":5093,"data":"","first_seen":"2026-07-01T01:07:30.802598Z","last_seen":"2026-07-12T06:54:15.819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-17T18:34:30.708754Z","times_seen":724917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/home","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-17T18:34:30.708754Z","times_seen":724917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/home","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-17T18:41:28.517464Z","times_seen":234079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/home","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-17T18:53:23.023865Z","times_seen":89107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/34683.1781011881923.ffb73e4b.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8638a4a1d03e84802b6628538bdb8ab6","sha1":"3363f78ac45a6df0103483a4b2c5bf23e13ac5ca","sha256":"fc4609af11785458bbc690c9efe0ca9c652ee5cf7f2b42e5d3df98ca7d61a6b2","sha512":"46f12783ced7b2726d4912395925792671d106897cbedb29ff0ccd6cb17969960c9ce603206ff04163c4b8bed0f7209bc96fa18ba72cd75bde714a1145be559a","ssdeep":"384:BZ6POG/HnUen7QCMOp7Qe5O/b3reqRw9KXGOVSOMkgzIk:SPOG+s9KE","tlshash":"84c2a20ecb8cc6cabe211fac431d91a10250e8f7e58659dc95e6ad4ef93c50e364fa5c","size":28249,"data":"","first_seen":"2026-03-29T15:00:38.365713Z","last_seen":"2026-07-12T06:54:15.808688Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/35142.1781011881923.1d227afa.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8325235b613820a57b71043f360e5b36","sha1":"925ff977edf9892e868d43915f93d29e6feeb113","sha256":"0c505f39a463b09ece16c213b7ead75186dcdc26d25ee02dcba5a62cc0dff7c6","sha512":"efd16c9b7ff0f806890ae77542e8c0d4e954f8c797ff21b8dcde3f240e4940ca3c6d0fe75ee2fda35bf53ff5d0eb691fa7e38cfdfa82c0f231b0cd57458fbcf2","ssdeep":"6144:N0hEyLkbJDb7w/1FOAmBm7cene7Ancbt8sbyAkKJwoSlt5MMjmlHGwwzHUY9SroE:N0hEyLkFDb7w/1FOAmBm7cenaAncbt84","tlshash":"8a742b94b290b17883af86fb731a91a1d24d0e9460ccace4f27e6e407f15746b8775ec","size":340163,"data":"","first_seen":"2026-06-12T19:29:57.248751Z","last_seen":"2026-07-17T12:51:04.981104Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/configPage.js?v=6/9/2026,%2021:37:10","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","size":949,"data":"","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-07-17T18:34:30.689311Z","times_seen":2410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/config/initGeetest4.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","size":14975,"data":"","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-07-17T18:34:30.5998Z","times_seen":1533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-svg.1781011881923.7ca9cdc1.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e885a50d7dc711be337a96fe33f0c2e","sha1":"8c767dd1bdcbf35f2577bd215ff6fe495cbd0f43","sha256":"603d14d58a247671742688b96c517d62e9c636443b960bc421af5352df4c01f7","sha512":"09289e06b0db84915693f0b78ab40149972b29693d0d6b1e66e4fbe9bddf00380f5f4e8e78961512d91a132226494572994ceade62d3d8a878126fdcdeb8fd95","ssdeep":"3072:/8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:/8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"c0a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","size":470763,"data":"","first_seen":"2026-06-12T19:29:57.244213Z","last_seen":"2026-07-17T12:51:04.92266Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/13575.1781011881923.cda1d494.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"65e5fffbcacf52710ad963a4aeede3be","sha1":"f9c16a3c86649aeacf18e736faacff0cf78192e7","sha256":"36f42498ee253b0d1d5e7ec8bdf406f05c4c91e72f64169b1ff67435d2069099","sha512":"96e8263c115ca75ff63f6ce70ba8ad5af370662f86c2f95a8960a5aa5a30ce4134fa01d7fbd1694ce37f111b69e3e418f0542a7ab1bae4cec570c8c3d8d08986","ssdeep":"1536:917BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:7jHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"23141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","size":194916,"data":"","first_seen":"2026-06-12T19:29:57.266361Z","last_seen":"2026-07-17T12:51:05.016487Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/96039.1781011881923.63b98ab4.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dce5ce231d5aaf54edb8735f07f2b2f","sha1":"96bea019adcdc6ab245f3a9f83031f96bfef07bf","sha256":"8d7be78dcfef436963944a61905ec8457dc5919a2c436354f25073596cbeed2b","sha512":"a2015eda106c752e446fe33273652167cee95c1eb7741ad110131d4822bba08dc359bfd86cacf3188345e15fb71e350ac8c56e3949d9ca182cd1d1000471eb8d","ssdeep":"384:/Z6PQGjHnUen7QtlObS3OIkjoT/9KzLO1IY4pOmO3QOqyR:EPQG+9KXi","tlshash":"84b2910ecb4cc2dabe711fac421d90610250e8f7e58759ec95e6ad09f93c50e365fa6c","size":25055,"data":"","first_seen":"2026-01-10T05:58:33.943445Z","last_seen":"2026-07-12T06:54:15.687147Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/theme.config.ef94991b.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d279a2980268d2835cec593c23d286","sha1":"4374bf6da5cbdf8f025434137487bda68077cddf","sha256":"1679f19badc24dea0edab376edfb8583714645e18f705fb849037af6cf0b3ff8","sha512":"362ec1b73cebe1ad224a5b745c9ceebf2b86301deab27e35d6517d499499328b34c24d76a72e5b348d623e64a4d17bfa0ab08d2aa012f02af23c6a72df51817f","ssdeep":"1536:D2JREobVmtlIRM4Sb2mcTa2mnzyJog9CcHWHA:qEtlGu1Jnz45HT","tlshash":"c0b3bb7ae20c963a6177a8bfb46ce111d12f9c0c9b1d5fdef03e60a25710669c831de9","size":108079,"data":"","first_seen":"2026-06-12T19:29:57.324936Z","last_seen":"2026-07-17T12:51:04.907194Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/18096.1781011881923.d6b266e6.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac5be2b7da8d47878caaae404942be95","sha1":"6aa091dd8a2872faaea3b570b8b05908ab45b6ef","sha256":"3a9ef24702acf2b152e28f8191edcd0be3dcd3cc5624b8030f1974c6cd5d1377","sha512":"ce8f012d6e2bd45a1547438af8171087eefae87e2f88cf9cfa0a9537cfc50b5439e774bfb1babe8409c01608b1faada843655e3284b86e0a579baeb1224cabb8","ssdeep":"384:8Zq7GHHnUen7Qt+OY3VUwrGzLD+/oT/9Kb427IK14qITyOYfOUgOsJz6X:V7GFY9KZ","tlshash":"72f2a20dcb8cc2ddaa211f9c431d90a00690e8f7e58699ec95f6ad4ef93c54e325fa5c","size":35618,"data":"","first_seen":"2026-01-10T05:58:33.940614Z","last_seen":"2026-07-12T06:54:15.658702Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-init-1656f0b4.1781011881923.32336986.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"149a9a32eef525724cd200e4dce7a032","sha1":"29b091925cae6d90319391653e40685f6e6c5735","sha256":"10fcb7c4e44a141964cb31c527462c6e56f78d95c956fb02c50c61fc576cefd2","sha512":"62d80403786c13019e86e1c6b991d73cf52ff5bd25d4eeaec34ca12125d677604a269fc6c56ef301f074c42798f8e7935df623d6a0a62559d70749e53082085f","ssdeep":"1536:z2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCif9:z2twqhOIK2nCLdyACifMur06/D","tlshash":"6dd3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","size":136038,"data":"","first_seen":"2026-06-12T19:29:57.333908Z","last_seen":"2026-07-17T12:51:05.018981Z","times_seen":628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-init-c0d76f48.1781011881923.0f397bb1.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"815f2acbd0918250f25d4f71409219b0","sha1":"d5778078df7eada22b3175f9182b8b22e828c433","sha256":"12a61f287da39190db34dff1de7188c3d8b76ffbd1c11290962db88fd5e2ab46","sha512":"5ba4adaf4b36b4a402c30c3aaa5be5f02e292391d79400d353a5ca6c61405cb40e5179858abddb1af6dad243899e420111e49004d01d339ce9de23d8f522c379","ssdeep":"1536:zG5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:iQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"5ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","size":161226,"data":"","first_seen":"2026-05-11T06:12:53.502908Z","last_seen":"2026-07-17T12:51:05.055539Z","times_seen":631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/m/index-399e2569.1781011881923.3af63572.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc20724c56846e36ec0c5a6d71bd9cd9","sha1":"00461d0ff2e4ae7c7c9696e710f673451770884f","sha256":"d29610263458856bc7eec5c5388fdc9ab1102e33dca30cef80e5e403ed2ba2d2","sha512":"59a8049736fe4614b348873da59fa744b059298f40bc0878231f88cb1fe1603ed7570f0cade60e43811e7c9d9f286fcb252d7ad7ebc0ed7819fcd83171e66bcb","ssdeep":"768:zWQ1rEMRCpgZWd7IUML4oXTzM+AOpULa+6lKtZ0NyRCrCA5FY9AfXyU5VH:yQ1rEMRCnd7INZAOOLabK/0NyRC/5FYS","tlshash":"43e2a5e23382bdacc54f9277f22a64ecd93fc185c31fd4fcd155be9478986059a81680","size":31418,"data":"","first_seen":"2026-07-01T01:07:30.795214Z","last_seen":"2026-07-12T06:54:15.823926Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/59490.1781011881923.42744005.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fc1f2655dbcc496f7d2b9b19cccb4ed","sha1":"d6d2131d90cc605cc12875c65ce702f3409f5594","sha256":"2c566c376d0f6cb48708c08f8110adaab1032b9f747a09b77f47357cbaf9318e","sha512":"d3d7ff6bea473171c80b7fb461989c413ea17a6cbcb4e5b3e40a5e4e208ef06935c122dccced2803c2916579faff0985b27ab2b6812286fbf4152d50712c939e","ssdeep":"6144:x7tBwgttXxyUtnBYHo0L8sDI9/KCytZLyfCBnmMzIroKj7:ttrtnBYHo0L8wI9/KCytZLyfCBnmMzIv","tlshash":"95643bd0f39171bc8b9791f2761b1039a06e0951208cace0f26dfa647f61558e97faf8","size":324667,"data":"","first_seen":"2026-07-01T01:07:30.839391Z","last_seen":"2026-07-12T06:54:15.808138Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/84222.1781011881923.122fede9.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac805aa0d7216d2651fb367a7bb3ad5","sha1":"b21c2154160b9f13c3c27b0ff5b1953e64daafca","sha256":"38c2af4a3a0acc2ea2533b07d3295df6c95cdde2dad5aa094c8f4a088c660374","sha512":"eef30692a0945e399910b75bf69bd8030622d2abf52d872891b58d539bc339db517fe138e8dd104f9860fde0ef1f13739e35735250fb36f0caad603e293c261c","ssdeep":"1536:QcK/KnqHB3vmxuHXvK5+Gruc7iSxTcgO1JwTl0sI5pQiVFFsdt+H6Xk:0B3vywXS5x7HYgODwTl0sgQi2tkkk","tlshash":"0c93e8c4b5f4f5f8279ec5a6973644b8b02527c5b1c8ace0d2e96e047f1ab52b0718bc","size":91573,"data":"","first_seen":"2026-07-01T01:07:30.843443Z","last_seen":"2026-07-12T06:54:15.738262Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bbd69200a3d758f89e8076a123ed982","sha1":"dfe2d66f2d85ddc2008401ed15dcba3515392f37","sha256":"b79cd0c532adb639e6139c9394527b217982efdbff4969494986edacd943e2b7","sha512":"ffb7e75ea86b911ed842f7525c08ad5cd4ef5085736e757c47f3b4e09b3c9497dad089fae69953dd819f57b3ac1cb3a54ba037f9a8ad3fa37d7aeac9ac36bcb3","ssdeep":"","tlshash":"07c0c0770f2c7f14110310230174f3ac5431c028fc15b302331f40018b50b0d0c30e40","size":178,"data":"","first_seen":"2026-05-25T23:43:55.293244Z","last_seen":"2026-07-17T12:51:05.11406Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7d6cf21ba9b37cce394593785671f7","sha1":"aabeaf8e874da29cee7e1645707577446b8de63b","sha256":"6912a38811267077bd6dd2630bccd25ba04b653b4967a636d75a6ec97c5bd2fd","sha512":"9739d97867822d248e0083a78d8657485d85e70bbb7a75e0fccd283c2bdb980ded0ea78b1a4fb0540c529e602ba88286021df0553bb23e45fc91281f64a4db49","ssdeep":"","tlshash":"de31ce286eb29531a413612a1f6ff2843235d62f3148ef003f0cc7651f24d6ba6356d5","size":1686,"data":"","first_seen":"2026-06-12T10:00:06.928319Z","last_seen":"2026-07-17T12:51:05.114826Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a15b4803f5b926cf35dd50ad665005e3","sha1":"0dd0dd998736dc9db4ab3c7ee8f7cabc8e1e341b","sha256":"201c5550359d1e530619f58a4f77bfbe382200e2b0c85d4136df96523aee625b","sha512":"e21d282a7abbc3b8aba31153d7969b54c647e3c2bc2f1c786a6f3894ee0322540fc37d99351e5d8998991198a98b26c470c16fef19e5627cff75e0a6157f6e2d","ssdeep":"","tlshash":"b7700000be08a0a80000a0202828080c280238a0803b03080802c8023aa8c80288a802","size":24,"data":"","first_seen":"2026-05-25T23:43:55.294961Z","last_seen":"2026-07-17T12:51:05.115618Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f54a6c689ae3fb37bcded37e79fea08","sha1":"0861325faf70167325da7dfd6b4059a6991136aa","sha256":"c9a960988ba6d8cfea2c7e709385252a139280898d9b4010703981ce03184a1c","sha512":"08111d473c9567e7da677c4a5e61e232f670b58e2bac4f1a1d96005b83214368e6bdcf36efa1b99aa4708beb8a11bb3378270d70d1a8faa3b2fbea3abb10b4e6","ssdeep":"","tlshash":"82700008ec0088ab0000a00028000cc8380a00208a3b838f8a00008a2ea28b0000ac00","size":24,"data":"","first_seen":"2026-05-25T23:43:55.29586Z","last_seen":"2026-07-17T12:51:05.116403Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c45b02b1f350ecba8716f39faa1d6dd9","sha1":"323d186c69f92adfbf21ac33010643886a3ada59","sha256":"81d9bb79dfb8f66568da929cceb338198f5fb8ef0d422c9bc19a97944981d729","sha512":"6cb26d6b01335a5779cf876ebce242b675745c80857fe191e0f42b927c5b8c40ff0896f64e6c28640c9bc1d9380344c6282790f6a7341d5ab74eba28fe93f4d2","ssdeep":"","tlshash":"eb017d9e483788107b2225bd537f5089f1a2516f8e8bcc103c1e5b00eff48ab25a2bd9","size":738,"data":"","first_seen":"2026-05-25T23:43:55.296647Z","last_seen":"2026-07-17T12:51:05.117203Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"077d4be9ad272f7d475481152daff715","sha1":"2f46a2943ac225687c445e0416015d1f97b7f0a1","sha256":"8d289c243d18cc7608ad59bd1b5d4c5edc5a26521213972903495b5ce1f78ff7","sha512":"310f88318435a5cee999868c4f24f906af4f7ba99540a2a5bf79b68f1cc1dc5fcd84b3c45051e8bc2e8ad3e36873f746fbd95aa84b6b92a27a76c5c84fec37d3","ssdeep":"","tlshash":"ac41027d826245a51973346a1f9e730836f340b31149e9113e5c8a802fa9a5f82b7bfa","size":2321,"data":"","first_seen":"2026-05-25T23:43:55.297422Z","last_seen":"2026-07-17T12:51:05.117997Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2d3475f1cf5b92ebde88c18cfb52625","sha1":"b178b44e61169b2fc5f25b0120206d3812b19cc1","sha256":"3a448e6329733e72eb2a1d80d1897a5ddf20226acbafb032eecdf71d83fe307a","sha512":"802939763c96de22534a93d89f00066ef7cd4cf58814954ebaa18ad6e77aaf19e99745c8a677625be818d3f378e5fe285ec537561be58e12504a1f3eaa23f363","ssdeep":"","tlshash":"00f0a00e0ee548131963706a4c0f9201203b2513414eea08bffe9bb24f92a6886174cc","size":538,"data":"","first_seen":"2026-05-25T23:43:55.298337Z","last_seen":"2026-07-17T12:51:05.11875Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"196e0f8d81dba38fb58a2eef3490451c","sha1":"4c70fb540d5f49bd92603d0cccd3005fea9b4c4f","sha256":"eabeb94d65d8704477ca411952b078a4fde998d61c9b3cb12b6940389dadfd90","sha512":"17596a9ca2ed22c2f13f6ec692ae8c32bc6aa1a1a4c7a888639c8ea5f2596a16efb37dcbd14bbc8b514c8bce98bc3f7ace246f5fdfe4070417cd670834883566","ssdeep":"192:q2wqx5Cvtib5XOQRzlaECoXZTAoV51nsPhwzvBa/id3+36a/E/97g6I52MdobsIS:q2VwiYwJvSoVXsp+pa/iZcVk97g6nMuQ","tlshash":"78322b69a5b71bba25673036277f301889b080630319fd947c0ff61e4fa54366297be7","size":11902,"data":"","first_seen":"2026-05-25T23:43:55.299247Z","last_seen":"2026-07-17T12:51:05.11962Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4429af1150d1fa3b53d1df1756276b64","sha1":"1921726e78a10af853be137ddf92f3d86deda32a","sha256":"2f7789347336fe8f5baaeba0f2285060e84c161bd59ee0aa3c7d8c47cf27d580","sha512":"416f1e1d8ee3a03067609ca187a88c5e3a77cb751e8769f902a12c6115e6394121254e4d60e469c50ade2b044dff176c0f7ef93912c563c510279de31d61823e","ssdeep":"","tlshash":"0c11cc5a99e28132aa5b303735bd43887728a023d184df413dcc99456fa8da5cabf6c4","size":930,"data":"","first_seen":"2026-05-25T23:43:55.300055Z","last_seen":"2026-07-17T12:51:05.120414Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/config/gd.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","size":17440,"data":"","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-07-17T12:51:05.041928Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/21954.1781011881923.57c97863.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"35aef3c03c45b75cc6c2851265c30f23","sha1":"54874afc1d2d6391142418c6c17d7639247b6c9b","sha256":"c7a0283f3d2fde40ce97fe3bb5e79621f9939000c50c3c781a4597c3242ebae2","sha512":"f74356629d65ff26f6928ad3183ba8e6e01848921202f9c14c5aef758ef72acdcabf523209e892df42d230d9c87cb47cda7bd106105ed8447718fc502b2d71db","ssdeep":"768:U/aSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:z81R6Ipyk6o","tlshash":"33132088fac2b06dd3eb7330857f505ae66a1dc0668c5434e260d6917e7198dc1fb9f8","size":41946,"data":"","first_seen":"2026-05-29T16:01:53.086335Z","last_seen":"2026-07-17T12:51:05.11082Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/hls.1781011881923.e2564250.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbc8180c513457c408ac636f0520bd80","sha1":"75e0852addcf99be60c5f9c21fd5a6ece00310e4","sha256":"2671321388c721720b1957e436d203ef5a4f61d2a0a10baea60333526fc422c7","sha512":"2334e2099976fe885e3f2b9a7c54b5759800b7ce45562aa09d2226b1011ad2aeb2be89f8cce7d16991278d78e66af32763af58ae06c43c2c304968bf50ca0a53","ssdeep":"6144:UckAO+G0MgADb9d+yGzAHFVtMcNAsIK2uOiYEqB424cRjvyIGCcbHmVf0gBhL3HQ:afBnlNT","tlshash":"1394f955fb5072bc5f6ba256a42f1126933e1892204c9c74f27afda19ef0984f03d9bc","size":447348,"data":"","first_seen":"2026-06-01T22:17:32.419527Z","last_seen":"2026-07-16T17:14:01.607129Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/94465.1781011881923.b12f8bd6.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3adb31512285dc067bcd8be2241dbca1","sha1":"e6d76021d8c6f5ad30ab4e39885af94eae806356","sha256":"7299237ed790171980b6fb79464812c061337d4eee46e5e4f4eb8f2a9a5378f4","sha512":"31bac6a6e0457e3e6f208b112d01ddae69cec4801e995fa134e57ee40278ab34c0f6b0e97637e25c9e6b83cc6f787a5d25dc725497306cab7c0ffbe4d699171f","ssdeep":"384:NZqNCGnHnUen7QtjjFfVHKrjoT/9KHnV0OZ4tOZMo0HyR:ONCGKH9KMK","tlshash":"0bc2050ecb8cc2d9be751fac421d90a10750e8f6e58749dc95e6ad09f93c60e325fa6c","size":26851,"data":"","first_seen":"2026-01-10T05:58:33.742489Z","last_seen":"2026-07-12T06:54:15.79539Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/40621.1781011881923.7917fc2c.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1524ffa63773d045b5ee1ef23ff2cb4","sha1":"99818e75bc302a7fb358b88c8daa91b9ecd039e5","sha256":"b5e9948cf2e7405662160113ffec7d4d382653a0b0ee74a4677113dd7f302699","sha512":"a1696d383e5596b95cb3fe65bf7b5958ba114c22bf38d5486798c80ccca1b3b0c63a0780602d20cb87f37dd1b707911f405568bfebac2a52e6a8ee0b1c0a5389","ssdeep":"","tlshash":"e9210f69f6a17274537b2aad463f2a8bb1774561e9edf098d450e6a02cb430c4432909","size":1195,"data":"","first_seen":"2026-07-01T01:07:30.832873Z","last_seen":"2026-07-12T06:54:15.679427Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/45540.1781011881923.25dfba7d.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7983a109fba451279f84fe7b75724983","sha1":"9487dc955240c6083cf3497e806dff89bec2061f","sha256":"80bb5c781336a9095ee3e8ae99d724f58a409c7f3c159bf0f320a9c948afe030","sha512":"ddf49f5cfb4721100ef951228391607209e248a8733d48229ff5196fd8a32fc3e759d90c1040dd591b1c0bd97ab83a1c8baaffa70fa96bbe2d556af2379478b0","ssdeep":"6144:1YD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:1YD4wFsYiSAKNH3TY5","tlshash":"e724f894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","size":229366,"data":"","first_seen":"2026-06-12T19:29:57.328205Z","last_seen":"2026-07-17T12:51:04.995275Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/71823.1781011881923.47c7ad12.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"af8ceb14b1c853510a4d4e956663df6c","sha1":"4d4c26cf35a97605e575e1bd7ac4b089ac747a18","sha256":"bb095595646240890498994e6b5dc6c50c1a5a1df023c4e18ddb338881c1f2e0","sha512":"2ebff77b16164a6d2301ac57434b854aa58e961390c9d37db1bd491c6ddc38c09fabdd328331a6ecd449657d75b201d850c5a8480f479d482d3259423252d935","ssdeep":"3072:EWNlVUpxqMXPca/DIonTGJwB5Vkqfyp9L80isi:EWNlVUmMXPc0DIoTGJwBbkqC80it","tlshash":"7fa4a4f4c244d6edea04ce056e7d6f2d50723786f6ecabc046eef8465e82827245c4da","size":454349,"data":"","first_seen":"2026-07-05T14:43:49.729057Z","last_seen":"2026-07-12T06:54:15.832431Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/83876.1781011881923.7ce40e6b.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf84df30621edc23a82d05ff0b8a83a","sha1":"e727ad94ce5d5f5b8fabec0e0b5a966fb6e6594f","sha256":"c3b02d056ac034939c3ff75a10a2da23f5f05f96a36ca1e5cea2157ce0fe12be","sha512":"db2a2a00f51cc6f75cfcbb6d988df74403fae93255982a054710e5f87a2d8407f4f8f02fef8ef1a0e5edb289736296b2d11a3b77cad6c6d9089bb831cda45be5","ssdeep":"6144:0/rOTU2/xB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:0iUjytgPJPT3p2YpHrrL","tlshash":"2f442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f265f990be7555c927fbfc","size":262269,"data":"","first_seen":"2026-06-12T19:29:57.272405Z","last_seen":"2026-07-17T12:51:05.034087Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/m/index-a3dad144.1781011881923.e6ab9b18.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d337aeb01788561f9ef1881849ddec70","sha1":"364f854098797338ffd05e3eef17d5e5c1790b21","sha256":"36552adf11a80e25925974f590f6fcc5ff2b1206cfa355b2087dd2f559fd60ee","sha512":"3f762deda433bfda5f1449ac84462236344a5a1223c0d8c16259af5a0b0f841e650ca2e2507673ef969913a84bc0e31bdf3dbe3ef1b85e9207228cfe1871ed0b","ssdeep":"6144:RQbhFOufhtRykiG5LHEY/TJ/Pm1lVs4h+Lg9uKYiwEqLD9q5f:OzBHRykiG5LHEY/T5u1lVs4h+Lg9uKYo","tlshash":"c9741be1f76ce1bd434e59ff7a22d094d01d2b41b0c86e49c25e5a44ba6f385eab04bc","size":353784,"data":"","first_seen":"2026-07-01T01:07:30.821451Z","last_seen":"2026-07-12T06:54:15.715826Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/57530.1781011881923.ed8b1102.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ac960a22cf01fe7113867220980c6ce","sha1":"1ea53c8676b82c7098de92f76832286b08c890bb","sha256":"7a53c982a6e9f8b5e5cc351abed7944bd91d198d2ff8c61e14a34f07561d4924","sha512":"86a060d3d5ab5fd417a2f0a142ff8a715c1ef3b2df0c36ab775af5af13ce3630ad8c293a928d08bdcf037c0001e7d0d986410d82fcd6f9023ce01296c8425a8d","ssdeep":"12288:U5kuoy+RfKgD+Ng2xLU4nYdfX4fAaHu7zuitp7xagoXShH8Qzo:+Joy+RfKgD+Ng2xLU4nYdfX4YaHu7zut","tlshash":"85c41ad0b15072b9a55a82b5b73524b86027490950c99cb0f1f9af68bf1134bff6acfc","size":572859,"data":"","first_seen":"2026-07-01T01:07:30.823632Z","last_seen":"2026-07-12T06:54:15.743987Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/32542.1781011881923.e967ca7e.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6632464b5db99b7cf6b8ce495440c13","sha1":"1e9152c90f0af648525dd5d361ed45686a6da85d","sha256":"1bc2b74ad2dbf29c416aad5462702cec6a6bbc276e5b312d16d64c3218f2b426","sha512":"6857cc1e3cd9ea0bf4fe283637a2147840d68d3ad9817c05e11cb107bb42ffc80defa35872f3b231555a15dd653a63a051aac7719235e9c2a0d253a5b0c7c3f7","ssdeep":"384:IZqxG7HnUen7QA/O65KjWYUAoT/9KcIWHOgpOTfISdk:BxGb9KjW/","tlshash":"bfb2d50ecb8cc2d9be211fac421d90610650e8f7e58759ec95f6ad09f93c60e325fa6c","size":24502,"data":"","first_seen":"2026-05-02T01:47:15.946252Z","last_seen":"2026-07-12T06:54:15.814038Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/config/telegram.js?t=1783304812647","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","size":116886,"data":"","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-07-17T18:34:30.575909Z","times_seen":1968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/home.1781011881923.a94e73ca.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ad9af47a2c0c93f65e42ff84b45dad7","sha1":"eed3b4bd1191c75416f457ee41317595880f8635","sha256":"c9d64aef33c7a35945a5963b08b2bc3157f403dc91a5c9c9463c82a0d4075af6","sha512":"757a63f9b96bc8a36491424f8e0ae9fd6813983817ab2da87bb3455e18b5cb5f71d5e682919941194e4a588bea925c790888e4d27f8531ee03c777c1e2c92678","ssdeep":"3072:T5daS9tSIMcewi8uJBuoMfqFf2GMkvVJuhxffj7TEOiGRlc:T5ES9tSIMcewiLQqFRmzffjAGHc","tlshash":"93141880b5f0e275575fc2a7d7371025b2271786d0ccac60e1f66b187e2879ab236db8","size":203243,"data":"","first_seen":"2026-06-12T19:29:57.277471Z","last_seen":"2026-07-17T12:51:04.963206Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-common.1781011881923.b470d60e.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"08afa88982cffd7b96a2190cdafe1c42","sha1":"abb87563ff4cd658f4436118c54f3f39c08f74a4","sha256":"8673d3fc3524eb9d8b4020b3da3109aa5ab5e569ed8d0074f2b72b8643f813ae","sha512":"70c9df3dd7b3e3d41a607627c6a2750f43673649dbd55c7a56606a7d3e67382cb2991f146f7ad2359cc5ff1615f9db484b54642917150351017d0fa4385c3d2f","ssdeep":"1536:jBY8bgGcdWUa2UTY6eryXHuLmbErF/G7D1dMI59H64likx/vocGAClVbGD3tFk7u:jBYCRTY6wjFetH64liC/vocGAcgD3t","tlshash":"65f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","size":161286,"data":"","first_seen":"2026-06-12T19:29:57.317434Z","last_seen":"2026-07-17T12:51:04.984372Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-17T18:53:23.023865Z","times_seen":89107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/11248.1781011881923.e1f6c133.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0ea54ffece6554702ecd697d75be341","sha1":"255162d2085739d6bd522f44fbc8f92892b5e505","sha256":"45b3be7b4d4f736b262bb3c096dab61a44469faccd8539b411629cdd09545f39","sha512":"770ec2e41680a50b32e332029d6c22126935831c82fd756e1f1d5ce5af916987528943556fbf5bae1060f99b1c442a230956b213e3c14ab10d5a76b8d144361f","ssdeep":"6144:Hbpv8K84/78+971hTnvyUVpRwekcdNtTCuOCX9:9tbyUVpRwekcdNtTCuOCt","tlshash":"29747249e3407134cf96a146402b2435962e5aa6028da964f33df55f7ff9f883aed2f0","size":360120,"data":"","first_seen":"2026-07-05T14:43:49.730319Z","last_seen":"2026-07-12T06:54:15.748381Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj42 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://x32i.top/config/telegram.js?t=1783304812647","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://x32i.top/config/telegram.js?t=1783304812647","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://x32i.top/config/telegram.js?t=1783304812647","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://x32i.top/config/telegram.js?t=1783304812647","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://x32i.top/config/telegram.js?t=1783304812647","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://x32i.top/config/telegram.js?t=1783304812647","line_number":139,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"x32i.top/kc523-1/sponsor/sponsor_web_3.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.185Z","timestamp":1783304818185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_3.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-9faf\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nAge: 141712\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354016203acf\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40879,"size_decoded":41252,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"c26161f438986f6e2d677c34d653285e","sha1":"faf6c47a013a9944bb8cac197688908422992039","sha256":"58d11e173550b3420b35c4e4be3eeb76b59ac790d9fb59b535ffe55d3b470fa9","sha512":"97649de556447ef6aa6cdd7d0bec46837cfb328335daa3b862cbaa5e23ca5a8f2af296703c9e961cbad02bb797ebf1f99ced2d1d245fbbb3a428e39d26428c76","ssdeep":"768:ub+4OMIuYE3McXMuDR64Q7sRFKJdsCA1Hunj5tyKxGGTVtkDGlT2oTO:uS4OMXYODNDR6XsRFisCAk39t6oi","tlshash":"db03f108254f2d4466ec90bbc7a1e0f7ee1d103dddb7e30c35a685163e46ca559fa0e6","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-17T12:51:05.013068Z","times_seen":2040,"resource_available":false,"data":null}},"time_used":2243,"timings":{"blocked":1925,"dns":0,"connect":0,"send":0,"wait":302,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1164x872_0e80d399-2c93-4f64-89db-61a96d3b05e4.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.834Z","timestamp":1783304819834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1164x872_0e80d399-2c93-4f64-89db-61a96d3b05e4.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 112700\r\nConnection: keep-alive\r\nEtag: \"62970d9f3c6d5069ad898724c19a4277\"\r\nLast-Modified: Sat, 06 Dec 2025 06:28:28 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1EasiI1HxDbd5r4seqH9FCqaZPRsOsAqef0PpJ1RQtCZw2FVkVv24YSp7HIyJXP4AlLhfYpRdfJlacuGAweEBdTIN5OkAEAogOz5rCER614iuTF%2FdWlWAbNR0CPiVxHrraaSrog863NsiKlgWibIp64%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141707\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da750cff584cc-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f3540175f3ad0\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112700,"size_decoded":113850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62970d9f3c6d5069ad898724c19a4277","sha1":"2b378bf8f829167d47bea58444d399fe47052617","sha256":"7b17d39fcff43e49c7a9cfa070a2e9ad41f466c464e347b7f2a91b705f6b5161","sha512":"00e247d65514ff4a5e8032c591faf83e4af220acd25b5b2fb5883c3f85ec349284e1609489cad86537bcbdc7718e2bc956f6b2c9bfef0cee09b54f036b9b495a","ssdeep":"3072:2Q4KKXKBHjDhDCq5qNrHMlyp8Rod8oucXQUEyr:DjBHRCqwNM4dw25r","tlshash":"e7b312dd1216b6b4a8b027fb23ccbd8944cd2ef64e787e96d8a9c8513545b2f40f4d42","first_seen":"2026-04-24T23:10:16.754484Z","last_seen":"2026-07-17T18:50:30.344764Z","times_seen":676,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":553,"dns":0,"connect":0,"send":0,"wait":303,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_73525908-fb7b-43df-ab6b-ee9a1274a74c.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.897Z","timestamp":1783304819897,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_73525908-fb7b-43df-ab6b-ee9a1274a74c.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 26068\r\nConnection: keep-alive\r\nEtag: \"da33ad9a009a89e0bc0c508e6f690949\"\r\nLast-Modified: Sun, 09 Nov 2025 14:20:32 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIEo8MtAZmhGF3JidOXeBigTqNWSOLZFXiLTGofkcFSBDSbl6JjV7A4%2Fo%2FIquxszBF7mWKeVuVh0Epn3BDcOU1oqUS2d9PvBeIzf834jtY3jstY7G%2BaNEDuacgQqmoHeegcCiejQPCeanfgephoN40o%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141711\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7534aeb849a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35402623406a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26068,"size_decoded":27221,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da33ad9a009a89e0bc0c508e6f690949","sha1":"52521f6667f933538fd61fac097ba79db283c0cf","sha256":"12889485842cb12ca8c77f0a9c71ac3098cf3c9898b3cdc299145280170962d6","sha512":"a254ca97846b0d3216994f8db6adfee226b9b2c6120a33c1ec1f0a635f658f99e6b2c2407dffcbe79d5dc65aca0869aff746d751347eaf9780083b0e25103fe0","ssdeep":"384:+w9CBmVKxqlIavZBdogyHrWz/1ope325wQBJKn5QahMi7HjOMdOdjawQJoYh:+yYmV5Vv7WZLWhop42525Q0M+HujawQ","tlshash":"e9c2e1c2bd2de50a9b37c27e24a6c30f01c497808faa2c677736129d4d365abb56900e","first_seen":"2026-04-24T23:10:16.863494Z","last_seen":"2026-07-17T18:34:30.608695Z","times_seen":745,"resource_available":false,"data":null}},"time_used":4613,"timings":{"blocked":4306,"dns":0,"connect":0,"send":0,"wait":304,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_7f760e34-ebbd-4cfc-bc28-666cc8a6234f.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.899Z","timestamp":1783304819899,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_7f760e34-ebbd-4cfc-bc28-666cc8a6234f.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 44494\r\nConnection: keep-alive\r\nEtag: \"693c20ba4107f736124e16931ead8d60\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:27 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfFEjro3HlfNJPnxCewHXaXyXftEzWBAvHC0x19t3Ljl5nxLymsP%2Bfc1tXB8GdPffgF9D4QP%2BJLdV6U45YNLOlAusHOAKAExu4It91vuHWTiwiTQU2YppcNfjSiDYfcG6gcMEmI71P5J7MxC6CYE0BE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141711\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7565f6a20e4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f3540268f3adf\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44494,"size_decoded":45645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"693c20ba4107f736124e16931ead8d60","sha1":"6a247e864c0c0a9c40bb5be357de99524abf3e2e","sha256":"342bf65608ae9d71296ffcfbbfb4580c00ba782557c802be6496ec374d5fad11","sha512":"ae136a2a5baba143d5afd3fe4270a5ce2bd0a96655f2f56a65f2d9ea26ada4a90c63b36c96b6b79adb32dc0ac9f118040f236cfcdae958f82c05f3f600dc79da","ssdeep":"768:ssqja8OCwQkPOoS4nNgT3p8tZgn5DVWGgNS4RipleSQ6c5xlGY89B:JVQGS8A+wn5D4GgrkKKc5jGY89B","tlshash":"5a13019a26762833b187c36d0030062c1b78b89f3654c54ea4ed7924975f09ec7eca6f","first_seen":"2026-04-24T23:10:16.7563Z","last_seen":"2026-07-17T18:34:30.552722Z","times_seen":738,"resource_available":false,"data":null}},"time_used":4735,"timings":{"blocked":4413,"dns":0,"connect":0,"send":0,"wait":303,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_491b2cc4-5fc9-40f8-9c43-0efaf2041eb2.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.123Z","timestamp":1783304819123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_491b2cc4-5fc9-40f8-9c43-0efaf2041eb2.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 30510\r\nConnection: keep-alive\r\nEtag: \"c376313551c1d29a1d76ab853fb2e6ae\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:31 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxOYjFu97akEonnEgRXrDg%2FuwsqDUY%2FR7suaaaPlocQ%2BLj0zTEQymGakMVEhh2lduVD5pqiLamN0iS8SGasAQNRwZYCZbxyEyY1j3YkuLB%2Bfs08ais1YWL3ytLoOboH63DLge1EUJvcZJzeloW4ViSs%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 137730\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15e0864e875ddbc-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354012454e49\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30510,"size_decoded":31665,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c376313551c1d29a1d76ab853fb2e6ae","sha1":"7448d756474f14ad23753cdb201e78a249f38b2b","sha256":"920c6e18a256b540e1b0390ebbf409a60e4b16f80c199692c75c9c62c252583a","sha512":"83327d94f850950788085094b5e9f1b608badc96be538b210f62d51eb42abfccc1b11a7d8933a0b920ee0c7a7d059a5c473285a9f88d83b424a72586c95cc71b","ssdeep":"768:2mD6nFHYr2hkRGAzkYS1oHFkhKhInh9hmBgSiiNTIhJKOEcvH8LP:uFHYrrYAQYSsb2dy5IZvAP","tlshash":"61d2f1d254d846385f8ddbd91b9e87efff84876009b2623c04d56d01acb113a0c8b6ba","first_seen":"2026-05-02T01:47:15.971713Z","last_seen":"2026-07-12T06:54:15.841011Z","times_seen":10,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_4d4d0270-e129-42d7-8f6f-0802c910d540.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.844Z","timestamp":1783304819844,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_4d4d0270-e129-42d7-8f6f-0802c910d540.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11920\r\nConnection: keep-alive\r\nEtag: \"013c35e9baa4c707701c1a2cf8534d3d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:51 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFalmLnvgT%2BRbaJ%2F13bqrivZJclrQRy6XEAur%2Beyu8mQbvMUTi3CIbtwjWxUmb4ueM0eWl4MS5UqZDxtXxazJOTsGTCkO0IzkUEjeIft%2F9Wv%2B9EGYHccznyKLjCwGl64kVRffmrf2w%2BseX%2BFKZvdG3Y%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141708\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7536e7de2e0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f3540195e5089\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11920,"size_decoded":13081,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"013c35e9baa4c707701c1a2cf8534d3d","sha1":"2139b155d847e1eb2d17fc298760cb039598f89b","sha256":"f1d2851323d84d5dde72bf02ab6ed8f8f55eddc2a9607799e1ff211e0ede29fd","sha512":"e80a60ee340f8de57181fe71da391673d3bb834b91b622b5032c3674e8b85ee3c1610574b1b1d883b42e94d94a45823a63657a90cfa2062674776ebe9637c8cf","ssdeep":"192:H0RkcJGKX9YQtzAe5IIq83lxzCfVJGpYWrJUcm1aTfRbuArP+UcJaYrR5Vc:UXGjQtzAxILj2tJGrJRmETflDzcoGR5V","tlshash":"ec32b065c3da9c54c4027bfdab0239f95c5e7b45783bc7de68893d150288f90be218b1","first_seen":"2026-04-24T23:10:16.764405Z","last_seen":"2026-07-17T19:01:29.196348Z","times_seen":664,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":1051,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/css/18936.1781011881923.a936780f.css","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:55.514Z","timestamp":1783304815514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /css/18936.1781011881923.a936780f.css HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:55 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-47891\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304815=UPV3Ih/MWfTNBFxB3VyHAb63HgZwFJAcLhRrXMmQWY/UTYil2hSf1FX6j/wzA70QDi6/7CZuasu+35X0LKK13TGeYkmkM0jDZxPXXxgjhVAGOXzY15fvx+jOhYEo6/yeqBXB9pegIhh0yah8ZK4LFNtmIrtd0IrinQIPxCyparHMM1PBSq7epNqV6TlPhjbA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f3540042e3ac1\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":293009,"size_decoded":58048,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0ed9f2cc667b3d3d14cecebfaa9c5f48","sha1":"a991ca7f55947e2d6f8c693dc5d2dd0e53c15007","sha256":"57e75ee71498280fb9671a58b6cc4d02ed50b063ced7ff960c41fd78ccf4ff53","sha512":"28304fae09b0108fc58fc3789dfe5a3dd52c96faf85ebef196a40fa2fd1c83b0919b7a03d15608fd9e0d8924ad6a82e34e8f477ee74976e3ebdf45a7d1d411f8","ssdeep":"6144:D+npTP+IVrfeIDb/tqgF0uibM4tgvVDQK+EMQxV5QjwzqIHoX1axr:DUeIySjkG","tlshash":"7b54d93b9152037ca51bdc605bacb2988265ed22d95213f9f2176f3a87cbfd713b1209","first_seen":"2026-07-01T01:07:30.811738Z","last_seen":"2026-07-12T06:54:15.812178Z","times_seen":5,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.199Z","timestamp":1783304818199,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: IxcnEOWntxp1ZGVtgjKiPESTgpiUI/TMLVtUFq41dJ5NsOq0CP4OfC7wtzBabqQEylWi0vyQ1lk5WrPHFBY2jKAZajjtulBGsAoXy9OjsQTzxQWPm1Xgh5FV+WTvBrqL1pzjuvkKI1fItiK6GBPfMPPzEZLO5DAlF7VUyLnreck=\r\ntimestamp: 1783304818190\r\nsign: 1e362v7j3k50l6p0\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: 8YH2kkhSkBdFrcRBMtxW8cpm3iGW4xsK\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:36:58 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 8a4fa11bd6ca41e59c1d0aa96a0c93b5\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354010e13aca\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2132,"size_decoded":3165,"mime_type":"application/json","magic":"data","md5":"e20d55b2b4a498bc01c909b69132aa03","sha1":"a899e4360ad002a617db80451ff9e111128cf89d","sha256":"51cd0878c122a45e4ece7b2fbbb6d4c9fa0afb7768b93ac3a5c9b31728fc3df1","sha512":"f408b412ec0b4033a9b0d6bf4ba2787898f4679375d9d77fa7f01715a2404368c355762f2ed0d2af641eb51ab77c31ee01a0af8ed0811242e999dac3852ceb9d","ssdeep":"","tlshash":"92613b176a9df306da2a8e71c5738de96d6c832d775de8e3c5908f2482eb342706d240","first_seen":"2026-07-04T20:42:08.542192Z","last_seen":"2026-07-06T02:27:39.311132Z","times_seen":5,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":568,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_3340babe-d86d-4379-84e5-92efe2221568.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.830Z","timestamp":1783304819830,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_3340babe-d86d-4379-84e5-92efe2221568.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 69604\r\nConnection: keep-alive\r\nEtag: \"bf4ab4dd29a7e850bb98cc23f8aa469b\"\r\nLast-Modified: Sat, 06 Dec 2025 06:31:49 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q13W1064JBOzA%2Fp1PoKB%2F%2ButuQmhTt4T4E%2F%2BmSmAOgQr%2B3shbV9S7Eeif026B5RuRwqiFTjHEMWIuw9rxKD7HNWsJMycy33UMv67Arc%2FGbT7JM2mu8A4oV1cWi8GZWgj4qfV%2BnwQchN1ynWQP%2BWKKl4%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141708\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74ec95002ca-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35401636405b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69604,"size_decoded":70769,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf4ab4dd29a7e850bb98cc23f8aa469b","sha1":"bf8a5db8a24980c822ff470dfd5c400c3a7c9318","sha256":"2755467e92e31efad621b2e575f92ee22de6de608fa8f2fddb67db94b677b946","sha512":"21ee32c3081cdce13a032da5e97d59e0a8abd54778a0be5efadea03e95f5a9876414faeb43046ddeeeb580bc384b67ef786ac80243a9b7d10b4695ed25a5fb03","ssdeep":"1536:kzZ24Ia5yjsOfOLgsOtyLr/i7deYSzcwqzpf1btvhp61:kzZDIa5yjDMkyLr/z/cwqzpdxpp61","tlshash":"f76302aa4a11d1c8af767507133a99aa77ec93ea60d612f04077944f162bddba1f0c0f","first_seen":"2026-04-24T23:10:16.876074Z","last_seen":"2026-07-17T19:04:39.845201Z","times_seen":683,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":304,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b4c9aa45-cb3f-4828-9926-119d48e2569f.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.857Z","timestamp":1783304819857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b4c9aa45-cb3f-4828-9926-119d48e2569f.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1086\r\nConnection: keep-alive\r\nEtag: \"bf3d921165a3f71e2df3355fa367995b\"\r\nLast-Modified: Tue, 02 Dec 2025 14:06:49 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00YdDHz1DdXKx%2FOIloUwUszPbOfULKiF4MpwT7MOXVr2fuhDVx8dHm1%2BRmM3uakkqSZk5OcFa1GKeDfRtqINAffqh6nrlXJB4viYxHXOMeeSlmqITcl2hYUaeIFwfR4QkAUBkKfLiNDQSpU76gM6mXw%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 52628\r\nCf-Cache-Status: HIT\r\nCF-RAY: a1662621edb2dd42-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35401b39405f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":2235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3d921165a3f71e2df3355fa367995b","sha1":"3b7cdf04a4ca59b14bc51326218ea1cad70f8f8d","sha256":"4f4109d5d1dbf5144085bb9671dad452cc50bc01fac3bb74eb706042338b0ff9","sha512":"d7d910ee314b0b7dde201bb3c2cdd01e242481487960067c4fa5686a896080436c3e6529f3e0db49628013fa1801562fd206127f840c96ffdc161315cdf82371","ssdeep":"","tlshash":"5811b6ae8ff7e268aca3f51564f5d4a2464d3a52088813c0045611f9860877a9fce9dc","first_seen":"2026-05-02T01:47:15.989776Z","last_seen":"2026-07-12T06:54:15.648789Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1814,"timings":{"blocked":1514,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_13f1f273-ad7d-4854-b9a3-7f3eb8823296.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.864Z","timestamp":1783304819864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_13f1f273-ad7d-4854-b9a3-7f3eb8823296.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 78902\r\nConnection: keep-alive\r\nEtag: \"5cae9008e22ccc62c09f38e52e664de6\"\r\nLast-Modified: Wed, 10 Dec 2025 11:49:58 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HE8T1kFCVLO2w1ym8eIcxpnLuNFAsdzvOE2NqqKeVinhH%2BgprjufOwLYvMTaAo1TN1%2FJ2z4kiSiqh9167s2TodcYdo4JK7yzfB5sO4OEN%2FArZNF0bsX1kZfGbT89QwRr7P07Jkl5u3p9mE3v2DfuCX4%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141711\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7480b965e06-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401d4c5090\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78902,"size_decoded":80055,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cae9008e22ccc62c09f38e52e664de6","sha1":"a1f17e80566874fe9706d17a46a2d46f82bb4334","sha256":"3148a6d8c30b8b20d81c8e0873dc24170d6be114b7e3570870da05e12202d770","sha512":"49b2777a4621bd265be1b02773561be3504f5d1dd0c104f8ddd0781e36791a1f12be3093743baa2a7d21c70766e76f7d5d475efe312d725a1959acf4a1625551","ssdeep":"1536:blYjfVyd06MgAmxW/kYHFfuwKFhzwOxl3juR+GfDIroclZ:bc606u75s1wMGlfTclZ","tlshash":"5673012aa243088ae0f71039184a6be7f90d11a1e7e85fef84e7570bbe0df413d65e50","first_seen":"2026-04-24T23:10:16.877965Z","last_seen":"2026-07-17T18:51:03.603871Z","times_seen":654,"resource_available":false,"data":null}},"time_used":2367,"timings":{"blocked":2046,"dns":0,"connect":0,"send":0,"wait":297,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x422_936e6f39-c72d-42ec-ab51-2bd5a806c902.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.886Z","timestamp":1783304819886,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x422_936e6f39-c72d-42ec-ab51-2bd5a806c902.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15760\r\nConnection: keep-alive\r\nEtag: \"dbd5bbca2ac98b7327bec49ec9e17a87\"\r\nLast-Modified: Tue, 02 Dec 2025 14:11:52 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lz20yDv4VoU7%2B2gqxe7B4DehsWyjshqJmboRw88HIuQnRby1PNx6OVvRgcEZZ74kT9N2J6QS%2B9bw%2BOBwlKVEZG%2FTVb%2BKvCeSBPapW4QnfV3pIjEFEpZtvzR0cILHFawaO4OuMbwo5Nk6Dlhr%2BBMbN8s%3D\"}]}\r\nCF-RAY: a15da7539fbd8b92-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354020684e57\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15760,"size_decoded":16919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dbd5bbca2ac98b7327bec49ec9e17a87","sha1":"7ad876b6c3f6922c1cff9db452948604cfc691cf","sha256":"12e3a0e3de790b5f640b48e4fede8f5d1c881e23b4d710d1971282362277eee3","sha512":"c96a4f88a602c4bd5d8ccc3a0ae44ca9d85d5a75175b8b8c219c527d2ed1338b8d65e9bc52e9c1e844f34aa76e6d0d1d81c4eea6b28592de710a4f4922b11701","ssdeep":"384:z25GXKCP2DdvL8cWHImH7LKcCZzFwu/6unzgL4X9:S55Ce/xsln46un88","tlshash":"f462d0149f5537278cc4787941315fbf7f601c42b208e45296ffa86bba2c2957a146f3","first_seen":"2026-04-24T23:10:16.813188Z","last_seen":"2026-07-17T19:10:31.806612Z","times_seen":714,"resource_available":false,"data":null}},"time_used":3144,"timings":{"blocked":2840,"dns":0,"connect":0,"send":0,"wait":302,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.469Z","timestamp":1783304818469,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: qXvHN1vDfJnZJ/DCTEUm0T1SXuocjb4LBOSnopyv6cWj/AEtzs81lrxw3yp3pLl/S2zADGeqAz1EUDjWIFK+HGkKMxu/WNaVbZfL5lw2FF96+mLtuX2kjLnIMPhL/TLN4K1Wu5gwg+wTvjKOHooYfQJVkJ1vBqQlUi/GaWGGCyM=\r\ntimestamp: 1783304818465\r\nsign: d4q1i4c74a2h3v45\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: YAJ3PpYPibWJJJpchpFrDcrBdFt6tkHZ\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:36:58 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: a895e55cc2374e6783f1e1c4a5104e45\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35400fb84e45\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13924,"size_decoded":14957,"mime_type":"application/json","magic":"data","md5":"b7ba2814c52672b3a2ea93be891eb881","sha1":"b7a25aa0fc303c556c6138fd32fe52d73e56dab0","sha256":"b46e84afbd6c21e8e8100ca50b07019b06023702cdb422701475c1a1713d0f33","sha512":"8b89f5b4f3607714b8e768f675033f975d1c319659b956e46b21104413462113231f3636746337e6d0bb84d05ba29b3d6537678cfd58e0be2531aca579717f52","ssdeep":"384:LQSYhUSRh0XJQP2tQLUqhdCsVLh0599hU1HO/byuy:LKKS0ptcAsBh0nfb2","tlshash":"1792bf1da213f335876789f8345144a4e56856dce9c39fc8e93ce6b21f63138668f8d4","first_seen":"2026-07-04T20:57:54.5218Z","last_seen":"2026-07-06T02:27:39.314287Z","times_seen":4,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/5d23d9a4-8f94-4b81-a8d1-0ac91c0587f6.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.093Z","timestamp":1783304819093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/5d23d9a4-8f94-4b81-a8d1-0ac91c0587f6.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nEtag: W/\"d552e702a70c347ec7d5e4a14aaa9190\"\r\nLast-Modified: Wed, 28 Aug 2024 17:47:36 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 137736\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAa0VP2Ty45JBu8IBkUutoZY0JgrOWxY4DxbxCVWY%2BQeQTtDeSNPRMIT0V%2BtGqpSO2hxBURvo76D5LE2WIbSSM%2FKjbfFgcSOEF1iufklLU8DTKAriDCz283XqopjWeiAPGyYuLwULvWHgwlzpd7juOw%3D\"}]}\r\nCF-RAY: a15e085b09de0461-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f3540224847a0\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13307,"size_decoded":14537,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"d552e702a70c347ec7d5e4a14aaa9190","sha1":"06fff1c2073d4f42951ac0ed81419770189ae9e7","sha256":"7f18c8eb73d8d413d13ed80f08020a5c201dc47b8e8ddad587e175cc36e090ec","sha512":"4be710fca6d8c879aed615849eecd90a498e53d8cebe10ae7644c186c275a03611337642b7923252f123a3287e41cd54813082b0870cedc4622eb0f7ee39396c","ssdeep":"384:yZXSYKBI1PM7TncmeAdj+i8aK+yBE1bF200a2+:TBI1EPkA5+i8aPyBE1V","tlshash":"9552b0af83219fbbf475ea82702ba3b92165119cd4b75fc30c8e57514aa847fbe01193","first_seen":"2025-11-01T17:14:36.307053Z","last_seen":"2026-07-12T06:54:15.841871Z","times_seen":29,"resource_available":false,"data":null}},"time_used":4425,"timings":{"blocked":4126,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/656acea1-d6b9-4400-a699-6a8a084b874b.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.096Z","timestamp":1783304819096,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/656acea1-d6b9-4400-a699-6a8a084b874b.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nEtag: W/\"733ddb8c3895dbd07ffdb7d1467a3d2e\"\r\nLast-Modified: Wed, 28 Aug 2024 18:03:50 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 137736\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0oO3SrgwmPzlbjuGbbu977oz3uRcaRBdSdyBq5X7j3ngEsa%2Fe5U8QwuAuqNW0Tp8GzDTlDHVpi%2FzA3keWAjyG1sQ1PFt3g9KiuCpmMV3l%2FMxhYl3BU7aQVoICb4ypEzPkj6nafKQ7hmswwi4Ahbzs8%3D\"}]}\r\nCF-RAY: a15e0858186203b7-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354022e23adb\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18596,"size_decoded":19826,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"733ddb8c3895dbd07ffdb7d1467a3d2e","sha1":"18b78278ba2b82bdd7fdda42c9278e6713d13d3d","sha256":"c5f95dd9b26d1c5f7c53af7a0ad789ed28e8f74e8889d633a410fa34f1f9d336","sha512":"d7cc99aa0b3121d3b999ade44a57742718d3de28baaf20ce5245751ca988f1ba651355877d363a722d6fa72bab24040b660060cd202e151b73a335e729433973","ssdeep":"384:yMenAbaq+Ftepmf3eTwyWr/i1G2HeDWRoqRVRONC1esg8JgzE:je6uMu3EbWrL2H51VIC1Z9JgzE","tlshash":"1782e1aaa4c9e10e44adc3f774f843796fae832a46231b531428c3566f3ca435584c43","first_seen":"2025-11-01T17:14:36.299052Z","last_seen":"2026-07-12T06:54:15.714094Z","times_seen":29,"resource_available":false,"data":null}},"time_used":4584,"timings":{"blocked":4277,"dns":0,"connect":0,"send":0,"wait":305,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bbac9ff6-d09b-48f7-9e60-77639d6ba1ec.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.850Z","timestamp":1783304819850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bbac9ff6-d09b-48f7-9e60-77639d6ba1ec.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10174\r\nConnection: keep-alive\r\nEtag: \"786d2731ac4145dbdb474c2ef236dbe0\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:48 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToqqvRUK8zm1j%2BPPL6iq5Bbnk%2B5as9FnJm3H0kZInjqUng46KfRxaM%2F%2FTV3y%2FXUgtuz5DeGD2%2BXC8mZIvoN3DImi%2FSWvO0DPaHdKzVJqJohDSopP11JaskoGPtNs7icMySOitUva%2FkQa5qD67KXOtN0%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74f892503df-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35401a09405e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10174,"size_decoded":11337,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"786d2731ac4145dbdb474c2ef236dbe0","sha1":"e25bf96d16a7d8c9ba8cb8977c5223823b576354","sha256":"a5582288a05ad90cab5e153a954cc868cbf69672d5811c24564ed2292638b772","sha512":"aab8876381867a1eca57b4f3b8c18c5244840ce1283a71b3387e80ea096b2c956dd8cd3461861cf6be2d063f980a1c59495aa8d3c47f1579017239ac07ecd1c3","ssdeep":"192:Oz8jXYXj6SZFy5siAvpSdg/2OwNHKThGZ0G9g1/5gqWLbG0X6YqIsyT:nXbMFy5siMSdNQh3oSe6Ye","tlshash":"1c22afa5b4ff3f61484df1f1f78ad342559a697432be475d79b5467218082988c303f2","first_seen":"2026-04-24T23:10:16.833619Z","last_seen":"2026-07-17T18:52:22.486034Z","times_seen":659,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":1212,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_91f2d885-8341-4928-bace-352c8c691bef.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.854Z","timestamp":1783304819854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_91f2d885-8341-4928-bace-352c8c691bef.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11602\r\nConnection: keep-alive\r\nEtag: \"5b6551f12b1b84f1734c1a1990de36e3\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:32 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8G2rzRwLDeDkuKHpLcFStJomJ0xb1suuFGHjQHV0%2FBMzvO%2B5bmR1UIE1A%2BSfmPwLwewYFPj%2BiOK3Ju9onLEh%2F16QdgnjVmlxcznrQcyqStRqB%2FmkfTmf7Rj%2B0E9jx28QU8TMxrG9dBrGNc0rQcHjmE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75507\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f791beaf09ec-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35401b1a4e50\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11602,"size_decoded":12762,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b6551f12b1b84f1734c1a1990de36e3","sha1":"4a9abbac21133dee3830561cdd3803655c193744","sha256":"fdf8c30716a64d0ba082686010f70ff0347eb4bc57f861ff9ca67ef41700059c","sha512":"c02da03187076f9921fd89e31f1d92cc60c78da95d5b35e179d76d11842191eb9f52431e4a7322e0a9c5d6d54b8c484aa6dea6d6f653557818f3383300b97f61","ssdeep":"192:U9/EwHQZEoeKC69DzEtpjQM8dUNCtSyj2OG5hSutqwILUXr/mt/XqzLYKHiifMfi:4/EwwZpe4Y3MMqUN/Qlw84IL4/M/an/H","tlshash":"0f32c043a66ed2fab717ab660556d304de22e0d468553406d7ebd43a302effeb180d0b","first_seen":"2026-04-24T23:10:16.72574Z","last_seen":"2026-07-17T18:34:30.68247Z","times_seen":649,"resource_available":false,"data":null}},"time_used":1785,"timings":{"blocked":1484,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_f26e0b0b-19a9-470f-90cf-ab38984671ab.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.866Z","timestamp":1783304819866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_f26e0b0b-19a9-470f-90cf-ab38984671ab.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 96286\r\nConnection: keep-alive\r\nEtag: \"a7ec31389e5a634d92383c733b498506\"\r\nLast-Modified: Wed, 10 Dec 2025 11:50:21 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nif0i7tXvasrtfsiMrOlCyLidBdxedYPWLD0yUpGV0H7ZLaxgkQUKaRPZ3Pe3qc6BZaGWH4KTKPSKVZRYzSGDxX%2FqCsc2gCGmRgfpIdk%2B1DzPB38V68hGfqiscODVtrs%2Bh4xF6QDGq0fQt6FBmLJexs%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7518cb204ce-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35401d8e4e53\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96286,"size_decoded":97439,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7ec31389e5a634d92383c733b498506","sha1":"4386adc654865c1594ba0ac604ac3a4177a84b7e","sha256":"978643b0ac1ecb3edf679a74610a1a0fdaebb02505e0dc607a15e56b1bd5212c","sha512":"222ad2805e8bd8957e696920a81cdb86bbf7a0bd6720b2cb67ae89758558331b6842fcdf208560ba355a522bcf0b177a7b124ff3d2c4db25c1fd8b4eebe5c74f","ssdeep":"1536:s9n08pg3G3xErU4qzJYMDLc0OzGR5AGsSrbY4V9SrXLDoJgG4oaUHG0S/F:knptxviMDCzGRyXSrs4VQDocoxHNS/F","tlshash":"079312e74a42ba67f808b1319ea01b6ef3d7b43f09ac1a6d47599a7c4831bc4458137f","first_seen":"2026-04-24T23:10:16.718761Z","last_seen":"2026-07-17T18:51:03.607607Z","times_seen":667,"resource_available":false,"data":null}},"time_used":2479,"timings":{"blocked":2112,"dns":0,"connect":0,"send":0,"wait":302,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/common/usercard_recharge.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.177Z","timestamp":1783304818177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/common/usercard_recharge.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-b9b\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nAge: 141824\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776a19f35401428466e\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2971,"size_decoded":3702,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fedd0bbfe323ca4efac1c2ffee627083","sha1":"460d242dac28c8a1241d377e84cb3c670cdd8d0c","sha256":"f82f56f84e64bf8756f1989f43eaaee5c2760b7de8765e893df37d4326829cf9","sha512":"e9a6e21ff6b44b60a087e1a8352bbdd5b5a3a8baa12577b702b9c1db7da95135c9c17bc4a708b526ca03e8b71e3752c8894d789731a3791054d9b9be44a03d9a","ssdeep":"","tlshash":"ff514d5af50c5fa250b789f1697dcac17b1e4007956583c679d5803f8e26cd24717293","first_seen":"2025-11-01T17:14:36.247158Z","last_seen":"2026-07-12T06:54:15.821847Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":1423,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/img/default.4c1c4cca.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.186Z","timestamp":1783304818186,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /img/default.4c1c4cca.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-226ed\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nAge: 141764\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354023984068\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141037,"size_decoded":139979,"mime_type":"image/png","magic":"PNG image data, 750 x 848, 8-bit/color RGBA, non-interlaced","md5":"0da1064c2f890988592b2c9dbd1606b9","sha1":"1fff321fe2f34d76d0bf1eff3dba9b7729af7a81","sha256":"57774d708c26faf719595ba197cfb34c4a18a107f6d16cc27de1a06aa475fe48","sha512":"b858be1a7049d23a55340a49a1a7fd7bff961b1770d8af9334c8a1ccf923b730f5179a4b56fab0bd504f509d13361b0189815affa0716f3811a60b4540a1ae8c","ssdeep":"1536:YIsrWBCNcoophEwytA6313pr/+ke8c/kjDaBKn2d4Gxao1w+Z44y2XrHKlajWDxx:Y3raQ8D6313pr/d7laNqWFiwcVIW/b","tlshash":"0fd312e7aec1e2dbcab9fc7f099c689b9096cbd5afea4f472e15b900cb41014d505d01","first_seen":"2025-11-01T17:14:36.311047Z","last_seen":"2026-07-12T06:54:15.834175Z","times_seen":34,"resource_available":false,"data":null}},"time_used":5716,"timings":{"blocked":5372,"dns":0,"connect":0,"send":0,"wait":304,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/public-resource/holiday/23/h5_zs_jr2.png?version=1.0.0","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.807Z","timestamp":1783304818807,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /public-resource/holiday/23/h5_zs_jr2.png?version=1.0.0 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"3a5a81da5b86d0bc3ff758ab681b4bcf\"\r\nLast-Modified: Tue, 26 May 2026 12:06:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNekHUSlZb3QUB4h03bcFpxwyr0v1ONvgD%2F0%2FJhqe6Zbq5bQOxB%2F%2B8buVMa9p76aUJ2Oofzcc64kXehhjDsBfhhy10OgZsg2LMgkXNStKcAzQX%2FM7CnzrN0JJGq%2F9CHZwsNmkQP%2FE6U6lHAQDH6ukht40Vj7eXMDGe0D\"}]}\r\nCF-RAY: a15da603191db21b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nAge: 141759\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777119f354011094a38\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12897,"size_decoded":14094,"mime_type":"image/png","magic":"PNG image data, 240 x 130, 8-bit/color RGBA, non-interlaced","md5":"3a5a81da5b86d0bc3ff758ab681b4bcf","sha1":"efbb9a6f2a5931d07f51cd2f82eb56a32febf1a9","sha256":"aa1e40429967b4620059b5ec5ac5ffd850ed64ef9cafabc332761aeb4f956c96","sha512":"112bf546018e4b73ec750b5b8d465354401e10c8f2da4ee8d1a665cee7856ba234f0bbd8f41d16f7c719829aa213eef1bd8de32d7d5942c7bab9664ee2e9a775","ssdeep":"384:Koss9J7YP01ZOpSkcTvqNBlOH68zZajqE8:J6M1ZOIzvUBlOHZFajqT","tlshash":"b242c0b3160d1772fc9ca62712917224623b53ffd7a9ba9c8c9711a36a3d12ec3d1483","first_seen":"2026-07-05T14:43:49.743712Z","last_seen":"2026-07-12T06:54:15.730917Z","times_seen":4,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_7994d4cf-d1a1-4583-af8f-0f45b9f310e4.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.125Z","timestamp":1783304819125,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_7994d4cf-d1a1-4583-af8f-0f45b9f310e4.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 23666\r\nConnection: keep-alive\r\nEtag: \"6f0397c598dedf3cfeea8f8a9f48034d\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:11 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SlIFk8dSDi14UzOgBPMyI3YibsqRXAjd7AUbnsdaUnujrG2lsYLmM8EpY8KHHc7%2FFEW12v3mIRFvAn9aF5lt67xLwoOJIwkz9XQmB2pmH2%2Fns7r%2BUSP8Yc0JOSbVh1l9cB9r96pjKrSiNJcTWixxNWw%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 137735\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15e08672ae9dd39-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354024f14069\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23666,"size_decoded":24819,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f0397c598dedf3cfeea8f8a9f48034d","sha1":"ff4baef46c5c1c47bf23e77a3a05993c0a3ac9e6","sha256":"8f165f6c3412aac6d4b172cb161c554808b47b1dc22475860230fe3942a542c9","sha512":"4969ad8676516f951819edb6a0330845ec147d83fa73d2b5bc500f958009ada566aeb82237ae6f78b2441eb1016c14fc6a648884194fd0c1ff6fa6491eee8cbc","ssdeep":"384:dHEej1HyPqMxet/GDp/MrObIHxDH4DBgXgigClw986nZh60EBIfWadEYfEov:dkYSPHet/GDp0rOb+GgXgi9O98EmBIOu","tlshash":"49b2e0638f04c96f26cad0fa65315991d689d60e7ed32e4f780a38608a4f267f677029","first_seen":"2026-05-02T01:47:15.994151Z","last_seen":"2026-07-12T06:54:15.722194Z","times_seen":10,"resource_available":false,"data":null}},"time_used":5082,"timings":{"blocked":4775,"dns":0,"connect":0,"send":0,"wait":305,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ca5ef219-cb88-4c5a-b68c-c85984b21465.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.828Z","timestamp":1783304819828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ca5ef219-cb88-4c5a-b68c-c85984b21465.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 83944\r\nConnection: keep-alive\r\nEtag: \"cd3cf96ac48355aa8a68b4dd114b3511\"\r\nLast-Modified: Sat, 06 Dec 2025 06:32:14 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OkUlCf2xcQSFZv598iYuGEfHccPew6KiqUHwILYT3kzVheRimYDjLVOUp6VmdTYh13jKWm0UKkAQLMj70Q80FzKOvDpNykbeGEKc43dPhxDX%2B%2FU3GKFJuqkkbdWF4u8Fr%2BK0RI51%2BGfu2sadkY%2BqVSc%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141708\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74789631089-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777119f354015064a39\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83944,"size_decoded":85101,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd3cf96ac48355aa8a68b4dd114b3511","sha1":"344310d10f86fbdbc05ee7080d3ca849573ac9ef","sha256":"e9d91b84873b60fda60b6113151bcb7abb1225aa67f1d823343f611eac3c92af","sha512":"987cad3ea6ba2be77a3fd0904132cb11c1945e1e5556cdec550708d2e22c279398f951312a4029b369980af4ab0b30f4fd72ad5d38740800d6dd48938d323016","ssdeep":"1536:Ka0Pq9/ipy6cNgUraO4ysYwAcTa6bfr9BHltyI4VGeglGZVClKy:Ka0Pq9/hzvhsTAp6bhBH7QLZolKy","tlshash":"2a83128e457a2ceec4bf7de9267cf94f60ca5e31557b1add437826c5208b80cd227292","first_seen":"2026-04-24T23:10:16.791296Z","last_seen":"2026-07-17T12:47:21.793721Z","times_seen":688,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/logo/logo_h5.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.176Z","timestamp":1783304818176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/logo/logo_h5.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69ccafb9-4754\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nAge: 141827\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f3540237447a1\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18260,"size_decoded":18447,"mime_type":"image/png","magic":"PNG image data, 428 x 80, 8-bit/color RGBA, non-interlaced","md5":"cc9379f39fc3038113c7b0ac8442fe0b","sha1":"4730b9b1bb882b0ce874b2e47755d8b089bbce00","sha256":"38992da61a8e7c718393289f328982acb2d121c7dd8d46dd8ec684283c196728","sha512":"4635f5d143bf9187682697da87f60c574f5158ba5a86dc04dfd90bcea523fba94253a265e876ed5068d117cc906a8ccf06414473057e840e95acb9151809ea4d","ssdeep":"384:k1nRJZ4TkMjHv6LvCAQxMjYoz5wn8uW7+yhni8Xw2KpCFoa3:CcDCL6ASCwnS7+yBXwFpna3","tlshash":"4182c00696822cc28637db967dab61cbca1b3ad25912c01d8fbd1b57b4149e48f48cde","first_seen":"2026-03-29T15:00:38.324151Z","last_seen":"2026-07-12T06:54:15.806886Z","times_seen":11,"resource_available":false,"data":null}},"time_used":5643,"timings":{"blocked":5342,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/sport-resource/locales/zh-CN.json","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:56.867Z","timestamp":1783304816867,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /sport-resource/locales/zh-CN.json HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:57 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HzEVDPp80joatmVMWZbK5%2BUN0pOLTQRL1KktFJIM3zfLvblz9ALx5wTRw%2Ba399hvly9RZF3rdM%2FC5fCA5%2FXsvKkf4dAsVNcLivRxKxaIMPZG%2FDwlWCEEFq5HSaPJeunWaRRkUP5tMe2jHrnOBCOOtJ6XAF5sm%2BG7rDc%3D\"}]}\r\nLast-Modified: Mon, 18 May 2026 13:48:07 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nEtag: W/\"f6602a16d7060772d7c90430e5362a79\"\r\nContent-Encoding: gzip\r\nCF-RAY: a16b2ae2694009c4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304817=MZiYwELPnHYvGx2GZupmYUQfvtks/fARBQ5Y5wsQt/0xt8PDpuD6oGXVxWp8lsOS98PSgYZRWOfAtCS9ETMJ2l3pJGRz3LM9bzvL/qjnq3MHZqaJVZv4EBY55nUSbqd0CpqIbcVP/mXMT+z0qKk+Ru27TRWzn0nUV3ix+jkkAK4aPHRS95upkLCPIhHMS/Mu\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f3540097c3ac5\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43279,"size_decoded":12148,"mime_type":"application/json","magic":"JSON text data","md5":"2b5ebb6952643e0a32efa7dcf1f8e560","sha1":"553470018d302b5c081c73fac745bd7fa9c75b73","sha256":"d78be67f77a0ae18ad650e4d53d0e4cf8abcca8a031da1f7efe519437c4c5a74","sha512":"d0eeb881fc45544023f55aa46bbeaaae0593590caa154630e5d3cf1b6ff13977f68d9bbb51b0ed8e1fe0fe86a7b92b33a378849a435b9c8f4a70fe3e43535361","ssdeep":"768:urNKJqZbUQMj0MO8Lp88wIdFvPYPPpoAqm2:rD8jrpoAqm2","tlshash":"c21354a8a16446a780e62957387f61910064ff6f00cb7506e77bebed418c72faf3650d","first_seen":"2026-05-23T03:34:47.355695Z","last_seen":"2026-07-12T06:54:15.819626Z","times_seen":22,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/32542.1781011881923.e967ca7e.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.113Z","timestamp":1783304818113,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/32542.1781011881923.e967ca7e.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-5fb6\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35400e583ac7\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24502,"size_decoded":3703,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24288), with no line terminators","md5":"b6632464b5db99b7cf6b8ce495440c13","sha1":"1e9152c90f0af648525dd5d361ed45686a6da85d","sha256":"1bc2b74ad2dbf29c416aad5462702cec6a6bbc276e5b312d16d64c3218f2b426","sha512":"6857cc1e3cd9ea0bf4fe283637a2147840d68d3ad9817c05e11cb107bb42ffc80defa35872f3b231555a15dd653a63a051aac7719235e9c2a0d253a5b0c7c3f7","ssdeep":"384:IZqxG7HnUen7QA/O65KjWYUAoT/9KcIWHOgpOTfISdk:BxGb9KjW/","tlshash":"bfb2d50ecb8cc2d9be211fac421d90610650e8f7e58759ec95f6ad09f93c60e325fa6c","first_seen":"2026-05-02T01:47:15.946252Z","last_seen":"2026-07-12T06:54:15.814038Z","times_seen":13,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/config/initGeetest4.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.675Z","timestamp":1783304812675,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /config/initGeetest4.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:52 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-3a7f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304812=m2LyOxLOwCTX0S/ePHJ24Ir1tiZSv7EQhXga78ct6gMHVPbQqQOE/zyD/HmNPomHawVK0E+qUvviAxKr7Q2lOqADAYrBqBVwNqeLv6W8VVqaimSLxAo+IPU62CiGzIl+5OgsRS1fHtfU0A3O9g/LtKhsyWzMnJaTKsnKxElrbCXoNPCfUfbdukfJ6v1Ay9Q8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f353ff9154e39\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14975,"size_decoded":5043,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-07-17T18:34:30.5998Z","times_seen":1533,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/sponsor/sponsor_web_2.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.184Z","timestamp":1783304818184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_2.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-a049\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nAge: 141712\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354016165086\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41033,"size_decoded":41402,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"66036fddf71ff69f45c146ca63883070","sha1":"4b3076a271d5042ef1b6cffc2ff49f421a819f08","sha256":"93c59a52fe04b0050dd4552a135177533afbe2dec54f10c516610b0dee857e0c","sha512":"29c2fc65e144e5d13c011e4897e0bdf771c7b4c249875eca4fa25589625696c71ec015e7e8ef3a5ee45f2a6ae9df3663da0bb736a6fb13c9628f0d0957827c71","ssdeep":"768:6eyNeN9huVfPKv0KhazApErcA6cFKSkS+pbTCx81TxUqIUgYWxDHc9wZGbYGniRl:6eXXh8KcQakywKK++tTCi6xD89HbxiD","tlshash":"b003f15c4c413e7777f19baae00ac84224d11fd4fdd5e3e61a8bc659a843a68bc2540e","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-17T12:51:05.087292Z","times_seen":2052,"resource_available":false,"data":null}},"time_used":2221,"timings":{"blocked":1914,"dns":0,"connect":0,"send":0,"wait":297,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_188684fd-5a0b-43f3-8a6e-b9c558e44ec4.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.831Z","timestamp":1783304819831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_188684fd-5a0b-43f3-8a6e-b9c558e44ec4.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 79930\r\nConnection: keep-alive\r\nEtag: \"bd7f8602db8e332117b1715d58aef000\"\r\nLast-Modified: Sat, 06 Dec 2025 06:20:07 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiQEEiD5v6d5covp7Tc2k1RotMq09UXwEC7ArLHw8JQ1xQMFCTVxtnp%2BL2WgvcTSewdM0cpH8qt0P%2BrmytEXopg%2F5PdyXCJYZBrWChD31r6DNNYcxSmSWCwzhT6LQMNjz0rzL81KFV9mxdE6x8bKz9I%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141708\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74b39fe5de6-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f3540174a5087\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79930,"size_decoded":81083,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd7f8602db8e332117b1715d58aef000","sha1":"7e5e353a2493869ab29d7087ed6854d05eaa1dbe","sha256":"289cf0eaed99d77e8ca59df43b5dd2e5a2e28fc8efbf2b4f918bd33293c6801c","sha512":"b3493bc56d6f778167f81e32ba77c61328584255960ca10373c2bccbe8f13b9f886c806142bd05e1e116ccd835870db787ae4225843b1aced6de971e177f90d8","ssdeep":"1536:1Vx1HKbkHPxLc4OWZ0+j0j8R+dWMIFtCTbYgw:1Vx1H6kHZTOWV0kMGsTbNw","tlshash":"cd7302a40e4e35b3dc0bcb7fb59c8e7606fb9be3251da9c00d55674adad81ad13a10c8","first_seen":"2026-04-24T23:10:16.741634Z","last_seen":"2026-07-17T12:47:21.633677Z","times_seen":679,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":547,"dns":0,"connect":0,"send":0,"wait":297,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_b219e889-d34b-4c28-b534-674fb2e77fdd.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.881Z","timestamp":1783304819881,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_b219e889-d34b-4c28-b534-674fb2e77fdd.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 105348\r\nConnection: keep-alive\r\nEtag: \"e55c87e5077d7d737d02e9a373cf6a5b\"\r\nLast-Modified: Wed, 10 Dec 2025 11:55:39 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFgL5b1kzgxKIN1ZLYq%2BzA1f9JTHP5HDiUMIkjFI65HvM%2Fvt941zvW3mLwHFFD0%2BqNDRATqpakxHOZhnF%2FRDQtt%2BT3g%2F255alL7ELH%2BWTI0O1munTOuGsODk%2BKR%2FIk9RfS%2F13c8E%2BRXlo9uqa7rZY18%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75506\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f79a0ba384f6-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35401f113ad8\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105348,"size_decoded":106517,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e55c87e5077d7d737d02e9a373cf6a5b","sha1":"21898eb8dc994254eb1a125a5f6310fcf94b08c2","sha256":"e2a9d5843140eddeabf22fd2e092ea761500c7b0cbf432c3de4f0e5fda23d2d5","sha512":"b17785a3c181a357def9c7bdf608f2ceb1df6b17339a0b2756e8fef4930f04fbc2fc70d2a4f22cefec30adafa5d9d1b0d259594b97dfa6a7c1fd650322e27f41","ssdeep":"3072:aJ/fAaUQyCHbeJiOjCkW/cRnU/xMT2Wfw//CVX2W:a1oaRyCPYCJe2WfwoX2W","tlshash":"42a3123992169346e97329aa30f80f4dde9874557e26204d78c8d64e45122f2fe78fca","first_seen":"2026-04-24T23:10:16.778762Z","last_seen":"2026-07-17T18:53:22.967076Z","times_seen":693,"resource_available":false,"data":null}},"time_used":2857,"timings":{"blocked":2497,"dns":0,"connect":0,"send":0,"wait":303,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-init-c0d76f48.1781011881923.0f397bb1.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.691Z","timestamp":1783304812691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/chunk-init-c0d76f48.1781011881923.0f397bb1.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-275ca\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f353ffc735061\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161226,"size_decoded":53264,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"815f2acbd0918250f25d4f71409219b0","sha1":"d5778078df7eada22b3175f9182b8b22e828c433","sha256":"12a61f287da39190db34dff1de7188c3d8b76ffbd1c11290962db88fd5e2ab46","sha512":"5ba4adaf4b36b4a402c30c3aaa5be5f02e292391d79400d353a5ca6c61405cb40e5179858abddb1af6dad243899e420111e49004d01d339ce9de23d8f522c379","ssdeep":"1536:zG5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:iQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"5ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","first_seen":"2026-05-11T06:12:53.502908Z","last_seen":"2026-07-17T12:51:05.055539Z","times_seen":631,"resource_available":true,"data":null}},"time_used":1758,"timings":{"blocked":827,"dns":0,"connect":0,"send":0,"wait":405,"receive":526,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036f","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.196Z","timestamp":1783304818196,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036f HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: xctJuUCtB/vdcPXLHLHJLFrI8suBO9KR+Payv5JpAzASK6gmoCuQn4BNMUxRFdUqNOvsIyzTEODJ7yyov2II2YB6eJAh9meGd2MbcvC1z5NrE70mQXe2lSBeUwNKzxA2iqQa6dpDAOCrlBUgKPDw1QD4w6dld6B716fkR7nrds8=\r\ntimestamp: 1783304818190\r\nsign: oe7k2g6f7e1m6g3v\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: sSYJihWazpmYmF4fQMMNwPcfrzPYMQ3C\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:36:58 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: d842397082d44e488c98fff39f04078d\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354010ba4057\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4985,"size_decoded":6018,"mime_type":"application/json","magic":"data","md5":"8f4b8ab9e03ba6643f57b9534fcdcac2","sha1":"79ce286915c4a1c1982edac9bbbe22a3dd3bc1d9","sha256":"74c32f211c1d8249f52bffac6bef88ded70f04ddf19c0c242aef2473691881e7","sha512":"fe05b342afb5bece014ce050fea8462e6dff8f2ba19c3a3c0a1fe25e4f3891515fee373488ca2f99e44add93237ac03b0bc8d4bb5bae0418afc9dc84a790ad60","ssdeep":"192:VeAeCiOSqkzgWYjgI/IWl2BOqVLM7iH5UpJQwTkGbynhY7:xXVxj/IwiO8LGiH5yvTkGuhY7","tlshash":"45f1ae1197d8a768c1a7d1e33c4273458252098a710f5f4cda6c62f6ae5f42512ff9b3","first_seen":"2026-07-04T20:57:54.490775Z","last_seen":"2026-07-06T02:27:39.328334Z","times_seen":4,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":531,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/api/tenant/domain/list","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.064Z","timestamp":1783304819064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nx-request-source: https://x32i.top\r\nXign: VJbcZ9nbdHZ6BEXfNEiyPlhIkQpCXK6aiq9/Y5UwkS4/EaimcqFK0x203nkVEgIIW+CAy5U+Ki8ZFUdRhoEIauD5HKYr1rn0sdU5mqEi6BAd+Nl/ZFgsYGwZVwmCvleoVahzD7Acx9wkchRYPViUZL1ST+WEWmh0S/DjKndeUTE=\r\ntimestamp: 1783304819060\r\nsign: mq4c2334a1o3c64b\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: YAJ3PpYPibWJJJpchpFrDcrBdFt6tkHZ\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Mon, 06 Jul 2026 02:36:59 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 3efad8d400cb4688b16bddc34dbdb9ce\r\nPragma: public\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354013af4059\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108,"size_decoded":1825,"mime_type":"application/json","magic":"JSON text data","md5":"5d9e96bd132a2c24281ae50f2b09efe4","sha1":"503ea18100d0f1573baa195933355a1372e93841","sha256":"7f205b18b5deaae96622989dbc8ad73999a9616e96ef26d909f19525deadb328","sha512":"ab5a589dc81944d2fe05d656777e9e490d42a2fd68c7e577387cfdd47c9b0c5276ca2f91a3868407c373e500d00bb5360a5ae035c7c0cb1addf47f20755a268b","ssdeep":"","tlshash":"fb11c6101c6f12c8d6e8d29263503345388d8b76056db91b69d6b74fae0583a32120a4","first_seen":"2025-08-29T11:05:53.144028Z","last_seen":"2026-07-17T18:34:30.535659Z","times_seen":2208,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_4af051b0-3d60-41bd-8dce-df47daa5c0c1.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.120Z","timestamp":1783304819120,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_4af051b0-3d60-41bd-8dce-df47daa5c0c1.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 23470\r\nConnection: keep-alive\r\nEtag: \"6710376e6aa39b4ccb093f1125eae6ab\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:17 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDM5sIUoqXnttRSHoH76zZHwW%2B7PCPLul056rvl0nrxG1QQowsFONQS01pzY0P%2FwVY7jQhOBpXUGEeUtNkBBYhHUHEtQXU1VccXN3WygR4mWima8s8kcm5N%2F%2FNLHvXCEsTBWfgoQ4g5CTUdy6wWB11c%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 137736\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15e0856aaab09e7-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354023f94e5b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23470,"size_decoded":24625,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6710376e6aa39b4ccb093f1125eae6ab","sha1":"55e2492c8f0011aece7e55ede6464cfbde1b00d8","sha256":"24b1cd822323032ebfd629d4f9e7110cb95e5e50818aa0fcaf9f89ab3a85c78c","sha512":"dd65cba109b270f027775e7ca4dc13d82ce6b8b14ece7d0fbb9ee6e35436aa74da4f6033cda37fa1277cec081181df4344b5772e5196239f28cb077a69f462ce","ssdeep":"384:wBLNtZZx9SJ52I3XH35EbjT3ExgGee1V8StE/VcaoXCy5LmkUtl4:wf3JSjnH+fT0GQ1V8pd65L3Utl4","tlshash":"36b2f17740867b655a7eec8e399b66f023523034ee4e91c93fbc18e48fb012891389c6","first_seen":"2026-05-02T01:47:16.021193Z","last_seen":"2026-07-12T06:54:15.809233Z","times_seen":10,"resource_available":false,"data":null}},"time_used":4842,"timings":{"blocked":4532,"dns":0,"connect":0,"send":0,"wait":302,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_5286b86f-48ae-4056-b4c2-f68d7cc98bd1.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.121Z","timestamp":1783304819121,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_5286b86f-48ae-4056-b4c2-f68d7cc98bd1.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 24702\r\nConnection: keep-alive\r\nEtag: \"e7be93c65218d7634dbe8783c4216368\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:24 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5ddjgTjYFzeDGu%2FUfA9u8uXY7yy1wk6u7HbFzPlTg8YP8VwknjBlpEGHd1yf2hksXGsrehhaB3jvPKpmLe2V1JqNn0KoNV%2FIZx6PJzxkCfQ7hd3FdeEMw9veWx5YPVvufwgv5R8xwRJ0iCtAt9ZGLg%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 137734\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15e0864cfff3e83-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354024133add\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24702,"size_decoded":25853,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7be93c65218d7634dbe8783c4216368","sha1":"7d8db251da5fe5e3885cdc3d934eefb258db241a","sha256":"44b211d3c79ec1a2c6ca79c619c036dcc5039150def4274e95a88d8361a76332","sha512":"7e7dfff4f99af2259dc36a0bd05ee76e67948eb2864a95dce91fe8363fe91876bbe233ad0673aba6234a8bf71052d0b5ca49967c2d3d3e70bbda5cbac21ee3c8","ssdeep":"768:eDOQiN49AUech69eN1RcmhiEveSRkmxz3HTNeX7UCMj9qm:8iNEbhpN1RcmgWeCbHTN","tlshash":"fdb2d07637ad617180d2fdb0e7a65b467841ecc03954ce64639de73d8efe869f028118","first_seen":"2026-05-02T01:47:16.022023Z","last_seen":"2026-07-12T06:54:15.720945Z","times_seen":10,"resource_available":false,"data":null}},"time_used":4865,"timings":{"blocked":4556,"dns":0,"connect":0,"send":0,"wait":303,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_2a74177b-d024-4ea3-8b58-fce53f91051b.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.858Z","timestamp":1783304819858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_2a74177b-d024-4ea3-8b58-fce53f91051b.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 65510\r\nConnection: keep-alive\r\nEtag: \"1841972db1eb6b1b08f2b8849b98ffad\"\r\nLast-Modified: Sat, 06 Dec 2025 06:23:06 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sET5iTuBPxWGUUTIiZRGMKPy8CKuF2r7a%2FevyfMoF9yn2chdPAu80xWIn8QgWnd6t6iyrAI%2BM4nn2xKD9EO5N%2BwTDWv8KOVEPMO2fm035TtQpR7TBSI3LK%2BhwnAoWIYl81IgI%2Fqxsxoh1l8cv8sVR0%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74cbb11854d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401bc2508d\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65510,"size_decoded":66667,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1841972db1eb6b1b08f2b8849b98ffad","sha1":"6194c3f706be3f6aa4cf9042d0cc4b9c2a77a1a4","sha256":"0b162dd98f34fc830303fa40c47a002b14c2b6f4947a7378247db3c924bb7fac","sha512":"e9fb0eff09d46b3c88de962b1d6a020fd55f98d777e56ee4a0ac8aa615d14faa3d95de3ac35a92451ef4be5c8141532327b97c6fa95d5090aa61847b2b24d370","ssdeep":"1536:HsAMZEDXiepWzfRKc7nC3BQkbf9ptwv+AOtedy3JMw:HsAMZwMrC3BVTtAy3iw","tlshash":"5a5302765eef65629bf42eeb0331c6856fcb5a10803814b83059e1e5ee85c29f61d372","first_seen":"2026-04-24T23:10:16.852267Z","last_seen":"2026-07-17T18:53:12.329411Z","times_seen":663,"resource_available":false,"data":null}},"time_used":2022,"timings":{"blocked":1652,"dns":0,"connect":0,"send":0,"wait":310,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_0cac9b57-bbe9-49fd-a7b1-7b0f1990cd37.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.892Z","timestamp":1783304819892,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_0cac9b57-bbe9-49fd-a7b1-7b0f1990cd37.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1114\r\nConnection: keep-alive\r\nEtag: \"609f81a9f56af80856dda73fb6087024\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:03 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 52632\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2YyO5OcCrsXDDbF44DgZPlhJp%2FFcl5h2TMZzy%2B3GxqxJA%2BSAIOoX%2BbdbEAJBezysMQ6gak29h1b0D5ZA5XEKQ0xPDq4g3fpvhEc6FHpAXUpDYhsKU0bbhqs%2F7odhY0eLKie%2FsKU5KKNeOAYIbaaKNJ8%3D\"}]}\r\nCF-RAY: a16626132ef7096c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f3540213d4065\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1114,"size_decoded":2271,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"609f81a9f56af80856dda73fb6087024","sha1":"ba7188befbc38c2715a5654ba50153b056d7a211","sha256":"033b4e34680b5dc130a9a56e8e159ca582fe41e5ca04a07d8791b8e7dcdfd991","sha512":"b1d68c173d6b71a8ed571fd4e11c314aa161e01b93e8a9e9e2b089200403a574113fb7ce28ed3d0cd8c81e12629e4d239bb422f3aed00d855234d77803d6f577","ssdeep":"","tlshash":"8121c60d6de280e5fd33fa1625e6b4bc1d8e3ec178124ac0605b9428d504271e26e7ec","first_seen":"2026-05-02T01:47:16.038229Z","last_seen":"2026-07-12T06:54:15.793194Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3351,"timings":{"blocked":3051,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_2028a026-1ab0-4300-945c-8247e23d1198.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.896Z","timestamp":1783304819896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_2028a026-1ab0-4300-945c-8247e23d1198.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1128\r\nConnection: keep-alive\r\nEtag: \"94293c29541f406bd27f0e85ec159cf0\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:16 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPzLJHZz12cXZtr21B0cvkFIcJd6PP6rLnUMD3BL7cAhW3UukH8PbGPRuubz0cexWSmWio4EI2Y8PxY8t5OHy4fl7USfbm%2FBOZN6yubxW3ts97484w8IHOhO7ktJdDEEaghefIQUO1C0WGZGUDJRBCM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 52632\r\nCf-Cache-Status: HIT\r\nCF-RAY: a16626195a8e5167-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f354025d247a4\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1128,"size_decoded":2275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"94293c29541f406bd27f0e85ec159cf0","sha1":"99d018d830f620b119a026b7ba7f9edb0a5bc2c4","sha256":"d527a61f9e3942ba8c8374016bd204edfbefc24b550dac917dddaa746d5b988a","sha512":"03bdc1c8b5b565f17b55899b9a1caaccd64334577eecdf4e22d3dd408f089b6454af8f606b7c90259e0d01ffa3859c09592bc72bc8c52301bd13c92bc753c906","ssdeep":"","tlshash":"2521ca54a5fc046fbe97f92f38dea4a508cd1766804509883c4971b44940171f36d3e8","first_seen":"2026-05-02T01:47:15.992451Z","last_seen":"2026-07-12T06:54:15.725447Z","times_seen":10,"resource_available":false,"data":null}},"time_used":4517,"timings":{"blocked":4224,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/css/m/index-399e2569.1781011881923.adb439b6.css","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.685Z","timestamp":1783304812685,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /css/m/index-399e2569.1781011881923.adb439b6.css HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-9d8f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f353ffb6e3abc\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40335,"size_decoded":6725,"mime_type":"text/css","magic":"ASCII text, with very long lines (40335), with no line terminators","md5":"2d6be5c2107b1f6c20b1ca4ede5f944c","sha1":"52dd97dec91c988d518a1afbcc78db4479af7131","sha256":"f4390e6bc7737b8ef2edab3d46559df41c6cc15c90895b78c0abb0c891491c62","sha512":"ef05a7f64e068813e00a58472d2ec2a40b8b526b4c439a72811dd3eaef81e68f20086eb44f1be92454f4fccdb1ff21c5f5944ec12b73ebeaf070ce13b8710c83","ssdeep":"384:mWYLVDSKjoiuudqHkSn2APiQKwKOTDhMnWk:mWYLZsNPtTDhM","tlshash":"e703f137b161132862d75985975432a4a13ac40bb7139bf9e38dbf2f9acf687127018f","first_seen":"2026-07-01T01:07:30.876006Z","last_seen":"2026-07-12T06:54:15.65423Z","times_seen":6,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":287,"send":0,"wait":338,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/b6340994-04ad-4c44-ac40-50ba87f7a3a0.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.095Z","timestamp":1783304819095,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/b6340994-04ad-4c44-ac40-50ba87f7a3a0.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nEtag: W/\"55e78c2224c20f1f40e19090f3e9badb\"\r\nLast-Modified: Wed, 28 Aug 2024 19:41:21 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 137736\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBh0ffzof9QKLYDu5P9HnI6cIDl%2BFNnDA9a1lWPTxypF%2B6SPi%2BsatpkEoW7nBrOjTkjk10PfxSVMmZiNrqhVYsVTywuMt4rdElqWn7DKPruW4x4cVM37YTlOMKytGfdSPK4KAPslbUNOFrI%2B0qAxSs0%3D\"}]}\r\nCF-RAY: a15e08596f650444-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354022c54e5a\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13155,"size_decoded":14383,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"55e78c2224c20f1f40e19090f3e9badb","sha1":"c798f24de9f142ee95fe386e1e1173c5cb25fc13","sha256":"0198a00681dfeba1ea3b8a0ce5001d6ca517c1b8a0825d30e927710bb13598ab","sha512":"1b3c6654420e90f4d8a83d4f518d5c8f8361d00b6a04a60229a31df6cc359dfd236d92761fb210da4cdc19a8b46124b41111829ac3c9638a054bd65fb4e201bf","ssdeep":"384:y1fhhexmwiZxjT4lR9iAXhPD2YyV1hxDtA:GrwotAgYynDDW","tlshash":"5b42bf033dda49ee6e32210608e1f41db67a9e9e9ca35ccaf45f9920b86056c077e7c1","first_seen":"2025-11-01T17:14:36.312029Z","last_seen":"2026-07-12T06:54:15.741725Z","times_seen":29,"resource_available":false,"data":null}},"time_used":4557,"timings":{"blocked":4250,"dns":0,"connect":0,"send":0,"wait":303,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_6ba5f6e7-0a03-42b1-aae6-3de33d838c71.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.862Z","timestamp":1783304819862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_6ba5f6e7-0a03-42b1-aae6-3de33d838c71.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72698\r\nConnection: keep-alive\r\nEtag: \"8173a97e42cbe83253f569868015813a\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:44 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7NLHgeKtShtUJVGvR6G%2BGl%2F%2BxOt8BDnsUZ3jYPmJBV%2B%2F87plfoEnj5urdL5g1lcODcTZ2T2E2wedR7JDZYlPizNP8QZww6X7HzSP9ZkPxW9cYC9xo74kOGRsb%2BCNl1KJXZuo5WSex3x3rYDMfkGRak%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74bbd7e85e0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35401c4b3ad5\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72698,"size_decoded":73857,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8173a97e42cbe83253f569868015813a","sha1":"42ea560648d24b5b2f7a2707de2db0bdebc8f41e","sha256":"b6bf9777cb024d6afd79cdfab403bf54676a54ea6065abf0e8d02344a42bf8fd","sha512":"619c7b0a75af0e07e0929b087fda0183eae617910500da47727ff8b6d29e6dc98846c2e19a1fbe6d042c648c32aa24db9e0cd047a55f7256ca565e66376edaa8","ssdeep":"1536:ZYxIgPfY+3lbLKrfSQK0ds+ePjygtx4Ifql:Z0vfY+3lKrq4ds+QJtx2l","tlshash":"3663020b5a1dc95a0ae20441673a5bdeecc72324e27535c5a075fcbffad3f75414281a","first_seen":"2026-04-24T23:10:16.700652Z","last_seen":"2026-07-17T18:51:03.56187Z","times_seen":651,"resource_available":false,"data":null}},"time_used":2129,"timings":{"blocked":1790,"dns":0,"connect":0,"send":0,"wait":303,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_465faf5d-2f6d-44ba-896b-8d6bffead8bd.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.851Z","timestamp":1783304819851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_465faf5d-2f6d-44ba-896b-8d6bffead8bd.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10758\r\nConnection: keep-alive\r\nEtag: \"1be21ba94f35a4ac4384d8d158cc42f6\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:05 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2B8zafcMwHvZeObSCyF8Gv9n3vPw0N9kO88xJVyRDPyhzf64UBU%2BxFyPdSYwwGBbtkRLzMVhcN3Uk4CJnu3pF1B6230J1NNkD8pL5DM9iyJ1kUa8SmSeSJICBX3JpHN7jVU5kQ%2BcsUhz2HkpXa0LKcQ%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141708\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da755abd5dd8b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401a92508b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10758,"size_decoded":11911,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1be21ba94f35a4ac4384d8d158cc42f6","sha1":"3dc86d6c7bd530771ada51859a6c47c39258402b","sha256":"e2322e5c3f299528f388653e9dee3d3ca69e9f0006d1d0530cad7062dc2c3cbb","sha512":"40ce1b1f21df22b5ff6df16248f358d1cf0eb862f764bccf75cec2bb7cebae008ed8452e6fba25c2e091fe61c36fd30d25e6d3b46fd107985140debd9dacb09f","ssdeep":"192:jQnnxvnAz9rf9dKD/x0vFIcyKAY7MLUnEpeiqd6ufnQD4rVdg9NpEDy2lc:4A9r76/xEycyUkLuID6Hg9zey2l","tlshash":"dc22c09b145b3135fc1664bdbd5e5b0250ad8cc102b886290cbe44ba808f9caadbfb05","first_seen":"2026-04-24T23:10:16.865837Z","last_seen":"2026-07-17T18:52:15.44773Z","times_seen":648,"resource_available":false,"data":null}},"time_used":1652,"timings":{"blocked":1348,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202502/_webp_size328x442_27f7b303-88a3-4b2c-aaf9-2bc0106b5d62.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.852Z","timestamp":1783304819852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202502/_webp_size328x442_27f7b303-88a3-4b2c-aaf9-2bc0106b5d62.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 22168\r\nConnection: keep-alive\r\nEtag: \"04f8fffa2b2bc694cfc7174078dc54f1\"\r\nLast-Modified: Tue, 02 Dec 2025 14:17:04 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcPp3xNrOuTcPpoTn3ah3%2BjDqeZ5vatWpmmoPiF3NkYvsTh6qWDptOV70OIRVVYQ8%2FcdE33Um1bai9UGLXKFom6PUqPxbFmhxB3m78TBJY0b0PpikINwxfNeFCyi0KulUP8hKTfTk3bwiWmGs5FWkoY%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75524\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f7225ddd04dc-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401aeb508c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22168,"size_decoded":23318,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04f8fffa2b2bc694cfc7174078dc54f1","sha1":"ebfaea4761ce72105a95c0241ca87bf998a81338","sha256":"9900ec116e5fa903d64f9cfc38a6855fbc19c42bbad46c2690e2a50920abf030","sha512":"599c14c0dd6eabf0aacdf250e366075584c9086dfe71ab9f4cab55301c2a16efecba29d8dd9b14be7472766ebe2618de9559ca7a20fe3550e9ae564fe12aed05","ssdeep":"384:+Jq0Vf96zLIvbNpNUU2tDeOouLf5GslLXGdB3Rk1SV14Hdyd/2U3lMezZD:+Jq9ENuyOp5G0WdlRkQB12k","tlshash":"d1a2d14f988244a9ddeca9d6e2cf7a5c44f39cc012bea4668eb455c8b04f5163ef1059","first_seen":"2026-04-24T23:10:16.784958Z","last_seen":"2026-07-17T18:34:30.502454Z","times_seen":655,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":1437,"dns":0,"connect":0,"send":0,"wait":298,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_04beb05f-bdcc-4bf4-a35f-b560e45e45b0.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.868Z","timestamp":1783304819868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_04beb05f-bdcc-4bf4-a35f-b560e45e45b0.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 73676\r\nConnection: keep-alive\r\nEtag: \"41e79b39dc26bbaf7f40e04fea71c634\"\r\nLast-Modified: Wed, 10 Dec 2025 11:53:06 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gM7wMf1%2BY8JNCePcIOYzX5%2FMp9BMPS7L9%2BNjgSgABZqWdz742j7wUYtf8c9kt2fYaMm4Jk6LWPbFvPqoqXKOiY6oC2Wul9LsUBVAb0xNIkZyAEppz98cDCTKMkKVE7iCmZnOQQtyBCBewsQBfTTasvE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7514c2d044f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401e5a5091\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73676,"size_decoded":74829,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41e79b39dc26bbaf7f40e04fea71c634","sha1":"477586286821f2dab7b013e04ff4921b7719f121","sha256":"a6091cb61f7968a02345dfef2905c4f62f401345fb3fd5d2bdf5306416b50d90","sha512":"5fd2068c26d3d5e6995cbe847edecc9145c7abcdfee76ed94e1db9b97da7abb651e8dc990d06f05d2bc9b04cfbaa5c9cb41fa32da479554d64e47eb91e01fe56","ssdeep":"1536:Dsmee6MaqRp352dNFckeb6yTb6Kpmd4xIccPip688s23Z72HuJjJrl:gEaqRfoeb6yTb6KsdiIccuE3Rfrl","tlshash":"c7730143ccff7298de2c687e0d5e0caa191442443f8c0ab3e6e5615571697af36b32b8","first_seen":"2026-04-24T23:10:16.752534Z","last_seen":"2026-07-17T18:53:22.911889Z","times_seen":663,"resource_available":false,"data":null}},"time_used":2696,"timings":{"blocked":2315,"dns":0,"connect":0,"send":0,"wait":309,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d4d2b521-861c-48d3-89a5-438931453851.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.894Z","timestamp":1783304819894,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d4d2b521-861c-48d3-89a5-438931453851.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52456\r\nConnection: keep-alive\r\nEtag: \"c545c93beaefd4bd61fc5c1b18fc1cae\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:18 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZn4dUM%2BxV9stB%2BQcAWzhG8qiU9BQNGRIVLw1lwL0fUzlQwicpgocOp%2BuSDpPPM9l5H%2FXaDOomvc3sNM9HjXnxCAl0lbE2W3R6QZc2fRAD8WLFxyo0neJriQk89qvUEMkCS1zOzeyhctMKW7nfii2PM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141712\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74c8e3f9b87-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354025483ade\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52456,"size_decoded":53611,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c545c93beaefd4bd61fc5c1b18fc1cae","sha1":"19a7126947210454bd434f5642d579bf87bb0e99","sha256":"c3a29377aa06329a7068664cec9166fbcf02f0724f8938eac5106b1c3a6b4644","sha512":"bff91a20b5bcb7b7eab35453005dffaa98033341f7eeaaec88a0c4b414d0d06511b4c05ebb0c3723aaaf654bc9f0c372ad3b5b288030b1d899736b27b84f0208","ssdeep":"768:n4M8fxEbpGtvfqj0Bs8GkjOhpAh9bzillpUed5V/7hz9WJVI7X1BPFLN7CLrJneU:nifKNsXI0ex7lgVMPZN7ErJnnZ","tlshash":"333302a0d69cc510dbf8d6bf0a5130fc5e88fa501ea53bab4b804cdd889e5e4e51f60b","first_seen":"2026-04-24T23:10:16.825501Z","last_seen":"2026-07-17T18:34:30.688401Z","times_seen":747,"resource_available":false,"data":null}},"time_used":4413,"timings":{"blocked":4087,"dns":0,"connect":0,"send":0,"wait":303,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/css/46431.1781011881923.bc5df1d1.css","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.684Z","timestamp":1783304812684,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /css/46431.1781011881923.bc5df1d1.css HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-552d2\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f353ffb6a4e3b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":348882,"size_decoded":87418,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"93f90e3733fc4af32a4ef4b34416c531","sha1":"bbe0b8f50268073f57565c76a1ac45b46f6c668e","sha256":"ce07d563179018eb4ccfcaf005a871d6baee3ad2ac4400e6e4768a2d35c5aa1e","sha512":"664e0ea56bcf02d80d7e148c8c999493c6501c5b8b6138fb0c5a05c0c0a9c3b5facac9d711aa2ce216eb335328be867456dbbbb2864f99531faffa5fb74eaade","ssdeep":"6144:z4+4r0H8Tu4+4r5cRlGuEQUQ929srbnpTP4T:z4+4ZTu4+4yaT","tlshash":"b774fa6caf1030ae15a7cb27b660f5199c36a443f9bfde9af3e53d580789a510623c13","first_seen":"2026-05-09T01:34:22.507922Z","last_seen":"2026-07-17T12:51:04.943847Z","times_seen":699,"resource_available":false,"data":null}},"time_used":1623,"timings":{"blocked":-1,"dns":0,"connect":289,"send":0,"wait":429,"receive":605,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/13575.1781011881923.cda1d494.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.698Z","timestamp":1783304812698,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/13575.1781011881923.cda1d494.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2f964\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f353fff6f3abf\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194916,"size_decoded":60169,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"65e5fffbcacf52710ad963a4aeede3be","sha1":"f9c16a3c86649aeacf18e736faacff0cf78192e7","sha256":"36f42498ee253b0d1d5e7ec8bdf406f05c4c91e72f64169b1ff67435d2069099","sha512":"96e8263c115ca75ff63f6ce70ba8ad5af370662f86c2f95a8960a5aa5a30ce4134fa01d7fbd1694ce37f111b69e3e418f0542a7ab1bae4cec570c8c3d8d08986","ssdeep":"1536:917BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:7jHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"23141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","first_seen":"2026-06-12T19:29:57.266361Z","last_seen":"2026-07-17T12:51:05.016487Z","times_seen":624,"resource_available":true,"data":null}},"time_used":2213,"timings":{"blocked":1591,"dns":0,"connect":0,"send":0,"wait":383,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/sport-resource/search-jsons/matches_zh-CN.json","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:56.239Z","timestamp":1783304816239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /sport-resource/search-jsons/matches_zh-CN.json HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:56 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugz0UCIolNTaSS%2BCwh6d2QDg%2F3FH6unbNMxLJWI3wmB3Qf4LgO%2FjBap4HYzeIYBAwkc4TVS3t53d%2Fbdo%2Buk8e0pIfP8OxSrLZR%2FvxwNy54PpSRMU9D91urfYpIkU1gD0an%2F4u3eSVNdXYXKb6rfNE35IsjYqVIfk9V4%3D\"}]}\r\nLast-Modified: Mon, 15 Sep 2025 14:27:18 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nEtag: W/\"c5b2408cf9f2513ff9aa946efccf5fd8\"\r\nContent-Encoding: gzip\r\nCF-RAY: a16b2adf0b190901-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304816=gs9qkvz6I3htd6TdKrqEHtWqUN0UjPwYQPVmumTTrqXkETOm5fcInNdTOdKmmXYWNfwCXLfQTg0V/DCUpXkQG8epQWZhCTXmbLvJZaH++HVSCgtAu7gcr70tvvG23AtTM6OljcuhdNmEngiRMJHOoMXMZkHYaC9dc/f25oQkF9Yfgkral1o1DvIZZ6rhEkRC\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354007593ac3\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92517,"size_decoded":40396,"mime_type":"application/json","magic":"JSON text data","md5":"fdc9003bb7c1eb79d78624fdd5fbebd4","sha1":"80ecefd4027fff216b2e05eadc57b50c74995fc1","sha256":"b3246de1e6b7764366b90540f16faa306472fae7b8042ee8c51b27600f9587cb","sha512":"336be7c42a38686902c55c1bfca1c09906c7bd2b495e0abf1e500ae068e1d478ac1ee4eb9ff96853f0fc79005fdc98928de37ed2eba752acc16a2c0aa231dce5","ssdeep":"1536:up3TmYKnUJWpJJWD++t4up5+Jk5QxlilJV56wVbI48/l76fiantOo8dK/di7MBOn:+OjkDLy7k5QvwO48/5uiPrKHBOUUHvh","tlshash":"4593e9590adfcb7a0801152e648b2e83a09d47ddb06d62f0eabafd7d5d1d3eb435890c","first_seen":"2026-03-16T03:26:21.213662Z","last_seen":"2026-07-12T06:54:15.746556Z","times_seen":20,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/css/84222.1781011881923.f5f1c06a.css","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.060Z","timestamp":1783304818060,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /css/84222.1781011881923.f5f1c06a.css HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-8943\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35400e1e4e42\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35139,"size_decoded":8998,"mime_type":"text/css","magic":"ASCII text, with very long lines (35139), with no line terminators","md5":"eba2efdcabb5831d3f9aae716725157e","sha1":"4d8870c6f72e0dcb0239b0eaeb930fb5894dff7f","sha256":"f366b8fcd1e8c8846e8d84d538dcfa12c023ccea417a811ab58e4ecf13a14ffb","sha512":"48f52201e688e7e5e7edc516e623d6002fc54fda193c73cc58a5f456398119ce6a661329abec836500bd4bd482bcdffb9f8eb6474fc1c2207cdccd5ecb952312","ssdeep":"384:DYCKpsUIc1F8l1TANI34yQyqPPQwmfzIfRbHx6+OhCcbakzeYaTOlUbeNsbzZ+Nf:DYCKpcPE64yDqbHbMisnddqdK","tlshash":"86f2c6a9a294b53f6d1fbb34a7c5a1ecb1399450df630e69f3016a38c7c3af1011626d","first_seen":"2026-05-02T01:47:16.014955Z","last_seen":"2026-07-12T06:54:15.800023Z","times_seen":29,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/sponsor/sponsor_web_1.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.182Z","timestamp":1783304818182,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_1.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-a556\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nAge: 141711\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354014fd405a\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42326,"size_decoded":42417,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"e0ecbe5a9349aaa328ffd6f9515f9007","sha1":"79ebc30d345c812a3e3a122f152829d161b00a52","sha256":"452d27839b3f3f35d11c9a26f06d6cc9db56dc8c61261ee43e0512f69abf71f4","sha512":"fd322bf3ca925ce2eb45317adae1dee0f1c2e4f30035738052a97ccc054ffb576a92a46758559c8d13cff6be549caca5541d14c5692cbec2758ab2b3c7f3324a","ssdeep":"768:2o9mjFjepo5h5jLasrCO57PIrvmMOSf4t7q5bo6Wruv9CSMsfRLMD7XZ0:2ogpymTxRrwmDSM7mbo6WrutR60","tlshash":"8713f2ebe1075d80bb946c9b3925eec61da50f047bc78d68c5e055f921290bb0fa33a7","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-17T12:51:04.936914Z","times_seen":2059,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":1634,"dns":0,"connect":0,"send":0,"wait":304,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d991353f-39ff-4552-be18-848fc3fabfb2.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.838Z","timestamp":1783304819838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d991353f-39ff-4552-be18-848fc3fabfb2.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47886\r\nConnection: keep-alive\r\nEtag: \"ba0be3142a5adac8fdffb8c21b319dbb\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:09 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEkMiMDfNYILPP556go724vfFQnrgaFXhiGcvapkKPYuELxxIxfGT1OeM3inIt4%2F3SipCJctM1AWtHt9srrlNzbgsp1ixchOsl9LrZyWCVIbs4jSowKyAJppt%2FtlKrmJ7rQLmroD4%2F6YQ1k6%2Bd7HqjY%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75507\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f78b7d0871a8-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f3540188c5088\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47886,"size_decoded":49040,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba0be3142a5adac8fdffb8c21b319dbb","sha1":"86a3734ad3716c5ecf67412f804a881fc9eaf4ca","sha256":"c3d9e9184bc542699b269037e068dd63803352fc1feaf06695ec888185f77bd0","sha512":"da43e90eef8c8f0aa5daf006910fe64bb579b9a0083df3c06b0f21c8f175d5dacc0b31009365ec391f0482e62f0b8449b98407b5a2423c20fc021aeead097296","ssdeep":"768:zpFTQF6ySs7gk0G8b/lE4qxGPlMt63JKVB/JmKjmz+0N2pqQg6yQV:fpyt7y/y4qoet63UbJRa+Fqwy4","tlshash":"ec2301147718d91012a1a6dbebcc1b6d6cae4947a4457a338d8770ccc7bdc9ee53ce82","first_seen":"2026-04-24T23:10:16.87696Z","last_seen":"2026-07-17T18:34:30.598936Z","times_seen":677,"resource_available":false,"data":null}},"time_used":1155,"timings":{"blocked":846,"dns":0,"connect":0,"send":0,"wait":297,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size656x844_f676ec47-4b6f-4d37-b476-fd69f2381a1a.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.885Z","timestamp":1783304819885,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size656x844_f676ec47-4b6f-4d37-b476-fd69f2381a1a.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 31452\r\nConnection: keep-alive\r\nEtag: \"2c3c63fd994d8d3c68a43ab204dc29af\"\r\nLast-Modified: Fri, 24 Oct 2025 10:14:42 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JW9NTeVW0TOcHRLPHTJttGhCy6%2FTsslKkwvz9oiEbF%2BKpzXUhhWMGPhaFqaeCP%2Bug2Up61U7MVvOU2wdPm9ZB6AAIIQNArsylhuuHBTHvEJbh5G63d1UrdHgucOLaQX9Y%2BAnfhpXyUyOuCe0NScZGlA%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7514b6104ab-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354020074063\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31452,"size_decoded":32607,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c3c63fd994d8d3c68a43ab204dc29af","sha1":"f5da9ac11b57d67e7b0a21bdf3d2d5134eae1e2b","sha256":"b38e08c497bfb9faec2e112ff1a093f8938984e5c098484f7eca99900d1e1c72","sha512":"e83fd01696f5a79d5b2ef7ad13a442455c94977c810bceb5a6a656e08927f8a160a5b6be8e8e04bf10c0b2b721254319cb5fe15982a7ae0f7272a25a61f56127","ssdeep":"768:JXiQbj17p1iaPPQUz4ATG+Qkx5UL1ot3u3QO3xOBiw9urQ8:VdJp1iuPXECXUJ6e3QOBRwYQ8","tlshash":"74e2f1f968c3c9342ca43ed546ff15d58dd8b3d475e60863eb222d049137822e9c9e2d","first_seen":"2026-04-24T23:10:16.870222Z","last_seen":"2026-07-17T19:10:31.835456Z","times_seen":713,"resource_available":false,"data":null}},"time_used":3052,"timings":{"blocked":2743,"dns":0,"connect":0,"send":0,"wait":304,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/config/gd.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.677Z","timestamp":1783304812677,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /config/gd.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4420\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f353ffb6d3abb\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17440,"size_decoded":5524,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-07-17T12:51:05.041928Z","times_seen":739,"resource_available":true,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":0,"connect":293,"send":0,"wait":457,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/theme.config.ef94991b.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.687Z","timestamp":1783304812687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /theme.config.ef94991b.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281706-1a62f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f353ffb7b404e\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108079,"size_decoded":16737,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38260)","md5":"90d279a2980268d2835cec593c23d286","sha1":"4374bf6da5cbdf8f025434137487bda68077cddf","sha256":"1679f19badc24dea0edab376edfb8583714645e18f705fb849037af6cf0b3ff8","sha512":"362ec1b73cebe1ad224a5b745c9ceebf2b86301deab27e35d6517d499499328b34c24d76a72e5b348d623e64a4d17bfa0ab08d2aa012f02af23c6a72df51817f","ssdeep":"1536:D2JREobVmtlIRM4Sb2mcTa2mnzyJog9CcHWHA:qEtlGu1Jnz45HT","tlshash":"c0b3bb7ae20c963a6177a8bfb46ce111d12f9c0c9b1d5fdef03e60a25710669c831de9","first_seen":"2026-06-12T19:29:57.324936Z","last_seen":"2026-07-17T12:51:04.907194Z","times_seen":635,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/undefined","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.170Z","timestamp":1783304818170,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /m/undefined HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35400f953ac8\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24671,"size_decoded":11470,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"886080ace6e341d83041fb9cab6fe765","sha1":"5a574ce85ecd12df0e7dc823f625a419835f5ae1","sha256":"e3be735996c2a43a47a27cf9f5f0183c27628f24e496e6469cadd77113e67a89","sha512":"fcb22ed8a2bd6c818f4997b3d4b98b2c43a200919d365a29f9e3d17a2f356ad4585f093f1d20183eb2617d34b41a2483dcc6ad65af1ce3bd8c0097d9fb663c42","ssdeep":"384:21ERlxqNBPJ82VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJ8iNYiKop/E6wkpcu2llz","tlshash":"c3b2191a9df3497a2423303a1f7fb20869b0d0134309ed403e4de7594f95aaa56f7bd6","first_seen":"2026-07-01T01:07:30.836706Z","last_seen":"2026-07-12T06:54:15.668123Z","times_seen":6,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/public-resource/holiday/23/icon_btm_jr.png?version=1.0.0","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.808Z","timestamp":1783304818808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /public-resource/holiday/23/icon_btm_jr.png?version=1.0.0 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"f25e504c2e0f1aa9e2ed083d5f322e5d\"\r\nLast-Modified: Tue, 26 May 2026 12:06:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlNcCAbr%2FSo8scZUnDry6%2BeW36IFB2UsqgWC38oSjfGtSZ4kDMZnkcCLLMD7xqztc6xSwd4e730PEXLV9egtvVEssNZO0w1LPF9JOVN%2BJR4lCKllJAJT2HOZ7Gy0l2xcvSud32sxSgGO1BSz7iS%2FCDoRINymHav5WLNm\"}]}\r\nCF-RAY: a15da4798d1c9b7f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nAge: 141822\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f3540110a4798\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36479,"size_decoded":37614,"mime_type":"image/png","magic":"PNG image data, 240 x 180, 8-bit/color RGBA, non-interlaced","md5":"f25e504c2e0f1aa9e2ed083d5f322e5d","sha1":"ac78f47db131e2e61aa480bc69955293c7730875","sha256":"41b4ef5ebcbe9b836135c295bda3dcc26cd7188f02e0ba540c769604c7c01dfb","sha512":"ed8bd3cf71738d0bcef51f5d63d6d57be9437a4a83c1703fc1eda3d049b6e254da043d964d9f5e22831ad1e924d7dcbfcc3528ab3798d96b834470590b77cc65","ssdeep":"768:5vMN4b47iS6uGpblTTE8wRxHjPfQQi71Pfi:xM4M7iZgfQ9tfi","tlshash":"daf2e18c7bf277b8722d509f08329ea86541519f067a6305ca30fb42db2abc06675dfd","first_seen":"2026-07-05T14:43:49.642911Z","last_seen":"2026-07-12T06:54:15.835649Z","times_seen":4,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_50b16c20-cbfb-4c4c-ba8a-249055c85af3.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.847Z","timestamp":1783304819847,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_50b16c20-cbfb-4c4c-ba8a-249055c85af3.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 18518\r\nConnection: keep-alive\r\nEtag: \"aa3d869158cd9f4a691ab5256b366ce1\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:39 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ppVNqbpkZ8kFJRpAg8JpmSs28hiifu0qDif9BIBnjnRirG0N82S5W0GWDa3iAOIuFpFW1bqftTju%2FEv9jecK6VqI56fXVn3LN0n7NSIw%2ByJOrrbX1nnnCvf0Xi%2F16UhY6Iq9HqDVqqPrcZHRLc3BNM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141710\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da745e8b486ad-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354019e74e4e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18518,"size_decoded":19671,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa3d869158cd9f4a691ab5256b366ce1","sha1":"46a9a87daa6c88e7055d5286cbc30e5a30bf34d2","sha256":"cacdf3b3bb35cc05bcdbadac055a705917d7ef2e422198f081e2482ba755eb5b","sha512":"d791059c03544004a3eb112223fdc6f44828e2ac740fc99c53aec39007ab4af73c6bdc3af541c57cc2805993d9f938bc1aaa46b1252c28c55d68fd135ac89ead","ssdeep":"384:+/SrnnTDDsTm3Dgi6CrYqpWrWrM5LW7A1zNb+EIItGXfeXCq:+/SrnzsS3zJiK81hS4","tlshash":"fc82d07a08094e73b16953616be5e8648b174f58100da7bf3d0166c9e32de6f74b80bc","first_seen":"2026-04-24T23:10:16.832516Z","last_seen":"2026-07-17T18:50:30.447713Z","times_seen":655,"resource_available":false,"data":null}},"time_used":1490,"timings":{"blocked":1184,"dns":0,"connect":0,"send":0,"wait":302,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/img/system_2.e0c841e0.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.171Z","timestamp":1783304818171,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /img/system_2.e0c841e0.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2f28f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nAge: 137734\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35402337509e\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193167,"size_decoded":193374,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"60f811ab77928bf5939ee250c9ffb122","sha1":"33e5e99db67e35a4f87fd66a8dbbb824ec039246","sha256":"7b77e81d75aeb6c14eabd0bc2d3986c85b3cc14d346cc6b9a6841978b7a7134e","sha512":"dd813baa955cc7fb93b094ea013a01b48fd8b4c4b33c0464a04bd889edfcba7ebc1420aa5a7ad9b1ff2da48ab6045fa373cf7a160dd6b8c5dc4c81f3ca3e68e8","ssdeep":"3072:hh4+UNWmcu0bTP0uO13H2FYpmhKDil8fawKgu5vSu9YwNRroy+R3wc5iRHx:hhwcXMua3EYDilea55KQYwNdodpB5iRR","tlshash":"2214226310e205b065f5a166da392e914f109db4849ef32be0578e73f78baccfe51a31","first_seen":"2026-01-18T07:00:48.013603Z","last_seen":"2026-07-12T06:54:15.726907Z","times_seen":11,"resource_available":false,"data":null}},"time_used":5930,"timings":{"blocked":5289,"dns":0,"connect":0,"send":0,"wait":297,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/configPage.js?v=6/9/2026,%2021:37:10","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.673Z","timestamp":1783304812673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /configPage.js?v=6/9/2026,%2021:37:10 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:52 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 949\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:20 GMT\r\nETag: \"6a281710-3b5\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304812=m2LyOxLOwCTX0S/ePHJ24Ir1tiZSv7EQhXga78ct6gMHVPbQqQOE/zyD/HmNPomHawVK0E+qUvviAxKr7Q2lOqADAYrBqBVwNqeLv6W8VVqaimSLxAo+IPU62CiGzIl+5OgsRS1fHtfU0A3O9g/LtKhsyWzMnJaTKsnKxElrbCXoNPCfUfbdukfJ6v1Ay9Q8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f353ff914505f\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":949,"size_decoded":1622,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (917), with no line terminators","md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-07-17T18:34:30.689311Z","times_seen":2410,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/hls.1781011881923.e2564250.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.695Z","timestamp":1783304812695,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/hls.1781011881923.e2564250.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6d374\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f353ffdaf4050\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447348,"size_decoded":120517,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fbc8180c513457c408ac636f0520bd80","sha1":"75e0852addcf99be60c5f9c21fd5a6ece00310e4","sha256":"2671321388c721720b1957e436d203ef5a4f61d2a0a10baea60333526fc422c7","sha512":"2334e2099976fe885e3f2b9a7c54b5759800b7ce45562aa09d2226b1011ad2aeb2be89f8cce7d16991278d78e66af32763af58ae06c43c2c304968bf50ca0a53","ssdeep":"6144:UckAO+G0MgADb9d+yGzAHFVtMcNAsIK2uOiYEqB424cRjvyIGCcbHmVf0gBhL3HQ:afBnlNT","tlshash":"1394f955fb5072bc5f6ba256a42f1126933e1892204c9c74f27afda19ef0984f03d9bc","first_seen":"2026-06-01T22:17:32.419527Z","last_seen":"2026-07-16T17:14:01.607129Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2238,"timings":{"blocked":1143,"dns":0,"connect":0,"send":0,"wait":486,"receive":609,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/57530.1781011881923.ed8b1102.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:55.506Z","timestamp":1783304815506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/57530.1781011881923.ed8b1102.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:55 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-8bdbb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304815=UPV3Ih/MWfTNBFxB3VyHAb63HgZwFJAcLhRrXMmQWY/UTYil2hSf1FX6j/wzA70QDi6/7CZuasu+35X0LKK13TGeYkmkM0jDZxPXXxgjhVAGOXzY15fvx+jOhYEo6/yeqBXB9pegIhh0yah8ZK4LFNtmIrtd0IrinQIPxCyparHMM1PBSq7epNqV6TlPhjbA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f3540042b506c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":572859,"size_decoded":152632,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"3ac960a22cf01fe7113867220980c6ce","sha1":"1ea53c8676b82c7098de92f76832286b08c890bb","sha256":"7a53c982a6e9f8b5e5cc351abed7944bd91d198d2ff8c61e14a34f07561d4924","sha512":"86a060d3d5ab5fd417a2f0a142ff8a715c1ef3b2df0c36ab775af5af13ce3630ad8c293a928d08bdcf037c0001e7d0d986410d82fcd6f9023ce01296c8425a8d","ssdeep":"12288:U5kuoy+RfKgD+Ng2xLU4nYdfX4fAaHu7zuitp7xagoXShH8Qzo:+Joy+RfKgD+Ng2xLU4nYdfX4YaHu7zut","tlshash":"85c41ad0b15072b9a55a82b5b73524b86027490950c99cb0f1f9af68bf1134bff6acfc","first_seen":"2026-07-01T01:07:30.823632Z","last_seen":"2026-07-12T06:54:15.743987Z","times_seen":5,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/home.1781011881923.a94e73ca.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:55.539Z","timestamp":1783304815539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/home.1781011881923.a94e73ca.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:55 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-319eb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304815=UPV3Ih/MWfTNBFxB3VyHAb63HgZwFJAcLhRrXMmQWY/UTYil2hSf1FX6j/wzA70QDi6/7CZuasu+35X0LKK13TGeYkmkM0jDZxPXXxgjhVAGOXzY15fvx+jOhYEo6/yeqBXB9pegIhh0yah8ZK4LFNtmIrtd0IrinQIPxCyparHMM1PBSq7epNqV6TlPhjbA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f3540044a3ac2\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203243,"size_decoded":60718,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64174), with no line terminators","md5":"7ad9af47a2c0c93f65e42ff84b45dad7","sha1":"eed3b4bd1191c75416f457ee41317595880f8635","sha256":"c9d64aef33c7a35945a5963b08b2bc3157f403dc91a5c9c9463c82a0d4075af6","sha512":"757a63f9b96bc8a36491424f8e0ae9fd6813983817ab2da87bb3455e18b5cb5f71d5e682919941194e4a588bea925c790888e4d27f8531ee03c777c1e2c92678","ssdeep":"3072:T5daS9tSIMcewi8uJBuoMfqFf2GMkvVJuhxffj7TEOiGRlc:T5ES9tSIMcewiLQqFRmzffjAGHc","tlshash":"93141880b5f0e275575fc2a7d7371025b2271786d0ccac60e1f66b187e2879ab236db8","first_seen":"2026-06-12T19:29:57.277471Z","last_seen":"2026-07-17T12:51:04.963206Z","times_seen":580,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/18096.1781011881923.d6b266e6.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.119Z","timestamp":1783304818119,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/18096.1781011881923.d6b266e6.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-8b22\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776a19f35400e59466c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35618,"size_decoded":4135,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35246), with no line terminators","md5":"ac5be2b7da8d47878caaae404942be95","sha1":"6aa091dd8a2872faaea3b570b8b05908ab45b6ef","sha256":"3a9ef24702acf2b152e28f8191edcd0be3dcd3cc5624b8030f1974c6cd5d1377","sha512":"ce8f012d6e2bd45a1547438af8171087eefae87e2f88cf9cfa0a9537cfc50b5439e774bfb1babe8409c01608b1faada843655e3284b86e0a579baeb1224cabb8","ssdeep":"384:8Zq7GHHnUen7Qt+OY3VUwrGzLD+/oT/9Kb427IK14qITyOYfOUgOsJz6X:V7GFY9KZ","tlshash":"72f2a20dcb8cc2ddaa211f9c431d90a00690e8f7e58699ec95f6ad4ef93c54e325fa5c","first_seen":"2026-01-10T05:58:33.940614Z","last_seen":"2026-07-12T06:54:15.658702Z","times_seen":22,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/e47329d8-e85e-4dd1-ba75-b49ff52198b7.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.094Z","timestamp":1783304819094,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/e47329d8-e85e-4dd1-ba75-b49ff52198b7.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nEtag: W/\"818e9bfcea16dac5835837230918913f\"\r\nLast-Modified: Wed, 28 Aug 2024 20:32:43 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 137735\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgKhRnbwcO1dOxCrfWFdtGwrWoUoRR%2FXLqFpzzpVzfVR2m37kDEIPGt2CodtftUo1mVz9fQ14XfyBB5fd%2Bsoip6%2BTmn5JtPtOOgkbEjC1aLKWBblUXkf8chx%2BtBsAVDBZlsmOfOP7e%2BZMhMLBmduJNQ%3D\"}]}\r\nCF-RAY: a15e085c4a108129-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354022684066\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13253,"size_decoded":14487,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"818e9bfcea16dac5835837230918913f","sha1":"8c4edfbaa2f4daf030c9085b7dbd715a8a68366c","sha256":"1eb3a57d348a5f1754497f73ce7f06963fc3de33ff17ca475680122d9f56c6a9","sha512":"af266ef122f60b793fa9bef055d16e9fb26d9e05ca2ecdfe38e964bc92699268cd7c7194f5e67b935cfcb05633b90a93699442686edb42bfbc19efe5dc2b8182","ssdeep":"384:yj3mqgdOv0prnL6xBgzCPqgoFFS4Auq8hH+IjZfRl:GWqgdOv0p36x6zCigoa7nEFtpl","tlshash":"5652c14354c8782992630933f8fe625188a37fd7694fe5066eb979a082332ff539c0c2","first_seen":"2025-11-01T17:14:36.302545Z","last_seen":"2026-07-12T06:54:15.71319Z","times_seen":29,"resource_available":false,"data":null}},"time_used":4461,"timings":{"blocked":4158,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/css/chunk-common.1781011881923.90261a1c.css","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.679Z","timestamp":1783304812679,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /css/chunk-common.1781011881923.90261a1c.css HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-34c8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f353ffa425060\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13512,"size_decoded":4720,"mime_type":"text/css","magic":"ASCII text, with very long lines (13512), with no line terminators","md5":"18db28ed82e6a8aa84b4ca311e8effc9","sha1":"19d1c3f13ce483b564653631f2bd6a340017a84b","sha256":"8d0fd3816e0960390ac6c9757e98a97c96597871468e74a8dcb81f170ad98303","sha512":"dbee6bb335fe964df137f44bbd9752844d5baeeec889ffb5c21c9979a8ce51018f81dadd4a66b2016a30874962c6e4fd2243325fa60958d45d06f34bdee72b87","ssdeep":"192:4dQK/X4cBY4mZGX1lsUTLA7gYER7/i//LN4hHSQZA2VxM2XwKjv0:M8oTGER7/i//LihHBrxP0","tlshash":"c952a631d634b53ce57be226f9d09adc6024d417e2730baeea643b3ac5ca4d215332c8","first_seen":"2026-06-12T19:29:57.231975Z","last_seen":"2026-07-17T12:51:05.08482Z","times_seen":630,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":298,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f8306425ea0731361b69124f50f76fda6f8ad1e77e465683107b3","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.058Z","timestamp":1783304819058,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f8306425ea0731361b69124f50f76fda6f8ad1e77e465683107b3 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: RWjUI7PtWXU0qgIDEhYvfL/zmycuiE1+J3uzc8vWNVxTMWe2YEfFkwUYrwKxcgBQ2sdbqB8xLF5cCurS9p6eS9E1yDFJjDYZt8pesnvMJZRARTrw5XhS+rNM7+VodmCpWO+XsjoQ5diwroE0RWxuKJruGpKpZBDJx3hS2YOvrvY=\r\ntimestamp: 1783304819055\r\nsign: n65f107r6033796p\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: YAJ3PpYPibWJJJpchpFrDcrBdFt6tkHZ\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:36:59 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 06726d37c95f42118ad797dde150edd0\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354012045082\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127,"size_decoded":1160,"mime_type":"application/json","magic":"data","md5":"f686df7269ef2b7477b51fc91906ce72","sha1":"9290d922b79a95d9cd6f998a98068f109fbca3ca","sha256":"0a7ea88bdcfb7729e747c9b5ffca9a99275df7b457b4f0e7f8524540d755e044","sha512":"6f30f4c4d89ccbf1c7192fc9a6a5eb81dd479a35838a4b4c336851dfaa7c715870a968181242071354023db701b4fc01a1b4ec251eea2fdc4c0daa17a41783fc","ssdeep":"","tlshash":"49d0c0bb5b3d4fac8bf033f03035454247f11388d6b0154886bace7b26e5c84109c80a","first_seen":"2025-08-09T20:01:46.120305Z","last_seen":"2026-07-16T17:14:01.593616Z","times_seen":100,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/public-resource/holiday/23/apng_top_jr.png?version=1.0.0","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.825Z","timestamp":1783304819825,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /public-resource/holiday/23/apng_top_jr.png?version=1.0.0 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"037bd284278a3732fd473b95a97b4541\"\r\nLast-Modified: Tue, 26 May 2026 12:06:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jRyzblbMXBgQq2SkL40JzhHH7GC0hnHWjJWzVkHr5WJhYY0hhjmaJMDlrOodLtryoXyHDaMQPzwLsbIFTMBbrDwi1vq18Bu8V7GZ27IgTCmK9O3TzZKFAjJZQdm%2FsD0b4gfOVVGoKinYDx%2BVVNzFIyyoIsWj00crHwt\"}]}\r\nCF-RAY: a15e085f09d51483-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nAge: 137731\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f354015034799\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":381776,"size_decoded":382876,"mime_type":"image/png","magic":"PNG image data, 330 x 130, 8-bit colormap, non-interlaced","md5":"037bd284278a3732fd473b95a97b4541","sha1":"f3281286aac6e24ad859c6b9128a44efd43e02f5","sha256":"c7ee2d5e1b4c7fc2ac2d8cdcf8a25379eb976f7f65c4a44123a2fd95ff9558bd","sha512":"b4508c2077a2183952dd75794478ca4127a413594f989943ac5e242954d8db76cb1b263caf60696741391139d6af01a11d32e42311c69c075731c774466aa634","ssdeep":"6144:kRtKen6jLkYQKoPkVWEF5nMpm1mPh6wNZ4Dh1J8e2GHMyryA3/n5azd8:kL6jyTkAE7Mpm4Ph6wWt1jXryA3/54K","tlshash":"218423da94b37b93cf2f0a30d4955b475a3b90c2ea4403c2dee48de05af9615797720e","first_seen":"2026-07-05T14:43:49.684656Z","last_seen":"2026-07-12T06:54:15.717705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":1168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_07a2d840-d1e1-4217-9d3b-badf80b88abd.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.835Z","timestamp":1783304819835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_07a2d840-d1e1-4217-9d3b-badf80b88abd.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 77072\r\nConnection: keep-alive\r\nEtag: \"81934df1c48f153ec91149ba3c3beb37\"\r\nLast-Modified: Sat, 06 Dec 2025 06:20:21 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgciduaPnOoI8BzgnYv2AqQ%2FeJyYUiWZuQl1rvthptw1kuUwCTp9ed2yNzDiXjLGs7FAbZl8JIrEN3lIbvUqCP6kC20KGoETsW3MWBKO%2BFMc8escYwy%2F8h4wsZildA%2Fbz4GiAaG86TFjY4AstX%2FF0AY%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da747d9916e3f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35401778405c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77072,"size_decoded":78229,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81934df1c48f153ec91149ba3c3beb37","sha1":"263dec3db6f316ad859fae46f18adc5cbb9e5c61","sha256":"9393129dc2d2eb90aa6b0e3cae170e77eccc785d4fca575804e1d25a2bee1383","sha512":"9d322a35877bc71c33fad174b47d6377f214fba0f11bc6a6180c5032765a9f4332354a4e6192a33049ab7a20a79ef58804de08d54098f64d8511c08b50e2b6ca","ssdeep":"1536:vow5Jv2vmGSpZk1IdIwZojJkcFgxPAifiE3TcBUPpCoS+LsAEZhO96:vowCOGYZk1w7q+PaE3T8uS+Lr2hO96","tlshash":"a573127b5c2c0bb32fc676c6e2e9b5c82cc817b1478556cf5b7958af95a4311232c02a","first_seen":"2026-04-24T23:10:16.861629Z","last_seen":"2026-07-17T18:50:30.544209Z","times_seen":671,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":574,"dns":0,"connect":0,"send":0,"wait":304,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202606/_webp_size1298x1156_317f68a9-d367-4c78-837b-bba9a02cccbd.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.840Z","timestamp":1783304819840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202606/_webp_size1298x1156_317f68a9-d367-4c78-837b-bba9a02cccbd.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 104872\r\nConnection: keep-alive\r\nEtag: \"7225fe319e0063733dc28dc3cc064ba5\"\r\nLast-Modified: Tue, 09 Jun 2026 11:46:19 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75506\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJZUUDJcUXeyEGGAuv3yv%2FiURRIbui9h%2BRlQKvbMiA9UVab3NiGDf01cOC2NVJIt0xHAaUIrBnSx1hogEAha2unU2mGa7mEtIyvEulJio1YhTt%2BrfVXbSm439sH%2BhFVaLDcCgkCtUFLfzpbedggGl80%3D\"}]}\r\nCF-RAY: a163f78ddb3ce2df-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354018bc405d\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104872,"size_decoded":106027,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7225fe319e0063733dc28dc3cc064ba5","sha1":"3ace9d566c5ba5d7547e966b52a7718aba214871","sha256":"8512dfacfdccfbee2dcd4b545bfcf151229cf83d6f5ea6d4762d9fa1dbb52724","sha512":"6fc35795ed02e0af6d9e8593948460d2d159871ef64d68fcdb6c3849e1d04e095df2f083e371ad185dec337852c56fe8772e51ba5c23127db88ca78d2b887c20","ssdeep":"1536:Lbtnypjj4aiFU6CcwUrT7oxzAjzIVbxV6FscOAlMIUZdH6/8JEfuI1Q/QY:J8jpAU6iUn7oxzAjzIVbOVlhUZdH2T1","tlshash":"47a312041207b12ef9eecc769e4f92c16d190c357cde1a676abb74c8e206e174d4e8ac","first_seen":"2026-06-12T19:29:57.257753Z","last_seen":"2026-07-17T18:50:30.440246Z","times_seen":326,"resource_available":false,"data":null}},"time_used":1225,"timings":{"blocked":892,"dns":0,"connect":0,"send":0,"wait":304,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bdd30f19-a4d8-4eb3-b2d5-d24180d2e353.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.853Z","timestamp":1783304819853,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bdd30f19-a4d8-4eb3-b2d5-d24180d2e353.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15228\r\nConnection: keep-alive\r\nEtag: \"6a267f5e09a632be650a3775bc739a4d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:16:53 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75507\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0K7d2pG6vBXPha76maaiIXdU5oJYL5A1XaJPxXU0fcf0vXP1LF3DROYf%2F251WAjT9ptMV3XTxlO%2FpFzI0lCqnS1UXgESqV3tfCByjWN1nwWbgN96VVZWVYSpi0K1YvIAeNUaIvNwl57npXrXMT9ABsc%3D\"}]}\r\nCF-RAY: a163f791bdabb929-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f35401af0479a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15228,"size_decoded":16378,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a267f5e09a632be650a3775bc739a4d","sha1":"5289878ed6bc3c5b6b06a9986ec15a3c6946fcc5","sha256":"88151c14f52fcf8359fe0a5b86c3a14bee6df5f37cfccabd75a86a559e3737aa","sha512":"0c3f82afc7a20b69b90d2ca8d6d00e07c5c097353a5a81024069fb7ed724ee50c335e9fed0860cc92d1274939c0476cbf8cc49b058813775df45f96a3028af3e","ssdeep":"384:1jnjswfCwfOcnPcxsiO8JvyITPiO3BBBJRqn0Rf/dzVPC1D:11fCwFnUl1uwRqnc/dxa1D","tlshash":"e862c1c96f1cf1dabc9c9d3c7a944d369d0c4472a4d804e980b69d2bf98eac78501f2e","first_seen":"2026-04-24T23:10:16.724806Z","last_seen":"2026-07-17T18:34:30.612331Z","times_seen":658,"resource_available":false,"data":null}},"time_used":1744,"timings":{"blocked":1442,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0fa85f10-2205-44f2-82c2-66bd141c7d57.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.888Z","timestamp":1783304819888,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0fa85f10-2205-44f2-82c2-66bd141c7d57.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10174\r\nConnection: keep-alive\r\nEtag: \"7ac42d17bfd5a06e8fc6a329b7018939\"\r\nLast-Modified: Tue, 02 Dec 2025 15:07:04 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ld6iOAuenKIKOsmc06TbBUJ7GrH5WYv%2Fy9IjGFlUIatwRTqKeqO2LLG6Cg9rQa%2FA2dSbsDkbChPeHgtXtPlv9mS5F2%2B200ua0nF07%2FFmVwR4tHeJ12ENkyacty5OnnbzVyYQG3MJh4BPMAZefHl67MM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da75188e1855d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354020d75098\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10174,"size_decoded":11329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ac42d17bfd5a06e8fc6a329b7018939","sha1":"37f26ed9d40765d2f0a2436038a6c772d654e316","sha256":"23d5a3a14c318b6982e98a0e9f7ae7eb6f3658fe842beef7f26850121f84279c","sha512":"8c49c05d03fb49bc2980047e98e2d1759192aedc89ff040050b1c8e007b16007f71bff0f17eaa3584bef6c0b0db5a52b68009463bd3dd2aa43cacd757ad7367b","ssdeep":"192:O5IkarrboesyPUh4c/gp+sIR6RxWiH21vZgiClgKV16Lq1eM9h0K+B5pZrgVWPWb:5k8rboesiUec4p+sIAYkgK7eQ09B5pZz","tlshash":"3c22bfd259d648a4e1d3d63229678a89d3bf3d0f0309b6d4acec74cf9846dbdd4d0a41","first_seen":"2026-04-24T23:10:16.755505Z","last_seen":"2026-07-17T18:53:23.00704Z","times_seen":720,"resource_available":false,"data":null}},"time_used":3247,"timings":{"blocked":2950,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_b1b5acd8-3851-4b06-8e10-d549f7f09d1b.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.891Z","timestamp":1783304819891,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_b1b5acd8-3851-4b06-8e10-d549f7f09d1b.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15438\r\nConnection: keep-alive\r\nEtag: \"a1349a63a048224ad8e87814e87bb73e\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:01 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1obR3zXkiWRSVZAU7Gb05S%2BH9oRpWN4mx%2BCBYfWPWqH7%2BSBBTrr5Clb1QCETjlj1QyTgaZlu91mlv%2FPwCu3wqlqnrv9V5PxB0GHnIU5xK3fWD%2Bu3tmjpjVQ%2BBfjCFQQVdKAakDiH%2BNHTJt3ep9DjMs%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75507\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f79dbcbf84c3-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f3540211c479f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15438,"size_decoded":16600,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1349a63a048224ad8e87814e87bb73e","sha1":"0e04bbeddf14327f501a7d2c6df6e05795879d8e","sha256":"07dea36c21de6e1a3b038a16fee3fe652275f33b1757c12ef30396e4dcabd2e8","sha512":"6e92d8f202db95f03407b4594b217cc15dd52e187fd69f779d45407cd9644095929c9a657b49fc030e7a2f4b1dc1f92cecddbdf72ceddba23cf33b759b782c11","ssdeep":"384:8033ZoVI43DY5WxPnFK9OMJuFUzYc4Ig30k8E2:PobD3xtwn+jc4IgV8E","tlshash":"2d62d0402ecaf0713ba1781ebb7df58804b89937b45a724758b70471b66d4ae13964f3","first_seen":"2026-04-24T23:10:16.871482Z","last_seen":"2026-07-17T18:34:30.645733Z","times_seen":730,"resource_available":false,"data":null}},"time_used":3318,"timings":{"blocked":3018,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_c0a34e2a-97fa-40dc-8123-594806696886.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.848Z","timestamp":1783304819848,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_c0a34e2a-97fa-40dc-8123-594806696886.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13338\r\nConnection: keep-alive\r\nEtag: \"c9888ec9eb68e23af8c466de36aa1374\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:14 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hrO5bY8v1tOBgrQGZpl5gjMkuFLhYcslL3LDDFxm1U9R4J58rz%2B9GXY2JwRBH1Y8n0HKapJZMpM6sS0%2B4X%2BMIHfMkQ9A%2Bk5bdGUlJZhWSHdhscJJ1774ctDf8kB9HkQNiXQuKnhL1VeOg8hdnsbMQE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74ef9e737d3-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354019f23ad3\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13338,"size_decoded":14493,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9888ec9eb68e23af8c466de36aa1374","sha1":"9f390e12dc110576b1f87b5705379cce7c8d821c","sha256":"8ff81de4e5b37505789b23808f901d64ab7d3dd91a813438ff0c762971c445c2","sha512":"6234782d00cacdac98ef61238100e1e4b6d3a44b462264cddf34237f74cc589576644b8b1a8e1e309c0acf400d17b899dad9717654f487f86a28224d4e2744e6","ssdeep":"384:sfQdwsWMYKGas1GU33KVwYl/0VPxDNUrIJeYcsFAl33l8Ta0V+t:vdTqGU3aJB0VPx0IJ4sFApWT5q","tlshash":"f052ae4ef297816890419138d0d51cb6583550ee8ffb29ad2e78e7c9630173ee4abb3d","first_seen":"2026-04-24T23:10:16.827229Z","last_seen":"2026-07-17T18:52:46.894849Z","times_seen":653,"resource_available":false,"data":null}},"time_used":1491,"timings":{"blocked":1190,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/40621.1781011881923.7917fc2c.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.052Z","timestamp":1783304818052,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/40621.1781011881923.7917fc2c.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4ab\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35400e183ac6\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1195,"size_decoded":1268,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1195), with no line terminators","md5":"e1524ffa63773d045b5ee1ef23ff2cb4","sha1":"99818e75bc302a7fb358b88c8daa91b9ecd039e5","sha256":"b5e9948cf2e7405662160113ffec7d4d382653a0b0ee74a4677113dd7f302699","sha512":"a1696d383e5596b95cb3fe65bf7b5958ba114c22bf38d5486798c80ccca1b3b0c63a0780602d20cb87f37dd1b707911f405568bfebac2a52e6a8ee0b1c0a5389","ssdeep":"","tlshash":"e9210f69f6a17274537b2aad463f2a8bb1774561e9edf098d450e6a02cb430c4432909","first_seen":"2026-07-01T01:07:30.832873Z","last_seen":"2026-07-12T06:54:15.679427Z","times_seen":5,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/public-resource/holiday/23/icon_btm_jr2.png?version=1.0.0","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.811Z","timestamp":1783304818811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /public-resource/holiday/23/icon_btm_jr2.png?version=1.0.0 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"3d25771bc9bf76304452411f24cf285b\"\r\nLast-Modified: Tue, 26 May 2026 12:06:44 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hcwbvmJ%2FIzp299v0UKydt7q2vbY71Mpq%2B3h2TNIWy4jZvgJtX8AFsFaD1lNZgJA6MURtTK%2BkqQzp8w6nd7oLeyKg73jVmSUi3eewdii0krM0vmwJW1UF%2FcCzM0SABo4Q1cJqDRGDRazD6C4I5rGMBL0KTlOupBfjPnME\"}]}\r\nCF-RAY: a15da6057bc48475-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nAge: 141763\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354021a53ada\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36158,"size_decoded":37354,"mime_type":"image/png","magic":"PNG image data, 240 x 180, 8-bit/color RGBA, non-interlaced","md5":"3d25771bc9bf76304452411f24cf285b","sha1":"39360f88aa6af7ca09f23701e474fc3e5173a824","sha256":"70b13d82d3d6d923dff702d51aa42403bb53ab0806c0d811aab2076383db4a4f","sha512":"2cd45f6d1560614c946592c468a5da1bfcdf7803936ddba0a6a2d07e8b306bebaa8d165eb8badf2e17d628043f5fc5c149d1fcad9ff117df89639c7e55765f2a","ssdeep":"768:TL5FFXaE36tTCEPOhGTWlRk3zNW942OdYh+IxVF8o2o1xr:f57KaKrO0TWluNW9x9xrEer","tlshash":"97f2f1226ea55f9d9c7893ad056d5e4c8787472fa7a81fc1801a447b372319b8ecb30e","first_seen":"2026-07-05T14:43:49.765858Z","last_seen":"2026-07-12T06:54:15.836504Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4564,"timings":{"blocked":4248,"dns":0,"connect":0,"send":0,"wait":303,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_ac59a48a-b78a-4a12-ac3a-190673b67906.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.823Z","timestamp":1783304819823,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_ac59a48a-b78a-4a12-ac3a-190673b67906.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1122\r\nConnection: keep-alive\r\nEtag: \"435602520a5d82a59e051bdf2eb6f6a8\"\r\nLast-Modified: Sun, 09 Nov 2025 13:40:02 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1AhLXJeA81InpfOa29IzWSPxeRX7ugGH%2FwbDfDhRgVaEILeClviCNc5FyMAhxTtvuqWgq97pNznLjHZl8gFEHbSd1KkfqRrokm4gdDtifIw0SHxq4y37z38Wv35uuA%2ByIX1rXj%2FD%2BMQ4Ebso9s%2FdGg%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 52626\r\nCf-Cache-Status: HIT\r\nCF-RAY: a1662621edd404f6-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354015013ace\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1122,"size_decoded":2277,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"435602520a5d82a59e051bdf2eb6f6a8","sha1":"860c2945fc86e2e96fb26c4a57901c0344a43b25","sha256":"26c4964465575d28162a72415cab7df5d0547d38ccb82415de8a43a084e59817","sha512":"d4e29ddc5e2a7e87516af32949b94e9f6bacf7a096cba8dffd9961c3af18eb6a0733099e2d53f7f9bcf272c55675f3a7cb37b6085d583daa3b1e3c4cd7e8112d","ssdeep":"","tlshash":"4921c6189a555098f667f21c78e7e4b14a5d4e630848150010a7193189011bbbbcf9bc","first_seen":"2026-05-02T01:47:15.959072Z","last_seen":"2026-07-12T06:54:15.837238Z","times_seen":10,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_ce6f5a12-ce60-4931-b7a7-3cfa94c956bf.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.855Z","timestamp":1783304819855,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_ce6f5a12-ce60-4931-b7a7-3cfa94c956bf.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11070\r\nConnection: keep-alive\r\nEtag: \"9d6366dada143310062f824e5f7dd46e\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:23 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fu1RXvTcaVDzNeklWGQeFZ4QqwQGlxi3nEeHgL%2FDZTQQKt5ueuYVAkQOcQv0Yzt5PWXcBfT4GCj3m1vDO5KNX%2FnegNx8baUWf9Js1C4yOGJ4QzF76byYX7%2FMkvzMy4nni7%2F5Z6kpvfLPSiTg0Z1Q040%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75507\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f7928f0ab46a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35401b203ad4\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11070,"size_decoded":12226,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d6366dada143310062f824e5f7dd46e","sha1":"def0e81d351b0b1c8cec0603c0dfe6955438d059","sha256":"10b2cb9f1220e8ece8b47ee11eae49d1c947eec915c13165c241a59f1c8105e6","sha512":"afc9daaa38494954719bc7ef5f87c1bf6020e2d098b690a55d7f6ebcb26d463f6cd890941446e0c4cfc64771e8e7f74035e362c347f17818b1ec2801a2639f14","ssdeep":"192:6HWhsuhcANwPA6DmRamGZOxPCHE775EhPDR4oETR57jX:kWZhsDG8Olz75u7RsTXj","tlshash":"fa32b07de235930096a34cbecb5be3304bba629233b0b58cdc459df12597cb42e70926","first_seen":"2026-04-24T23:10:16.712242Z","last_seen":"2026-07-17T18:34:30.520052Z","times_seen":646,"resource_available":false,"data":null}},"time_used":1790,"timings":{"blocked":1490,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/59490.1781011881923.42744005.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.701Z","timestamp":1783304812701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/59490.1781011881923.42744005.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4f43b\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f3540000c3ac0\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":324667,"size_decoded":102195,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9fc1f2655dbcc496f7d2b9b19cccb4ed","sha1":"d6d2131d90cc605cc12875c65ce702f3409f5594","sha256":"2c566c376d0f6cb48708c08f8110adaab1032b9f747a09b77f47357cbaf9318e","sha512":"d3d7ff6bea473171c80b7fb461989c413ea17a6cbcb4e5b3e40a5e4e208ef06935c122dccced2803c2916579faff0985b27ab2b6812286fbf4152d50712c939e","ssdeep":"6144:x7tBwgttXxyUtnBYHo0L8sDI9/KCytZLyfCBnmMzIroKj7:ttrtnBYHo0L8wI9/KCytZLyfCBnmMzIv","tlshash":"95643bd0f39171bc8b9791f2761b1039a06e0951208cace0f26dfa647f61558e97faf8","first_seen":"2026-07-01T01:07:30.839391Z","last_seen":"2026-07-12T06:54:15.808138Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2576,"timings":{"blocked":1747,"dns":0,"connect":0,"send":0,"wait":403,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_392325e1-efd7-4953-83f1-410dea55a03c.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.845Z","timestamp":1783304819845,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_392325e1-efd7-4953-83f1-410dea55a03c.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13178\r\nConnection: keep-alive\r\nEtag: \"38581a2c1fb9355639ffb5a31aa0642d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:28 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3s3YZTMdf8xboJlOeCsFQDBsm6hPawb4BUGUHpj4r2PZppSbJZ2tnPNe047%2BWUfImBky9p58Gn2EUJ2J7se8FARDi2lKMxE8Bntc0BQnpW46lZxYDZGPMRSJ4Ha5wqKHqRaGgQR9v3oAG%2F0NcTCaRWE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141710\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7485808dd5b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354019c1508a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13178,"size_decoded":14329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38581a2c1fb9355639ffb5a31aa0642d","sha1":"dc4eee50f114bf0f120b50766fd207ec5522e9dd","sha256":"88d44a033517e73fcf97528b670ccfa16743d61b2c0c7deca8d7fc247e2595d3","sha512":"e1757677642582409db9344003b4c9454757755bf157f2491aabdf2b1c454d3d0073f4b0012faa1e9681397e7004428f087b8a1e338f3812137007909ed9ed89","ssdeep":"384:yPsoyVYHcsbr84JZQ4zAogmntgxn7uxj8+4n:toyVUbrXDQ4UogKWlWQ+u","tlshash":"3542cf151f4044575ecd7aeb108a5ebcc9450918e63cac716493bc388ef09bf4aeb6ed","first_seen":"2026-04-24T23:10:16.737591Z","last_seen":"2026-07-17T19:15:02.224485Z","times_seen":662,"resource_available":false,"data":null}},"time_used":1444,"timings":{"blocked":1147,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/35142.1781011881923.1d227afa.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.048Z","timestamp":1783304818048,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/35142.1781011881923.1d227afa.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-530c3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35400e124056\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340163,"size_decoded":94183,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64894), with no line terminators","md5":"8325235b613820a57b71043f360e5b36","sha1":"925ff977edf9892e868d43915f93d29e6feeb113","sha256":"0c505f39a463b09ece16c213b7ead75186dcdc26d25ee02dcba5a62cc0dff7c6","sha512":"efd16c9b7ff0f806890ae77542e8c0d4e954f8c797ff21b8dcde3f240e4940ca3c6d0fe75ee2fda35bf53ff5d0eb691fa7e38cfdfa82c0f231b0cd57458fbcf2","ssdeep":"6144:N0hEyLkbJDb7w/1FOAmBm7cene7Ancbt8sbyAkKJwoSlt5MMjmlHGwwzHUY9SroE:N0hEyLkFDb7w/1FOAmBm7cenaAncbt84","tlshash":"8a742b94b290b17883af86fb731a91a1d24d0e9460ccace4f27e6e407f15746b8775ec","first_seen":"2026-06-12T19:29:57.248751Z","last_seen":"2026-07-17T12:51:04.981104Z","times_seen":580,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/common/usercard_vip.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.181Z","timestamp":1783304818181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/common/usercard_vip.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-97d\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nAge: 141824\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354014ec4e4c\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2429,"size_decoded":3160,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"74a0be63544159603bd852171f9d1565","sha1":"ea2c4c230d2d460cab94c5add34e88ee4576eeb0","sha256":"769e2f5382d8626445534d8100ee76eefd8f635c373a1a2981f83c3dfbfad2dd","sha512":"6d775c39b1e52b08d19ee749d71501c58a9cf933458e042801fc5dd952414240bd0715f453e5d6b857b1c4fbb687bffc236e363190dc882fcd3f9fa8a7db746b","ssdeep":"","tlshash":"02415fdb439c5d6ec52a3c3dd904fc16781b349e48f422c41db04a9474989db3786f75","first_seen":"2025-11-01T17:14:36.300709Z","last_seen":"2026-07-12T06:54:15.826872Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1908,"timings":{"blocked":1616,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.201Z","timestamp":1783304818201,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: bgqvaS6IHnlnXNZQCz8K34FMIeXG337ZdoswkgjmELh5I7D08F8gwcFSo0e6iIZp5YTp1vWXWllpWHsGoajUKALZ3knqyiVQlqcNEiJBCKS2aKaHOD2mLDfO7jMt8opHX27ZaWU1j4BC4ssZLSSY6+balXXYaCgCza3PdI10bOU=\r\ntimestamp: 1783304818190\r\nsign: r687v446qd6n4d19\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: YAJ3PpYPibWJJJpchpFrDcrBdFt6tkHZ\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:31:59 GMT\r\nCache-Control: public, max-age=300, s-maxage=300, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 86b8eb18b0c34121ab28c666d4364a5e\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354013a15083\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34702,"size_decoded":35745,"mime_type":"application/json","magic":"data","md5":"7c8e5df6ce1c73cf9eec84fc85b973d2","sha1":"280100b08a151604956843af505996eac46d3c6e","sha256":"60daa47c5b454105a1a5c3f5d0529ac604ee52150d1339a6bd44560f13f68578","sha512":"718009f223903c5cf99e48b33b055dc9f813977c8a83a911b5573d53a7adf3fd3b09ead1bd59201fae4064492db93eaf62cb2c4c50b56007373281a05f090c4e","ssdeep":"1536:OCGBFP/9qUGSqyhwS3TYp8CFFomyo2Ldng2S0Qt:/GBFPoUGEPYp8CFGo2LdBY","tlshash":"da33d1244302f7e0e1b6a1fa251642c45504efc1978bbce3da7096b06d9a05fb7ef9d2","first_seen":"2026-07-06T02:27:39.360465Z","last_seen":"2026-07-06T02:27:39.360465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1581,"timings":{"blocked":1269,"dns":0,"connect":0,"send":0,"wait":304,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/11248.1781011881923.e1f6c133.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.579Z","timestamp":1783304818579,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/11248.1781011881923.e1f6c133.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-57eb8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776a19f35401026466d\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360120,"size_decoded":83355,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c0ea54ffece6554702ecd697d75be341","sha1":"255162d2085739d6bd522f44fbc8f92892b5e505","sha256":"45b3be7b4d4f736b262bb3c096dab61a44469faccd8539b411629cdd09545f39","sha512":"770ec2e41680a50b32e332029d6c22126935831c82fd756e1f1d5ce5af916987528943556fbf5bae1060f99b1c442a230956b213e3c14ab10d5a76b8d144361f","ssdeep":"6144:Hbpv8K84/78+971hTnvyUVpRwekcdNtTCuOCX9:9tbyUVpRwekcdNtTCuOCt","tlshash":"29747249e3407134cf96a146402b2435962e5aa6028da964f33df55f7ff9f883aed2f0","first_seen":"2026-07-05T14:43:49.730319Z","last_seen":"2026-07-12T06:54:15.748381Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":481,"receive":545,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202507/ebd4a257-eb22-4d7c-a719-93959367b7e1.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.091Z","timestamp":1783304819091,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202507/ebd4a257-eb22-4d7c-a719-93959367b7e1.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nEtag: W/\"e39dadb3e892b554fc4004a30a5d592d\"\r\nLast-Modified: Mon, 28 Jul 2025 06:24:50 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 137732\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLpa0roQbZY5cHGr%2BjX2qNyCU501MDCluFvHTCvGGZdOEGe%2FamWhuo2r07hxAC2jueLjDGJC4cn7qTD566V8rqikGUenmmpDY7rVY%2BSqQjzWR8OZWHfSmSHb%2BLt1lfTb%2BnJdPC2xSwI6T94IT%2F3s3Fg%3D\"}]}\r\nCF-RAY: a15e0858dc8a1096-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354012254e48\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144906,"size_decoded":145627,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"e39dadb3e892b554fc4004a30a5d592d","sha1":"a3a4dabe0e1b97b47be92d03d343ab3b0e04bf5d","sha256":"192e2a476b15abaa93ebdf5d59317b5716be2056d77d5d6381e34502c5eb8873","sha512":"1e27bc63574eda324c8cd1245ab5a64f2ab2b1b3ee16e1c7a3d9392f6f6f595ba4da220799699f4c9de24f667b40e53241da0df418fa88d08b50b276ab3004ac","ssdeep":"3072:DtrbJ6WcIS2gJjrLkC6fsSC2RkG3MJJbalPE:DtBDcIS28vLHssz8jgBalPE","tlshash":"67e312b39e9533410386e1dafdb36ba61d0896c180406d2a0de9dba7956f417333ddbc","first_seen":"2025-11-01T17:14:36.281771Z","last_seen":"2026-07-12T06:54:15.83886Z","times_seen":31,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_09f9613c-2335-40d2-b577-5471880481a3.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.124Z","timestamp":1783304819124,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_09f9613c-2335-40d2-b577-5471880481a3.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 19768\r\nConnection: keep-alive\r\nEtag: \"2d77d1d4704b912fec123f836cba07b6\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:04 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbnZ1Qr8t0dRByiIjh7djqe%2BPccGH7EDKipA60WFvBu72fgLAxkN2klvZCd0bl%2BMD1loUOeYn5X%2Fwfet4vP4ta5Z86e80M1EkyjSaR2t3GBoKQTKptaSKsi%2FjOsqJg9g%2B91N3JLVZfdZ5OHD6%2BHJaAw%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 137734\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15e0864f90e77c5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f354024a347a2\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19768,"size_decoded":20927,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d77d1d4704b912fec123f836cba07b6","sha1":"e1a903e1a360f199b6a0319c7bf895a0dc45dba4","sha256":"f1c435a7536c1285a5bc5acbc85cd4ead9c967a6206d13b8041ceb0e2612b966","sha512":"5e4ee75038b1fd24792f7944691abc310cd41936b7be381dfd9e4c8e417431c67168de888f2232721b2aafcfab593a2fe6d3936e79adc830f93c64f116e39963","ssdeep":"384:AtwLX3we/523uv3HeuqX9XSxireY+Cw5MSLH5hc6qOLC1QxLPYWkPCWD:AOX152u3HFcrePgSL5FqO21QSdCW","tlshash":"bf92d0ba34675d238753c8a37ce70e70a39d8ce552986ca03713f8aa73b011d93e9b11","first_seen":"2026-05-02T01:47:15.957931Z","last_seen":"2026-07-12T06:54:15.7962Z","times_seen":10,"resource_available":false,"data":null}},"time_used":5001,"timings":{"blocked":4697,"dns":0,"connect":0,"send":0,"wait":301,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_9986c108-3fd7-4f35-9443-f78ce32e1660.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.890Z","timestamp":1783304819890,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_9986c108-3fd7-4f35-9443-f78ce32e1660.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15914\r\nConnection: keep-alive\r\nEtag: \"d455ee7db25284552aeaae58bb713429\"\r\nLast-Modified: Tue, 02 Dec 2025 14:11:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75527\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5uSCcFIuHx3YQX1T60cG6VjgHmYLvP2zv%2Bt2u4zfZ6IIdlMn8owr2UV7Yq8FkIzbdtlzqg6zLw1UEN%2BOULn67ZMbARUUMnoZB9y3QXOooCI9Wjtza2F%2FO04bKdchoMRAyFjq4hVHACiQomrGIUDmIkk%3D\"}]}\r\nCF-RAY: a163f71f8cd204bf-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354021045099\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15914,"size_decoded":17066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d455ee7db25284552aeaae58bb713429","sha1":"22ea59f69e3ce33cb693d6ab7cde1f4f64bbe6b6","sha256":"20c558fe862164c2d2636a0b3aa259515f5175835dd461e5c16689338ba39413","sha512":"bc5147cbcf7ebb167eb2a75a56c140a33d81616f014f44c4976eff4525f665957e33e6d46f946d873016140af260808658915299a2004c2964be1543126a00b2","ssdeep":"384:POdbE1lYVo0UOKUjQgxN5voCgMMZUN3GcHHZUX3650gyyY44oDMWQ:P4+6+0URmQ+OMMZUNnnZUX6jyJPoD","tlshash":"8b62b051fa2b34398ea119feefcd1d195804ce608a3e6d6a6f3cd20d96b450ec46ed05","first_seen":"2026-04-24T23:10:16.815124Z","last_seen":"2026-07-17T18:53:23.010205Z","times_seen":731,"resource_available":false,"data":null}},"time_used":3304,"timings":{"blocked":2995,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-init-1656f0b4.1781011881923.32336986.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.692Z","timestamp":1783304812692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/chunk-init-1656f0b4.1781011881923.32336986.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-21366\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f353ffcc03abd\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136038,"size_decoded":38262,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44088)","md5":"149a9a32eef525724cd200e4dce7a032","sha1":"29b091925cae6d90319391653e40685f6e6c5735","sha256":"10fcb7c4e44a141964cb31c527462c6e56f78d95c956fb02c50c61fc576cefd2","sha512":"62d80403786c13019e86e1c6b991d73cf52ff5bd25d4eeaec34ca12125d677604a269fc6c56ef301f074c42798f8e7935df623d6a0a62559d70749e53082085f","ssdeep":"1536:z2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCif9:z2twqhOIK2nCLdyACifMur06/D","tlshash":"6dd3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","first_seen":"2026-06-12T19:29:57.333908Z","last_seen":"2026-07-17T12:51:05.018981Z","times_seen":628,"resource_available":true,"data":null}},"time_used":1591,"timings":{"blocked":904,"dns":0,"connect":0,"send":0,"wait":461,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/m/index-399e2569.1781011881923.3af63572.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.703Z","timestamp":1783304812703,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/m/index-399e2569.1781011881923.3af63572.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-7aba\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354000234e3e\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31418,"size_decoded":14813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31418), with no line terminators","md5":"dc20724c56846e36ec0c5a6d71bd9cd9","sha1":"00461d0ff2e4ae7c7c9696e710f673451770884f","sha256":"d29610263458856bc7eec5c5388fdc9ab1102e33dca30cef80e5e403ed2ba2d2","sha512":"59a8049736fe4614b348873da59fa744b059298f40bc0878231f88cb1fe1603ed7570f0cade60e43811e7c9d9f286fcb252d7ad7ebc0ed7819fcd83171e66bcb","ssdeep":"768:zWQ1rEMRCpgZWd7IUML4oXTzM+AOpULa+6lKtZ0NyRCrCA5FY9AfXyU5VH:yQ1rEMRCnd7INZAOOLabK/0NyRC/5FYS","tlshash":"43e2a5e23382bdacc54f9277f22a64ecd93fc185c31fd4fcd155be9478986059a81680","first_seen":"2026-07-01T01:07:30.795214Z","last_seen":"2026-07-12T06:54:15.823926Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2111,"timings":{"blocked":1769,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/common/usercard_transfer.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.179Z","timestamp":1783304818179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/common/usercard_transfer.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-aec\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nAge: 141823\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354014d95084\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2796,"size_decoded":3527,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fc28a7d4da8153d16d27c7276859121e","sha1":"5faf7d4211a8223d87728c647093046d660abdf3","sha256":"aa5b21c4a279e6615438b372f9f8e689419bc7f87d1f02acb9d10361b3c6714b","sha512":"1a2d44286eb468a705297bab00cc18f62b03e73fdb320ef15fa4dd08c9bd28697c7eba5a81d83caf280605c61dd4c73145421eda18b3dbbfe3d875465d8e3654","ssdeep":"","tlshash":"ba514b827312466597df33a177cf2728bbf621944699b82371d4a2094bf157b80d509f","first_seen":"2025-11-01T17:14:36.276405Z","last_seen":"2026-07-12T06:54:15.652746Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1890,"timings":{"blocked":1597,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.472Z","timestamp":1783304818472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: AKMR/mx6rAow7DDF4GfF/22aemRsd5v2CBhWFnbsP/Vo4gwDv8eHfkq7eLAZW1Z8dQOiE9+vGXs9vpqLxqGdjo60LXjAUcOrRKp8Y0jRscN6+6WRW76OnbbZ23aOi7h0zIJ0mB4yL3M0zba8fy5BX3XGS4e2xOP8BRWVPg+iKyc=\r\ntimestamp: 1783304818465\r\nsign: l35g573pf3l4a91p\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: YAJ3PpYPibWJJJpchpFrDcrBdFt6tkHZ\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:36:58 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: a593e97c63f54b58aec76b04129a53bc\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35400fba3ac9\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6691,"size_decoded":7724,"mime_type":"application/json","magic":"data","md5":"6eb8f0e9723833bbbc4ed519266af412","sha1":"f3991727c92924e072ca63c038febf309a006768","sha256":"574fc3e072defcfc27e577a5f0ae6a34b7b10ecae5c06456065dd38f3d08bb9b","sha512":"6e9ed2956fb270a2c63c70594e2be20437db9c8757564f73d4ee73d0023dd0c4f9c26ba607115bb01f0db8344f0ea3312ed2fe5e0f0074fd77ef47bd0bf0016f","ssdeep":"192:VxXaHYhuBHWN/DxxL4jiwSGv3VY5rocHrLI4irw9bdWagTgAGa+:fqHYUHk/DxrwSGv3VY5rTLw4dWa6Ma+","tlshash":"ad22af974b52d7a026cdd5fcb1221cc1299fa2cc40bc9bd5d37480a42eaf750b5dc4b5","first_seen":"2026-07-04T20:42:08.510409Z","last_seen":"2026-07-06T02:27:39.366403Z","times_seen":5,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_aa2a4724-288d-4252-82c6-453d0458d8c1.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.877Z","timestamp":1783304819877,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_aa2a4724-288d-4252-82c6-453d0458d8c1.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 49050\r\nConnection: keep-alive\r\nEtag: \"bb2aa8a4e812ea372888371e3493b542\"\r\nLast-Modified: Wed, 10 Dec 2025 11:52:08 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35z64ZFEwRHUtiqRz%2Bny8FysannlsoIhpA58adF3mjmcggZ2FwJNpbqFJ88pyeFH9bOKVmi7EsLRED%2B9zuaN4wwmJtN99j3BCUSeWbfiiHM%2FBkgIsYQutHYvaiNbdyt2DJl9CIETJ7Ho2eX5w9JNv3M%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141711\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da747f83b383f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f35401eb3479d\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49050,"size_decoded":50203,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb2aa8a4e812ea372888371e3493b542","sha1":"4a36a3e778cd1cfaa8cbecc34e70d024963106a5","sha256":"fe97bdaee3660ca686cab03b1ef7af16d387780811e739ac2271082c7d4bb489","sha512":"f5ffb0368751705c8584d3a6bafa79c865cf33c0d4d8e58f06404807864ceefc41d20cd1162c01b17afcbc438a2fb2ed4f92b8f80938387b012bdd10e0ff2302","ssdeep":"768:6UQ6Jz2sCQ6dza0R/4YUaVSjgKLnkBM/jScHyXLEcDs5Op2jbOKz6im:tD5rCRNa0R2aOgKzkKucHybEcLKwl","tlshash":"2323f1d8f25dd108f9c51d3e9ebe898e6cbaeded3ec998c6224cd81c041494678d6623","first_seen":"2026-04-24T23:10:16.759919Z","last_seen":"2026-07-17T18:53:22.92961Z","times_seen":687,"resource_available":false,"data":null}},"time_used":2721,"timings":{"blocked":2403,"dns":0,"connect":0,"send":0,"wait":300,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b82399e1-d771-428f-9811-f7e15cda0f21.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.895Z","timestamp":1783304819895,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b82399e1-d771-428f-9811-f7e15cda0f21.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 103194\r\nConnection: keep-alive\r\nEtag: \"f704aac32ea52a31d6fc3ed2cf265934\"\r\nLast-Modified: Sat, 06 Dec 2025 06:26:28 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIjhuSmLofEFcGHfA%2Fd4Q8vMyYv1%2FL2gtp6SxMprgyfcmQ%2FYFA87LpfitGO8pjQ%2F5HQxFiAYB1hIiLVA9jAUWLRFZ9G67IcHhYQflp%2BTHEBjLt3EVLLVhoGkVzLg0E0%2F1xrHACQAkgbBzx%2BuxSJFZ88%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141711\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7542c3b1c68-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354025b850a1\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103194,"size_decoded":104356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f704aac32ea52a31d6fc3ed2cf265934","sha1":"45282832d890a7ff431a3e080bf45820996e1377","sha256":"0177775ecd75f420bfdca35ff7886a7e7c2be56137652084986057b7e1566a09","sha512":"6f0b988c4ffe01ea848e549c9856a39d00f127a59b0bee21b29601f055eb98ef5fd349d6b7290257bb3845ecc7ea55a6d103173ba7e689c1d4303fe1c0e8ff9e","ssdeep":"3072:CgsNR4fWsUvdSDU+qlX2KtmzD/CbIGM1:Cg8R4fWSVKYibIG","tlshash":"1ea312850993c5f1bb7598259f7acb20a51a7d70f392ef21cfa94f3ec0b50799a14242","first_seen":"2026-04-24T23:10:16.761671Z","last_seen":"2026-07-17T12:51:05.025431Z","times_seen":726,"resource_available":false,"data":null}},"time_used":4529,"timings":{"blocked":4199,"dns":0,"connect":0,"send":0,"wait":297,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/45540.1781011881923.25dfba7d.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.697Z","timestamp":1783304812697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/45540.1781011881923.25dfba7d.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-37ff6\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f353ffe6d4e3c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229366,"size_decoded":65835,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7983a109fba451279f84fe7b75724983","sha1":"9487dc955240c6083cf3497e806dff89bec2061f","sha256":"80bb5c781336a9095ee3e8ae99d724f58a409c7f3c159bf0f320a9c948afe030","sha512":"ddf49f5cfb4721100ef951228391607209e248a8733d48229ff5196fd8a32fc3e759d90c1040dd591b1c0bd97ab83a1c8baaffa70fa96bbe2d556af2379478b0","ssdeep":"6144:1YD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:1YD4wFsYiSAKNH3TY5","tlshash":"e724f894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","first_seen":"2026-06-12T19:29:57.328205Z","last_seen":"2026-07-17T12:51:04.995275Z","times_seen":625,"resource_available":true,"data":null}},"time_used":1770,"timings":{"blocked":1333,"dns":0,"connect":0,"send":0,"wait":330,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/sport-resource/locales/keyboard-extras.json","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:57.612Z","timestamp":1783304817612,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /sport-resource/locales/keyboard-extras.json HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:57 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2Bmg7yzzPgzSSUrQwoecD3QXoo2IdigIPPq%2B6iBvEEPeWAzmq0qX4r3Q9ZcQOsDBuxc99J%2Fy2hR3UMXpB2W8nmiHknSndhvRrQfJOtppSOx64NZv7SBVDseMTvpJjMzfNJrYOUzsH%2FugAoybRSxc2rIgbYIgLjysEbs%3D\"}]}\r\nLast-Modified: Sat, 11 Apr 2026 13:19:36 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nEtag: W/\"676143a58c2bf17ed03e7ab0ae83cac4\"\r\nContent-Encoding: gzip\r\nCF-RAY: a16b2ae70c83dd4f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304817=MZiYwELPnHYvGx2GZupmYUQfvtks/fARBQ5Y5wsQt/0xt8PDpuD6oGXVxWp8lsOS98PSgYZRWOfAtCS9ETMJ2l3pJGRz3LM9bzvL/qjnq3MHZqaJVZv4EBY55nUSbqd0CpqIbcVP/mXMT+z0qKk+Ru27TRWzn0nUV3ix+jkkAK4aPHRS95upkLCPIhHMS/Mu\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35400c5e5079\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2441,"size_decoded":1288,"mime_type":"application/json","magic":"JSON text data","md5":"676143a58c2bf17ed03e7ab0ae83cac4","sha1":"dc0ccb792f2d2f34a972c0ebf678178facfa7e68","sha256":"f75dc4af402e777551838552e26875a5fd226fa998536a4ef73acfb99d9fcbb4","sha512":"1670af93d5d57af8affbc47e3b16682b4c73d24649f80228c68b0f236f4abe1b3b52647f1a6656c7662d93637620cf794dd3253f1fe5f5d9484201b25e91c5ad","ssdeep":"","tlshash":"015154709532c8a7734165b12ab7954e3264228f9ad4bec8b10debdc6f5ec18c9671c0","first_seen":"2026-01-31T05:42:11.017195Z","last_seen":"2026-07-14T23:38:23.222011Z","times_seen":53,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/34683.1781011881923.ffb73e4b.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.116Z","timestamp":1783304818116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/34683.1781011881923.ffb73e4b.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6e59\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777119f35400e594a37\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28249,"size_decoded":3584,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27961), with no line terminators","md5":"8638a4a1d03e84802b6628538bdb8ab6","sha1":"3363f78ac45a6df0103483a4b2c5bf23e13ac5ca","sha256":"fc4609af11785458bbc690c9efe0ca9c652ee5cf7f2b42e5d3df98ca7d61a6b2","sha512":"46f12783ced7b2726d4912395925792671d106897cbedb29ff0ccd6cb17969960c9ce603206ff04163c4b8bed0f7209bc96fa18ba72cd75bde714a1145be559a","ssdeep":"384:BZ6POG/HnUen7QCMOp7Qe5O/b3reqRw9KXGOVSOMkgzIk:SPOG+s9KE","tlshash":"84c2a20ecb8cc6cabe211fac431d91a10250e8f7e58659dc95e6ad4ef93c50e364fa5c","first_seen":"2026-03-29T15:00:38.365713Z","last_seen":"2026-07-12T06:54:15.808688Z","times_seen":6,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size1080x1196_b15d1708-bfce-458e-bd99-5bc1134b7122.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.818Z","timestamp":1783304818818,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size1080x1196_b15d1708-bfce-458e-bd99-5bc1134b7122.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 48628\r\nConnection: keep-alive\r\nEtag: \"170614bf75e281d0f05503cdeab75a59\"\r\nLast-Modified: Thu, 19 Mar 2026 14:50:59 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wgTfVoSdKhrDqOHpgeL3ooyU10u%2B66MB8jaKVyLWBQHrzrG%2BBVjd%2F0XyZZHBaNav57DD3iXTRSPFdT3s%2FI4oLDxK%2FA5o32AEMl9gCWDw6F09Bxv4PEVoyVrnpRUTShHZ4OFuol6cJMyej2OjOliYLY%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7572aea6ad4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35402200509c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48628,"size_decoded":49785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1196, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"170614bf75e281d0f05503cdeab75a59","sha1":"32025008b56adf94f2a64724f1b00f55939db943","sha256":"010f104d5782b172955179537b5945b89f7a5ac32185a63d67ea5405d5c13733","sha512":"e11fa01405248d40ad8f95f335734207193356f418418955cafc6ebdfa04f5a08d8e304d23c34b211fd9dc7cdab36710694ccd0585c79778a156bf214750346a","ssdeep":"768:tk9BmrgO1s4wjUc8pqYtHwHGvhSgV1iCdmcmxWSqZA16T2rrKhv0cQ6ZQOc4vS9P:tkbmrgO1srjUtkEn5LTdmcmxnqC0aKhm","tlshash":"4223f124d4de0cda1978e776f637574cdb8b325fabc4601f82c9499f800ab04c6628ee","first_seen":"2026-03-20T12:57:26.684793Z","last_seen":"2026-07-17T12:37:28.413999Z","times_seen":774,"resource_available":false,"data":null}},"time_used":4642,"timings":{"blocked":4332,"dns":0,"connect":0,"send":0,"wait":297,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_95e34ac6-aa0b-4d3f-9ae0-451b7e2983d6.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.837Z","timestamp":1783304819837,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_95e34ac6-aa0b-4d3f-9ae0-451b7e2983d6.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72760\r\nConnection: keep-alive\r\nEtag: \"f3567ecc873ade2418801f0f5a4a755f\"\r\nLast-Modified: Sat, 06 Dec 2025 06:17:08 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=deF9tLE6rc6v3%2BrNXd%2B7hJGXyuplOzfuUS3Mi9rQgOV2NwqNGsjo5weT2NU31gwmF140w4Pkd%2Fnxxc6CixibRG50F5o41y%2F9%2BMkFNy59oSQjoKUaobqGT34SV1cJLolmgJlFADUbG0ubM4S6na9Hs9Y%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75524\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f7207fdd5657-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f3540188b4e4d\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72760,"size_decoded":73916,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3567ecc873ade2418801f0f5a4a755f","sha1":"e8fc02b34bd284bdffb53faea4cf595658b0313c","sha256":"4b1a175ed7a2578bee0892a9483844a11bd86070caf612d6714d961747b38420","sha512":"857339772b7cd720df654fc85ac26d103e6cb1ef75e2e1b3dd377b6403b34112dd44a07521fdcd476bdb0b657c3525cb25796ad3ae24a8820ef947c6718d9c44","ssdeep":"1536:GqiacLi4hDdd3WrRvp1BtjWbzMEws521D5kBTVhe3w/PKgXJcuSOe:G71L7hgrhXBtjgzMEF5A+VkEPhNe","tlshash":"0b6302ccd2cc9aa0c4a46cd7f4057b38a962b589664f997303e2e387cac4bd917171bd","first_seen":"2026-04-24T23:10:16.730515Z","last_seen":"2026-07-17T18:34:30.51816Z","times_seen":670,"resource_available":false,"data":null}},"time_used":1196,"timings":{"blocked":848,"dns":0,"connect":0,"send":0,"wait":302,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_e50c5112-b480-4217-95c2-f187843fa431.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.863Z","timestamp":1783304819863,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_e50c5112-b480-4217-95c2-f187843fa431.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 54466\r\nConnection: keep-alive\r\nEtag: \"d564e11aa2a3009b6985896da404739e\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:05 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQQmVI8FlTVk1Brtdxha4BDC9M49748EZHUA3BidaMdh9297LUnhbfLNQWrJ%2F3qsKUZpxmB6iiWhdvVGQrezAIOrKjQ%2BKs7m5SsxMd6aREzyEvWoGd9khIeuachxpA8jW09xsYMxTMxV6%2Fp66ZnyRrc%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141708\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da75609ad0486-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35401c644060\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54466,"size_decoded":55619,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d564e11aa2a3009b6985896da404739e","sha1":"5701d82c9e2fd24ec69db4bdc9ee3e32cffca139","sha256":"75d785fba01e17e56ae0ba404eb302e8537d3a7b7f84d11128164946a3987384","sha512":"1f6a7673f6ccb42f0f1e5135154db412145225615504419fcd52655726f8ac4c85ec419c54167c1d4e71c60cfbd30f87f7bc07d53858adb3e30e184f2fdb5623","ssdeep":"1536:+USdyAD4v4ReUeNhO2po1VPvBu3czLES5WjB6lieR:Wdym04TGeLvlQAC6geR","tlshash":"fa330269024c6463719556f833feb42aa760a7c63801a4799a8f3594fe24ce874cfd6c","first_seen":"2026-04-24T23:10:16.721458Z","last_seen":"2026-07-17T18:52:47.079406Z","times_seen":664,"resource_available":false,"data":null}},"time_used":2424,"timings":{"blocked":1814,"dns":0,"connect":0,"send":0,"wait":304,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-svg.1781011881923.7ca9cdc1.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.688Z","timestamp":1783304812688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/chunk-svg.1781011881923.7ca9cdc1.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-72eeb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f353ffa5d4e3a\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":470763,"size_decoded":90048,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"2e885a50d7dc711be337a96fe33f0c2e","sha1":"8c767dd1bdcbf35f2577bd215ff6fe495cbd0f43","sha256":"603d14d58a247671742688b96c517d62e9c636443b960bc421af5352df4c01f7","sha512":"09289e06b0db84915693f0b78ab40149972b29693d0d6b1e66e4fbe9bddf00380f5f4e8e78961512d91a132226494572994ceade62d3d8a878126fdcdeb8fd95","ssdeep":"3072:/8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:/8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"c0a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","first_seen":"2026-06-12T19:29:57.244213Z","last_seen":"2026-07-17T12:51:04.92266Z","times_seen":630,"resource_available":true,"data":null}},"time_used":1334,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":448,"receive":593,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/assets/logo/favicon.ico","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:56.136Z","timestamp":1783304816136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:56 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 585615\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nETag: \"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304816=gs9qkvz6I3htd6TdKrqEHtWqUN0UjPwYQPVmumTTrqXkETOm5fcInNdTOdKmmXYWNfwCXLfQTg0V/DCUpXkQG8epQWZhCTXmbLvJZaH++HVSCgtAu7gcr70tvvG23AtTM6OljcuhdNmEngiRMJHOoMXMZkHYaC9dc/f25oQkF9Yfgkral1o1DvIZZ6rhEkRC\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354006a04054\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":586282,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-07-17T18:34:30.522877Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":751,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1260x1156_03543abb-5967-4969-b0c5-87347b24c4d6.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.826Z","timestamp":1783304819826,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1260x1156_03543abb-5967-4969-b0c5-87347b24c4d6.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 148768\r\nConnection: keep-alive\r\nEtag: \"2c43663cd3eeae27a4e751556307f507\"\r\nLast-Modified: Sat, 06 Dec 2025 06:32:06 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ae2hQp2MeVoul3ZeJT%2FTRWAgceLALiXACr%2FuN5IZ8wmkSHnHsGdGDXdPICfuPLIQQojc2JKaZreVUvdVmEBNmV7nq4sxVzepyvW58TTDBW3HpRgEorp1BWo5zFnYrsYXDHTscA00z3uNV65OI2qIezU%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141707\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74aee10e2e9-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354015045085\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148768,"size_decoded":149920,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c43663cd3eeae27a4e751556307f507","sha1":"231f268ff0432bf21cea23c1a2cc12003c10f7be","sha256":"cdd625ad600403b36dcbcf589300926ee189bf9d47b2cc2c0715f91c5f6968a5","sha512":"d9ba3dcde4fcd162ea361339bce1c4b8313875af3fe94297a7a55cb8d245e815421dbfb9e5017c19e6a6d50b5ca654e02a326190c2e300b0fd369aa245726567","ssdeep":"3072:IgpSjBxCU8A3MroXYq21tKxGDaxxoyg4KtBHs7T8YMA4q8B4:IgpSjBGYuOYqGKx7ygoBqT8Yln8","tlshash":"3ee313b7f29017bdda91ca376b9f02f832041f64f4077e34a5509801839daada2bb572","first_seen":"2026-04-24T23:10:16.7755Z","last_seen":"2026-07-17T12:47:21.897757Z","times_seen":708,"resource_available":false,"data":null}},"time_used":1114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":693,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ad0ed5ff-8fa0-4231-a619-ce0616ad2a8d.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.859Z","timestamp":1783304819859,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ad0ed5ff-8fa0-4231-a619-ce0616ad2a8d.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43980\r\nConnection: keep-alive\r\nEtag: \"fe9109b6cf4f5478cc8e8fa2df5009fe\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:15 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsmnoHcqdxOBNVZRRQTcEiM6cfDFRyzM3SrmlrqKbyPq1OtpeM8nHwo9i5OsG8M5dZEQWv%2B9KcXuIEYwk4YAFG1H7bGFjifVBwnh%2F9UJQ0R0lNIJ8ci5XDlw8CK4xGTRkYBntsGcIdsytQhrPSj%2F4Hs%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141710\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7464a7202c2-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401c17508e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43980,"size_decoded":45133,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe9109b6cf4f5478cc8e8fa2df5009fe","sha1":"c379459affae382d1bb8ebcc637a880c0ccc284f","sha256":"8a0f41c270d457f16992ae4d9cfdacaf31bc2e03526f377b557111ceb90bc056","sha512":"4d95fa57a6e2175f2e11a07e15ef45187a3d5e44ad567ec4634bdf5e35c37e1c88026663fdd6a583cf0e1d665f0fe8d12cbaa535af6189cb88977228ffd3c5ab","ssdeep":"768:mD/LEFkjJ0uG775vp9Y25iMxn46PWKhqrJ0bAbhtI0iSRXbs6nuxV8fnxO:mDD9jJ0p9J5iKnQKEriAbhtgcbspx","tlshash":"4c13f180b6ebb93680296123673378eef9c47a6fff44872aff82464699133743119d15","first_seen":"2026-04-24T23:10:16.768892Z","last_seen":"2026-07-17T18:51:03.549254Z","times_seen":656,"resource_available":false,"data":null}},"time_used":2046,"timings":{"blocked":1738,"dns":0,"connect":0,"send":0,"wait":297,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_79864bfb-d71a-4513-a524-8823b86ee01d.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.878Z","timestamp":1783304819878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_79864bfb-d71a-4513-a524-8823b86ee01d.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 69284\r\nConnection: keep-alive\r\nEtag: \"1f023b2fde7cad748f40bc1d26f7bcf5\"\r\nLast-Modified: Wed, 10 Dec 2025 11:51:05 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YxQV5lyBUiDfusp94vfjnfZxoOStd1wnDTztxrswA3zpSGoWl8YMafeULQilnqydhG%2BTRWEPIXD9%2FenBasiliGQjgbu74bg9q3hCXeII3BPtE%2BqDP1BHnhAAIk8m%2Fb65uiIJ6CTwkSdyIRBZAaU%2BW4%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75507\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f7988a6f6131-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f35401ec64062\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69284,"size_decoded":70440,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f023b2fde7cad748f40bc1d26f7bcf5","sha1":"b6f87014c3efd309dd208adbde662efd12ed1630","sha256":"37500d21d34445843f3857ddc61970168d68b86f1f37208f3e0b05b5fe1575ee","sha512":"afc994859a75b3a91939974cdd03b6973f68d7e5be316f8a67ac60412782cb748d7ad3b7b7f62d931496e61c198098e6ff42f280ec5c5ed40164f5351dde15af","ssdeep":"1536:LQyDg35QNQHWhyCUVgapIL88bSxgjfxjgS1xnVluzXj1/7qLE0rOFXrb:8qm5MQvC4gapxxgFjgQn7ax/kE0rSH","tlshash":"d66302cf2367021ed8f7a779922a46dda041f25ed16a73acfc919d45f88221726ec09c","first_seen":"2026-04-24T23:10:16.798872Z","last_seen":"2026-07-17T18:34:30.537043Z","times_seen":675,"resource_available":false,"data":null}},"time_used":2744,"timings":{"blocked":2422,"dns":0,"connect":0,"send":0,"wait":304,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_de72e240-4300-48d6-8f6e-b9cb363e7924.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.879Z","timestamp":1783304819879,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_de72e240-4300-48d6-8f6e-b9cb363e7924.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 81300\r\nConnection: keep-alive\r\nEtag: \"4a30c16256a637de0e38e326aa6cdf0c\"\r\nLast-Modified: Wed, 10 Dec 2025 11:51:47 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4FrrN7VIweCGJ6Fpwz2sVuS36DNJtWHS3QgAzDeYKARj2TIcZ%2BJ6Od8Hj44I90HGog5ME9gHsd%2B8Q633fjzy%2B%2FT92Q3Ussuvl35UPpbYhA8r%2BwQEC5OSYTo01XjBqxjXCGVbm1P8Z8Qt%2FPQivRxq3M%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 75506\r\nCf-Cache-Status: HIT\r\nCF-RAY: a163f79998f24e53-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35401efe4e56\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81300,"size_decoded":82458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a30c16256a637de0e38e326aa6cdf0c","sha1":"083a8e24d12a329c41bc5271ff2ee57570a6ff1d","sha256":"2e9e6d8b511c612cae6e20caa233846b723fe3f3c899d19eb8389073f0ca8047","sha512":"2cc3551a276966a3615edbf590ce22d06779e40c371e54737fdd0033faf900483fe32a33fcc86327fc2e3098e5ee02a88d6e7c60552a4ebdeac5ed66a47f007f","ssdeep":"1536:rHYJZl7vtdLMbrX1zS7hmZHerpnyjI79AYRU6kzu0MRsIelVbd:rkf1dLMvl6MZ+9nyjIinjuxcbd","tlshash":"7b83f1603172ed83bd9eb46081883156f984d84473298ff72a779fbd93128e9973970e","first_seen":"2026-04-24T23:10:16.828064Z","last_seen":"2026-07-17T18:53:23.001948Z","times_seen":685,"resource_available":false,"data":null}},"time_used":2841,"timings":{"blocked":2478,"dns":0,"connect":0,"send":0,"wait":302,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/94465.1781011881923.b12f8bd6.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.117Z","timestamp":1783304818117,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/94465.1781011881923.b12f8bd6.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-68e3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35400e59507c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26851,"size_decoded":4127,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26615), with no line terminators","md5":"3adb31512285dc067bcd8be2241dbca1","sha1":"e6d76021d8c6f5ad30ab4e39885af94eae806356","sha256":"7299237ed790171980b6fb79464812c061337d4eee46e5e4f4eb8f2a9a5378f4","sha512":"31bac6a6e0457e3e6f208b112d01ddae69cec4801e995fa134e57ee40278ab34c0f6b0e97637e25c9e6b83cc6f787a5d25dc725497306cab7c0ffbe4d699171f","ssdeep":"384:NZqNCGnHnUen7QtjjFfVHKrjoT/9KHnV0OZ4tOZMo0HyR:ONCGKH9KMK","tlshash":"0bc2050ecb8cc2d9be751fac421d90a10750e8f6e58749dc95e6ad09f93c60e325fa6c","first_seen":"2026-01-10T05:58:33.742489Z","last_seen":"2026-07-12T06:54:15.79539Z","times_seen":30,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-06T02:26:52.017Z","timestamp":1783304812017,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /m/ HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:52 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304812=m2LyOxLOwCTX0S/ePHJ24Ir1tiZSv7EQhXga78ct6gMHVPbQqQOE/zyD/HmNPomHawVK0E+qUvviAxKr7Q2lOqADAYrBqBVwNqeLv6W8VVqaimSLxAo+IPU62CiGzIl+5OgsRS1fHtfU0A3O9g/LtKhsyWzMnJaTKsnKxElrbCXoNPCfUfbdukfJ6v1Ay9Q8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f353ff683505d\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24671,"size_decoded":11470,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"886080ace6e341d83041fb9cab6fe765","sha1":"5a574ce85ecd12df0e7dc823f625a419835f5ae1","sha256":"e3be735996c2a43a47a27cf9f5f0183c27628f24e496e6469cadd77113e67a89","sha512":"fcb22ed8a2bd6c818f4997b3d4b98b2c43a200919d365a29f9e3d17a2f356ad4585f093f1d20183eb2617d34b41a2483dcc6ad65af1ce3bd8c0097d9fb663c42","ssdeep":"384:21ERlxqNBPJ82VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJ8iNYiKop/E6wkpcu2llz","tlshash":"c3b2191a9df3497a2423303a1f7fb20869b0d0134309ed403e4de7594f95aaa56f7bd6","first_seen":"2026-07-01T01:07:30.836706Z","last_seen":"2026-07-12T06:54:15.668123Z","times_seen":6,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/83876.1781011881923.7ce40e6b.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.700Z","timestamp":1783304812700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/83876.1781011881923.7ce40e6b.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4007d\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f353fff754e3d\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262269,"size_decoded":77907,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"abf84df30621edc23a82d05ff0b8a83a","sha1":"e727ad94ce5d5f5b8fabec0e0b5a966fb6e6594f","sha256":"c3b02d056ac034939c3ff75a10a2da23f5f05f96a36ca1e5cea2157ce0fe12be","sha512":"db2a2a00f51cc6f75cfcbb6d988df74403fae93255982a054710e5f87a2d8407f4f8f02fef8ef1a0e5edb289736296b2d11a3b77cad6c6d9089bb831cda45be5","ssdeep":"6144:0/rOTU2/xB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:0iUjytgPJPT3p2YpHrrL","tlshash":"2f442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f265f990be7555c927fbfc","first_seen":"2026-06-12T19:29:57.272405Z","last_seen":"2026-07-17T12:51:05.034087Z","times_seen":617,"resource_available":true,"data":null}},"time_used":2057,"timings":{"blocked":1596,"dns":0,"connect":0,"send":0,"wait":331,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/m/index-a3dad144.1781011881923.e6ab9b18.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.702Z","timestamp":1783304812702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/m/index-a3dad144.1781011881923.e6ab9b18.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-565f8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354000175066\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":353784,"size_decoded":114359,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562), with no line terminators","md5":"d337aeb01788561f9ef1881849ddec70","sha1":"364f854098797338ffd05e3eef17d5e5c1790b21","sha256":"36552adf11a80e25925974f590f6fcc5ff2b1206cfa355b2087dd2f559fd60ee","sha512":"3f762deda433bfda5f1449ac84462236344a5a1223c0d8c16259af5a0b0f841e650ca2e2507673ef969913a84bc0e31bdf3dbe3ef1b85e9207228cfe1871ed0b","ssdeep":"6144:RQbhFOufhtRykiG5LHEY/TJ/Pm1lVs4h+Lg9uKYiwEqLD9q5f:OzBHRykiG5LHEY/T5u1lVs4h+Lg9uKYo","tlshash":"c9741be1f76ce1bd434e59ff7a22d094d01d2b41b0c86e49c25e5a44ba6f385eab04bc","first_seen":"2026-07-01T01:07:30.821451Z","last_seen":"2026-07-12T06:54:15.715826Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2552,"timings":{"blocked":1757,"dns":0,"connect":0,"send":0,"wait":346,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/21954.1781011881923.57c97863.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:55.495Z","timestamp":1783304815495,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/21954.1781011881923.57c97863.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:55 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-a3da\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304815=UPV3Ih/MWfTNBFxB3VyHAb63HgZwFJAcLhRrXMmQWY/UTYil2hSf1FX6j/wzA70QDi6/7CZuasu+35X0LKK13TGeYkmkM0jDZxPXXxgjhVAGOXzY15fvx+jOhYEo6/yeqBXB9pegIhh0yah8ZK4LFNtmIrtd0IrinQIPxCyparHMM1PBSq7epNqV6TlPhjbA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354004204053\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41946,"size_decoded":9458,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41946), with no line terminators","md5":"35aef3c03c45b75cc6c2851265c30f23","sha1":"54874afc1d2d6391142418c6c17d7639247b6c9b","sha256":"c7a0283f3d2fde40ce97fe3bb5e79621f9939000c50c3c781a4597c3242ebae2","sha512":"f74356629d65ff26f6928ad3183ba8e6e01848921202f9c14c5aef758ef72acdcabf523209e892df42d230d9c87cb47cda7bd106105ed8447718fc502b2d71db","ssdeep":"768:U/aSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:z81R6Ipyk6o","tlshash":"33132088fac2b06dd3eb7330857f505ae66a1dc0668c5434e260d6917e7198dc1fb9f8","first_seen":"2026-05-29T16:01:53.086335Z","last_seen":"2026-07-17T12:51:05.11082Z","times_seen":604,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/4cdaec65-2460-4b91-8926-e120c3b215a0.jpg","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.092Z","timestamp":1783304819092,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/4cdaec65-2460-4b91-8926-e120c3b215a0.jpg HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nEtag: W/\"075437c0929b2ec23be445aee5a25121\"\r\nLast-Modified: Wed, 28 Aug 2024 17:18:38 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 137736\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMgGtF0tEWd5d0F5qiVLaUt0H1qW5IO9v5m1QFUfZw%2FAxRJ4AVo0cBpSd%2BlF5iB3IS%2FphIClYb6VbpbY2xKvT0F9sJEKRQw6emi6KPbjoVS04ryXnvucW1tbXGPE6sQPYDG7bdlK%2BFLCKymUw%2B4NwSM%3D\"}]}\r\nCF-RAY: a15e08593ac309f8-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f3540223a509d\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12001,"size_decoded":13235,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"075437c0929b2ec23be445aee5a25121","sha1":"e94ff3b9f85917b1cf666eb3f8910b0814ab4cd3","sha256":"cea5ccbf656162cb4a50aaeee2dffd2212e4c7d337ac568931f0d5f82cb2269a","sha512":"37704511220005a63574603f3228d92ebff69725dad6e1c6cfe08fd22a525320e81b5771b97c284ef3a74307c2ffa7181fe3a66d2a094630c286cb393c0ff994","ssdeep":"192:HS//ZBcZZm6eQhNNQ+ySxBkb7hsdKTSbSu+588ilr/DLUU5esHtTn7Y6G2hx1CE:y/EZA7o3Q5SUb2dblfr/fURsJnMl27Z","tlshash":"5742c0c6946665cd05ce592281c70b3cf443acf1e741a7f5a9803fb76200afa252bdf9","first_seen":"2025-11-01T17:14:36.3371Z","last_seen":"2026-07-12T06:54:15.716874Z","times_seen":29,"resource_available":false,"data":null}},"time_used":4419,"timings":{"blocked":4112,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_1d28b817-0c00-4339-b666-213943a7b1d3.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.865Z","timestamp":1783304819865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_1d28b817-0c00-4339-b666-213943a7b1d3.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 91938\r\nConnection: keep-alive\r\nEtag: \"d4f654e067ee701e55c386cad6b53574\"\r\nLast-Modified: Wed, 10 Dec 2025 11:50:44 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXTW3XeqxaK2Th6MpfhM1Ioqwkelpgh4%2FG2%2FnEA3ZbCombmBD1jpMhEumT%2F%2BErkEbYi06nchUCzOMrFzB9Rn6x%2BpJTrY6PR60HIScymM8tkn6ADxK3myRMBL8wY11ercKI4TJaL0Ge9591RxfR81f%2FA%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da75418ab096c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f35401d5d479c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91938,"size_decoded":93099,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4f654e067ee701e55c386cad6b53574","sha1":"a0f6315ed37b1a5d5da601adfbcb44cad2d9f5cb","sha256":"cd9f33e85a633a73214e9e94255ec27a3d272cadf2389345b6d240d4e36c53ab","sha512":"701a8be639fbb3dbc5670d9789cf01c3175d632a7902e3cfbb769e80fff9f420c10befecfa030adcced409dd26c2ae2afa1fcf617c7371bc6984b378685d184a","ssdeep":"1536:XsUxLKKnLpw8UtfepacmJUm70Cweits6VTpJz39R9s8dBmdEbi/pS4l8KjVIVAMo:PBLpw8UtfqyJUeueitTVbFs8dpbQSvK5","tlshash":"df930205f84d4f1dd86a31e6e142309c9472e0a83213cefb25b3f53997935d52ea6f48","first_seen":"2026-04-24T23:10:16.740253Z","last_seen":"2026-07-17T18:51:03.57602Z","times_seen":664,"resource_available":false,"data":null}},"time_used":2405,"timings":{"blocked":2063,"dns":0,"connect":0,"send":0,"wait":301,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0b2c7f25-c17b-4d07-adb1-68f1823633a2.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.887Z","timestamp":1783304819887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0b2c7f25-c17b-4d07-adb1-68f1823633a2.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10536\r\nConnection: keep-alive\r\nEtag: \"83c227836fb01b2cef7c240c8d45f098\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:09 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFRFq4mj8BzXpsjBzTkMAQmLCFVAT9rGImdDUgtAnrAhnwphAXPi1ME4oa214E5BAR7xp8Z7%2Bl92xs1ia%2FbKe7Qkejjm3QM6jZtzCoPquls3t0JfiUEc%2ByVHnyQ9eAhYG%2F%2BkLzEgVdsJkomfKOjGWu8%3D\"}]}\r\nCF-RAY: a15da751789a7155-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354020793ad9\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10536,"size_decoded":11693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83c227836fb01b2cef7c240c8d45f098","sha1":"fb1e1f8ef0fa166415a743fe004d926e7b040aba","sha256":"54544e3d3311ced9fef367585eb60a15e3bf7d8490ccb2098d7e76d59fbc1fea","sha512":"d41d274ecb2373e9f9eaafe28710226a6bdf54d4c0c8a24c9b04fdd18a6d7fb71611dc0111f54fdd6750929bf002dfbe4a2822fd77f455f850d3406671b6d499","ssdeep":"192:6Xrxa2Dv2+2JgMsTWhgDPkmw0OwIK1AmEIDvWrxaiXFr0NN2uCd16Abhu:aa2Dv2vJmTcgD8mw0ODBmilaiR0P2xJ4","tlshash":"d922b0aad71a5b23ca0056163f7f3476c1567c371b2eeca529eebd0112309e469f9313","first_seen":"2026-04-24T23:10:16.72265Z","last_seen":"2026-07-17T18:34:30.51293Z","times_seen":719,"resource_available":false,"data":null}},"time_used":3156,"timings":{"blocked":2856,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/config/telegram.js?t=1783304812647","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.705Z","timestamp":1783304812705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /config/telegram.js?t=1783304812647 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-1c896\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304814=eq6c6W5OI7oiRRULdGB72dgYRuZcHZQ0d+AfLrxTCsJ0kWYNZR4tgmYBgV9w8IfpeMk6ygfumNiMOykd62KktaIcBOw49c4aEWaYk2n2JgnZLLhGP4sTGrXT/gwuv3fQSIt8fO4E554i6+oM+k50ZFXWCAkck++OFcbJMwar5JVytrFrfLz7J/NTjWJDgm2Q\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354001434e3f\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116886,"size_decoded":18895,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (483)","md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-07-17T18:34:30.575909Z","times_seen":1968,"resource_available":true,"data":null}},"time_used":2389,"timings":{"blocked":2056,"dns":0,"connect":0,"send":0,"wait":328,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/common/usercard_coding.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.178Z","timestamp":1783304818178,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/common/usercard_coding.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-81b\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nAge: 141823\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354014874e4b\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2075,"size_decoded":2801,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"f89b273a74d4f7e6c848d057a57f858e","sha1":"1e46e1e4af5091eaf8e4436f9a79d7e8205e98d8","sha256":"2ea6c8e61558168c75907e851e61ab0883c2f39b7c1cc6264d65b7d4a7096c94","sha512":"4646539ea6f4d573480a2bc9b955d1dbf1cd04550af13efccf713266f6017d68bbd3bdc564c2b214e2294bc02490d6cb03beb6d30761b22c053a73b520ebab43","ssdeep":"","tlshash":"74414c2aa3c0b69a86c2941494375cadbdf0f3a7408b6723f063d470f28108515fee06","first_seen":"2025-11-01T17:14:36.255094Z","last_seen":"2026-07-12T06:54:15.804881Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1811,"timings":{"blocked":1518,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_6cc2215d-c6af-434c-af5d-2867d8d4a43c.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.882Z","timestamp":1783304819882,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_6cc2215d-c6af-434c-af5d-2867d8d4a43c.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1136\r\nConnection: keep-alive\r\nEtag: \"cfa94bca41e7f65cee3187aadcbe633b\"\r\nLast-Modified: Tue, 02 Dec 2025 14:06:56 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sr5BMnozsikdwwpGtconJVSSff1rEYzwX7oJED2Tu13yfQOPKm3AyEVt3CYOaG0ktCRvJ8G%2FlAph07uW5Omow%2F15yfpU7ktWWxlTvlh8O3UP1buxCoDg7RFkydAxGXTTrobSju4yX7S6BFE69N4Xvig%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 52631\r\nCf-Cache-Status: HIT\r\nCF-RAY: a1662613feb80663-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401fb25096\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":2285,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cfa94bca41e7f65cee3187aadcbe633b","sha1":"3a5b10f33c6d44c857b3eefa00593c567ee5238d","sha256":"96c71b3928c6d26386a6ab232aa6a5973746db6f4f491ba70a8137732e42105a","sha512":"cdc9e8151c84bf7033ae69e53f4ba33df16f528d8838fa7fe500bdebc7dbd9d8d612803dd39a39a2a0fd3d816252f12ff6d411268ad4276a7db1610d326dd33c","ssdeep":"","tlshash":"d721a79d1ad1603ef5b3f978b998a4a13d5c7649a00942c3657a88b4a829133e05e5ac","first_seen":"2026-05-02T01:47:16.024593Z","last_seen":"2026-07-12T06:54:15.823253Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2951,"timings":{"blocked":2658,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_2cf32c0e-cd2d-4274-8e00-d67d14e5086e.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.883Z","timestamp":1783304819883,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_2cf32c0e-cd2d-4274-8e00-d67d14e5086e.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7390\r\nConnection: keep-alive\r\nEtag: \"f111a1ab6243183e54c8c152a111da67\"\r\nLast-Modified: Sun, 09 Nov 2025 14:10:40 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHafcMB%2FhT9U32WVP3w83DOLUjXjZtVmmYua20W8E8NUwyUXCcD6e4zVFfqpDHuHlIbRXybd4IHRAn8j4uuDQm2v61ciqDHMI%2BOjflR8UW6wUf%2BZ7TfKkeX07X%2BzJoSY3PbFfdNBxb2%2Bn2hDlMy5VdE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141711\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7486fa0e39e-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401fd85097\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7390,"size_decoded":8546,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f111a1ab6243183e54c8c152a111da67","sha1":"64384e28a720752201bdef5fb2d779e3b9c85f09","sha256":"5cc2cf8571b6a9483514b5a6a4624cf867c12addfcffa3ed0ca5b24a2354dda1","sha512":"38c484611e089f275c9cad39c3978fde5cc040959db3de91ae8744ce33f66b4ecf40b01f464e2081395aa408bbbc6a6c7bd845799ae892a8611b04c24c2198f6","ssdeep":"96:0UX6jHvysggvfrPtYvuy3/9Ic5G1SB2P80d2QWAqhs0ufLIbqvfgJ965FkBYUU:vmqsggvf5Uuy3lQ1Yues0uDlngJY","tlshash":"4ae1bf2cec9e39805c1c3cb8a451111c6f08688cadcc8cd55915be29f277beab5d6e41","first_seen":"2026-04-24T23:10:16.706864Z","last_seen":"2026-07-17T18:53:22.925723Z","times_seen":704,"resource_available":false,"data":null}},"time_used":2996,"timings":{"blocked":2696,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/96039.1781011881923.63b98ab4.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.120Z","timestamp":1783304818120,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/96039.1781011881923.63b98ab4.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-61df\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f35400e5a4797\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25055,"size_decoded":3507,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24811), with no line terminators","md5":"9dce5ce231d5aaf54edb8735f07f2b2f","sha1":"96bea019adcdc6ab245f3a9f83031f96bfef07bf","sha256":"8d7be78dcfef436963944a61905ec8457dc5919a2c436354f25073596cbeed2b","sha512":"a2015eda106c752e446fe33273652167cee95c1eb7741ad110131d4822bba08dc359bfd86cacf3188345e15fb71e350ac8c56e3949d9ca182cd1d1000471eb8d","ssdeep":"384:/Z6PQGjHnUen7QtlObS3OIkjoT/9KzLO1IY4pOmO3QOqyR:EPQG+9KXi","tlshash":"84b2910ecb4cc2dabe711fac421d90610250e8f7e58759ec95e6ad09f93c50e365fa6c","first_seen":"2026-01-10T05:58:33.943445Z","last_seen":"2026-07-12T06:54:15.687147Z","times_seen":29,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/sponsor/sponsor.json?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.166Z","timestamp":1783304818166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor.json?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nContent-Length: 646\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nETag: \"68dbcacf-286\"\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35400f8b507f\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":1261,"mime_type":"application/json","magic":"JSON text data","md5":"10d2161de8cf99c474812f4c43645a26","sha1":"71884ef7281cdcb5084088f16d4550ce8790e634","sha256":"bb02fd7438bb49dd4decb6f76a71f11e93355332fd9f965d6f9f13bb8175aeca","sha512":"bf0fd1232309fcc5582d5c42644e1c7b4b8d235b1066e988ff55e0dd94a956f89742401f00c2d904359041c8e0c2bac8e9316252fab60db5eb0a3b4c935172f0","ssdeep":"","tlshash":"d8f0f44ad8b25b93211fb57c58cd050470294a8f0eccaac4baac987c4f598ddd1e839e","first_seen":"2023-06-16T04:51:50Z","last_seen":"2026-07-17T18:34:30.550642Z","times_seen":2388,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ebfde7c7-fdc6-4b58-9f46-2e709f79d7d7.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.860Z","timestamp":1783304819860,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ebfde7c7-fdc6-4b58-9f46-2e709f79d7d7.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52382\r\nConnection: keep-alive\r\nEtag: \"d82815d2e1685b08148f834895263ba3\"\r\nLast-Modified: Sat, 06 Dec 2025 06:31:00 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XkFyTx6g1UHcLHuxKSUqwtiBxbcSGzu8MSI4hWEHxpr3b6qSzUBazMAQfvxUhot0El9fYFZX4HqdpkX1jr7xdTcWe3tqx6%2B30vbHpp2zgOFw2%2Fn4p2z1UpnFbGMiRjJ0%2Bi97oXJryeKj2XMJYTv07TE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74f0f32853f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f35401c1d479b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52382,"size_decoded":53535,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82815d2e1685b08148f834895263ba3","sha1":"77d1ecea682ed9c5c6be0f1644f2314eb3db64e2","sha256":"4dfee4506bce2de57a4d8d608edd295e0f8233b44b869f6d94481d17931a42d6","sha512":"9941cf4ea9abb6631c519ddd7067d21ac74afd06329b64581be00aa28b89e4ae7dd9750fcec2913df15a4f5fd7209a2049ae62bfec1c802d304a710105ed5d0c","ssdeep":"768:i2/E0Y/tLxLsxLHzZGHtzwzzxgHi5hUOjl7pE1+J1r5k+A8okW8winHfG1HL:xEHVNshHzIIxEuh7q4JxqXPin/G","tlshash":"a13301689c11db25d8805a2dd62fbfce984330e2231f0bca5b13d95e0bf1a852f44c9e","first_seen":"2026-04-24T23:10:16.886375Z","last_seen":"2026-07-17T19:15:02.21493Z","times_seen":655,"resource_available":false,"data":null}},"time_used":2063,"timings":{"blocked":1743,"dns":0,"connect":0,"send":0,"wait":300,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_fc0e1468-bc71-4d42-9849-b6735b50978a.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.884Z","timestamp":1783304819884,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_fc0e1468-bc71-4d42-9849-b6735b50978a.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11120\r\nConnection: keep-alive\r\nEtag: \"c2103cd78445d5d98b8a8a38dee95854\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:18 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaODizsvnyRden0uh0KJTcVkt6wU8XdJq%2FZ%2BBAF%2Bjpso9wM3q8hVV0Q8ENaGZOSsyznnC0WPc8yy4MPXaq7TPulBi5Tnx8UM7AwiwNWQlkY1feVA7ycBn0HGPszFacNbyR3H4t7QXPxVDOe%2FDB9vLUQ%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da7549fd5716d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777319f35401ff2479e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11120,"size_decoded":12275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2103cd78445d5d98b8a8a38dee95854","sha1":"77e8b55343bf4092e6a298d564b828b7167d73a7","sha256":"23f7d437c49f455c0bbe3d040982bd6cf8d25411106c3eaa156cc3e4760c3c1b","sha512":"c1f7b1f8f0187dd22795297f21febc867932be6f47b9d033e4df6dbe5f456cf4f7b97d88fff1320945d581b13e4e23cd66330b4432f6f506e504b9dcc01776fa","ssdeep":"192:UFGWMz7rqmua13y84zY36YC0JwSCH2XOc1wK3/RZ/dHGKFdVr5suOWQgcSQBO4mZ:Qmus3ytKC236rKJr53IW4mZ","tlshash":"1f32afcec9dc3b159c35837d36252988ea4909130b3762d2752a64c646eee8a3196bb3","first_seen":"2026-04-24T23:10:16.81812Z","last_seen":"2026-07-17T19:15:02.195479Z","times_seen":710,"resource_available":false,"data":null}},"time_used":3019,"timings":{"blocked":2721,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/71823.1781011881923.47c7ad12.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.787Z","timestamp":1783304818787,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/71823.1781011881923.47c7ad12.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6eecd\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354010f53acb\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":454349,"size_decoded":80022,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65402), with no line terminators","md5":"af8ceb14b1c853510a4d4e956663df6c","sha1":"4d4c26cf35a97605e575e1bd7ac4b089ac747a18","sha256":"bb095595646240890498994e6b5dc6c50c1a5a1df023c4e18ddb338881c1f2e0","sha512":"2ebff77b16164a6d2301ac57434b854aa58e961390c9d37db1bd491c6ddc38c09fabdd328331a6ecd449657d75b201d850c5a8480f479d482d3259423252d935","ssdeep":"3072:EWNlVUpxqMXPca/DIonTGJwB5Vkqfyp9L80isi:EWNlVUmMXPc0DIoTGJwBbkqC80it","tlshash":"7fa4a4f4c244d6edea04ce056e7d6f2d50723786f6ecabc046eef8465e82827245c4da","first_seen":"2026-07-05T14:43:49.729057Z","last_seen":"2026-07-12T06:54:15.832431Z","times_seen":4,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_9883229b-22be-4ce1-8199-dc6174c643ed.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.841Z","timestamp":1783304819841,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_9883229b-22be-4ce1-8199-dc6174c643ed.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1106\r\nConnection: keep-alive\r\nEtag: \"dda1bae06401cba623dd6c27f3fb381c\"\r\nLast-Modified: Tue, 02 Dec 2025 14:06:42 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkBvdfQux6DmTSMnqXQtaMyxblmF%2Bs6fBh9YWsDGjsyOFHUTwujXGhGAkW%2Fkvaw1XgU0QnP9vQmwchWuHs5TDjiuWmVgFHSaa2JggpQwG%2FMClMqQKuOSxJbOMxxsNeYKHXQQmT9fwVyL1U5QGrd43js%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 52628\r\nCf-Cache-Status: HIT\r\nCF-RAY: a16626186f1a0855-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304820=X+boFAjRJqjeVzEzVwQ7u/Aef+cAiaXYQ8H9rHzRJwTxnDXCTzN2H1W60cXOcU07CPModCBFlhR3FunVhLh2hzZZnJKOpF7RX55p8gL7Vttr0F04MAacE3f/PN1Cl2uoFrDmMuLbPvqBwSRi0L+ipfODg6zappUWe1h+3DE47vyZsw2Xo9pGP1OyFSY6h0X/\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354018cb3ad2\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1106,"size_decoded":2257,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dda1bae06401cba623dd6c27f3fb381c","sha1":"b1c7eb4c439859c0ed092f246e4deb0539e38609","sha256":"993df39d87aca83781d65d57fb5798df471d80abdf05f1abc25a9393c889c07a","sha512":"9189dbd8d5339e87d3570e89fb1891a1d2a5f92871d963f039b0dfdd48a532f38e9463348fc84f19da1832953cfa4d7ac94a9abfffd9af57b5b765278bd28f01","ssdeep":"","tlshash":"cd11f988d9615000fdf3ede875c7e04a109a1183a04e87d939b69415200c3e5e2931ed","first_seen":"2026-05-02T01:47:16.000719Z","last_seen":"2026-07-12T06:54:15.659679Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1200,"timings":{"blocked":906,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/img/enable.9ef47d58.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.875Z","timestamp":1783304819875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /img/enable.9ef47d58.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-792\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nAge: 54686\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401e8d5093\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1938,"size_decoded":2663,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b1d702ead4d924bae52a64441d6e36cf","sha1":"ba96b2b9b8925e6d3ced19ab50d41ec0b3def2a9","sha256":"9bf083510f61bd1b3fb1bd661842c2d5061c32bbab6054ac4d869871546bab4c","sha512":"b3c279be02b8da61ce59e1ca86695f3d4d45870d8ed3aa3d3deb76063a14ec481d7a1517ded054fbb105ee9d5802463bdf1a9ab18d39b4f48bbd154117277bc2","ssdeep":"","tlshash":"c44119c362d49d39911bd54497977a42aaab5c4ba23bf63478e30c7e67444d0dc00ece","first_seen":"2025-07-04T09:17:37.860529Z","last_seen":"2026-07-13T05:08:27.56315Z","times_seen":88,"resource_available":false,"data":null}},"time_used":2659,"timings":{"blocked":2366,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/assets/logo/favicon.ico","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:56.133Z","timestamp":1783304816133,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:56 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 585615\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nETag: \"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304816=gs9qkvz6I3htd6TdKrqEHtWqUN0UjPwYQPVmumTTrqXkETOm5fcInNdTOdKmmXYWNfwCXLfQTg0V/DCUpXkQG8epQWZhCTXmbLvJZaH++HVSCgtAu7gcr70tvvG23AtTM6OljcuhdNmEngiRMJHOoMXMZkHYaC9dc/f25oQkF9Yfgkral1o1DvIZZ6rhEkRC\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354006985070\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":586282,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-07-17T18:34:30.522877Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/public-resource/holiday/23/h5_zs_jr.png?version=1.0.0","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.803Z","timestamp":1783304818803,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /public-resource/holiday/23/h5_zs_jr.png?version=1.0.0 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"a741c84c326d6f7abd541fae692d93f9\"\r\nLast-Modified: Tue, 26 May 2026 12:06:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7b0t6Zb2dVwUUwf6UJ0OlpgyTQEes2%2Fey%2BNgpl4OMFHqHKEkm%2Fe0ipKqm6rxX0hMXOC%2FXXUiLmL%2Fukj%2FgGrPIVjviHQggrOGwkV8XDMdJAQeqcqFaXL9aJS57iYYvL0VlbM0x2CfKeWylPkJgBkhAlPELFKi3To2bTV\"}]}\r\nCF-RAY: a15da47a2b173030-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nAge: 141821\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354011054e47\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13954,"size_decoded":15149,"mime_type":"image/png","magic":"PNG image data, 240 x 130, 8-bit/color RGBA, non-interlaced","md5":"a741c84c326d6f7abd541fae692d93f9","sha1":"59f38866cbd478797bde7c93e1a717c4a3b451eb","sha256":"048b9ae98a56d711d0a7c3d4269fb1b4f9b1e8ef9e8a164e524090ed407cc2a3","sha512":"bc573e013ed031fbded977176df2db61fc5dce252fe0092959604ecb0e59cb7c985137d805eea6ac6d93e444bed9273817ac5846b336aa1661767b2476beffa7","ssdeep":"384:KPlEjEiWgaKSZG9vaReQA/p1pomTpbOGPO:glE4iWR2MeQA/pToUlm","tlshash":"3c52c0769f9c6c76ee1d83d96020d17290e4f1e60483be833e16861f6eb0b73a972553","first_seen":"2026-07-05T14:43:49.734301Z","last_seen":"2026-07-12T06:54:15.644437Z","times_seen":4,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_96811f47-5a2c-446d-a8ca-696df160de09.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.893Z","timestamp":1783304819893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_96811f47-5a2c-446d-a8ca-696df160de09.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 46184\r\nConnection: keep-alive\r\nEtag: \"c0ef8343c60fc9c02bde9fb0823e1ef6\"\r\nLast-Modified: Sat, 06 Dec 2025 06:26:38 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyTxMszZ%2BR1XRWlkxiCYE2upugw1InY%2BDVbmj%2BT8hGI2yKMUtetn%2FjlscqKlPNv2L0Mp2WYBNya6sIEounaoF9whUisRpQfYyVLt5LQ4MOw4xsvWm1WfRq4p38HsmvqqSkb0uJZQde8G5xGlXeZoaRM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141712\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74a4c538573-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354025304e5d\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46184,"size_decoded":47339,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0ef8343c60fc9c02bde9fb0823e1ef6","sha1":"3a5e1c7a0e16e4df0a591749d4a8a1d01b381277","sha256":"1042e3632605c2e70706209ece9e2b341695afc4e57d5512818e458078c55040","sha512":"950b59f182c21e7d78ac56d6c1cb0f22a295ede2a579f9513c69166b2c227d5ebc4a8e16d5528f530488d5c36d8b88d9c29bb251820627d596156f90445a90f6","ssdeep":"768:fs+YB8yjw8RTKT4uT+QCkrgAEnaCA/RE4qehyRcQsII+IYJxT8sJk2RaA2b:fsDjxR+LT+vkrgAZ/R1hyqQ5IeJxTbR0","tlshash":"182302b81bd5a7b7cec731f89ce2890a4d17c2d5e183b0667d686bd6aa114c1f4c0ed1","first_seen":"2026-04-24T23:10:16.848247Z","last_seen":"2026-07-17T18:34:30.674883Z","times_seen":745,"resource_available":false,"data":null}},"time_used":4390,"timings":{"blocked":4063,"dns":0,"connect":0,"send":0,"wait":302,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/84222.1781011881923.122fede9.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.062Z","timestamp":1783304818062,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/84222.1781011881923.122fede9.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-165b5\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35400e204e43\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91573,"size_decoded":29035,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64064), with no line terminators","md5":"4ac805aa0d7216d2651fb367a7bb3ad5","sha1":"b21c2154160b9f13c3c27b0ff5b1953e64daafca","sha256":"38c2af4a3a0acc2ea2533b07d3295df6c95cdde2dad5aa094c8f4a088c660374","sha512":"eef30692a0945e399910b75bf69bd8030622d2abf52d872891b58d539bc339db517fe138e8dd104f9860fde0ef1f13739e35735250fb36f0caad603e293c261c","ssdeep":"1536:QcK/KnqHB3vmxuHXvK5+Gruc7iSxTcgO1JwTl0sI5pQiVFFsdt+H6Xk:0B3vywXS5x7HYgODwTl0sgQi2tkkk","tlshash":"0c93e8c4b5f4f5f8279ec5a6973644b8b02527c5b1c8ace0d2e96e047f1ab52b0718bc","first_seen":"2026-07-01T01:07:30.843443Z","last_seen":"2026-07-12T06:54:15.738262Z","times_seen":5,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.200Z","timestamp":1783304818200,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: tT70kNqGUh77adFafFQd71i/XHhknkEc94Q1FRmwNQs51AwKSh30YHbW1CK8CXUQoXsklZWckPCTxE3A63K0Q1Uuz3GdQfZMurIH+uvy0RWHHwA+AlmcDv5YDsFdMEvRSiaREuuHB0Sjclqejf6edFCc9wRynMp6/TIdZDG2noQ=\r\ntimestamp: 1783304818190\r\nsign: 2o3g2s3kf522rm58\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: AGie2yMJWira5SAd6HYFz6PpfnQppmZQ\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:36:58 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: ba81bd7535a74032ad3c78d02849d75c\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354010e84e46\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6691,"size_decoded":7724,"mime_type":"application/json","magic":"data","md5":"6eb8f0e9723833bbbc4ed519266af412","sha1":"f3991727c92924e072ca63c038febf309a006768","sha256":"574fc3e072defcfc27e577a5f0ae6a34b7b10ecae5c06456065dd38f3d08bb9b","sha512":"6e9ed2956fb270a2c63c70594e2be20437db9c8757564f73d4ee73d0023dd0c4f9c26ba607115bb01f0db8344f0ea3312ed2fe5e0f0074fd77ef47bd0bf0016f","ssdeep":"192:VxXaHYhuBHWN/DxxL4jiwSGv3VY5rocHrLI4irw9bdWagTgAGa+:fqHYUHk/DxrwSGv3VY5rTLw4dWa6Ma+","tlshash":"ad22af974b52d7a026cdd5fcb1221cc1299fa2cc40bc9bd5d37480a42eaf750b5dc4b5","first_seen":"2026-07-04T20:42:08.510409Z","last_seen":"2026-07-06T02:27:39.366403Z","times_seen":5,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":574,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/public-resource/holiday/23/h5_zs_jr3.png?version=1.0.0","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.805Z","timestamp":1783304818805,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /public-resource/holiday/23/h5_zs_jr3.png?version=1.0.0 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"e6d8e5adcfa6735a60de9f3c62d1d347\"\r\nLast-Modified: Tue, 26 May 2026 12:06:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xk450lhEJa36flbheqQsc2PaHjC2jSFL0Ib1rJGMqZU3xgBeFiQmMKuJWduRU9%2Bn81sAc61p8JOVFmocSTQ%2F5w571kYdloujEWdh%2FN1%2BdTUz0ROcvgGVIz4ri9y%2FT%2BlhWWzcYVhQRoRLkW%2BLlkM22FEcwwqKw0kJA3wI\"}]}\r\nCF-RAY: a15da479c980dd4d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nAge: 141821\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354011075081\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13854,"size_decoded":14779,"mime_type":"image/png","magic":"PNG image data, 600 x 130, 8-bit/color RGBA, non-interlaced","md5":"e6d8e5adcfa6735a60de9f3c62d1d347","sha1":"67b83f34410dca87ade6d71c1940b7f4f905275e","sha256":"0eb541e570a532b2d452737a3fa8e8ba493dc8b2179e674fc0cf6015172be2c7","sha512":"c96a199d47294a4b6a436875a7ea381b5b79d18326426e5f81e86cd488eb932622e923c04fbe07dc3efdcd2e4ddf04fe3839f98299191b24b44900e9bd6a65d7","ssdeep":"192:iLCrzhZjJ/xGEk4BncuSX3kQfQSWktFdLZYnWKYDEeJXG3HPbX00Z8RuUIerFA7l:FX7Z+3MSXr8I4SXG3HL9SkV7sm","tlshash":"fe52cf55687bda6e70250618dd933d0a866c9697fb133a40e481d9af33f39760cd9f08","first_seen":"2026-07-05T14:43:49.683015Z","last_seen":"2026-07-12T06:54:15.831175Z","times_seen":4,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/51cbeae8-a946-443b-9ffc-2004c4293def.gif","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.088Z","timestamp":1783304819088,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/51cbeae8-a946-443b-9ffc-2004c4293def.gif HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nEtag: W/\"b7ad12fe390d68c88df2db78219cab9c\"\r\nLast-Modified: Wed, 28 Aug 2024 17:27:56 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 141758\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdRDV1xzF%2FekrVCxqKQwJOl7n9nn4Qw7cH%2Ftxx0km6KPy4mQHTHUJfb4inQm83gRXsfktw2%2Fbq2VtLj6j8mwr16jMjf22qqB2x42JRRE1sCpsji6ps2TeJgHUNMDSskFWzB2nJTg2Aly9PyeTHhAPJs%3D\"}]}\r\nCF-RAY: a15da60d5bcb0705-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777619f354012234058\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":302697,"size_decoded":301160,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"b7ad12fe390d68c88df2db78219cab9c","sha1":"078960add6b85bc7199d3cc2de4714ff0e3a24ef","sha256":"a596d3cbec189f8c534cd58299ed7a13e56e515d14be3129984b219461d83612","sha512":"b15aee2efafb21410b7b89c4269f59cb86bafcff8b1f2238ed24c61b0f13959a15355005ff7eb645d8d182f02afe48c8867bf6e22d5d5a401a36dfbf86f7e162","ssdeep":"6144:fBOLj+QpSwjHvIJFo5AWMAUoGwhw2gWcXFyZNDyfIJmFvF:fQLj1pPjHv1nlwIhcXw/8IJ+","tlshash":"66542397426ccc571c4da579e80e3f1ea706556cfd119e3b50c5c4c23928a6dbcb0aeb","first_seen":"2025-07-30T05:00:30.953127Z","last_seen":"2026-07-17T12:51:05.01731Z","times_seen":473,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/569e7fcc-334b-48a4-8dd7-d13008a49f17.gif","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.090Z","timestamp":1783304819090,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/569e7fcc-334b-48a4-8dd7-d13008a49f17.gif HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"5927fcd8ee7a547a0746720c23fd1d32\"\r\nLast-Modified: Wed, 28 Aug 2024 17:36:14 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141758\r\nCf-Cache-Status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rg9ap6r0IUMKQE9ca8BAXq7LTShOzB%2Ftrym%2BWol9aDWPih2miy2m5x4WkJdDi5y5d%2FzKeKaqpcpLUdZgZ5Nnf5BpsINcFuoXwx1aFcOreVpa2PD1PgOImVnxVx8Tv0UbSqyDQ7pezJX7se7k0IYLfVo%3D\"}]}\r\nCF-RAY: a15da60cef02856a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f354012243acc\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295174,"size_decoded":294842,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"5927fcd8ee7a547a0746720c23fd1d32","sha1":"71f69a04e292e69bfdce84147bca4bd45a7d9888","sha256":"f26687795530d7bce3154ccd632807bcefc52aa55f794cdb2991103266e389d4","sha512":"f8c58e07c99d04551f1be395c9fd0524f1c1932e526ba4cf1cf716faba0224ba66844191ee940f2bf794f995b00a765c6b9365e88016558a0e97a4264fc30acc","ssdeep":"6144:Q42jB35CuTlmHax3Yegn+mSTMLHAO3sn+gKq4D0tJijYWIm9+:DMB34uTlm6u+jTMLggs+gK9AtUYW99+","tlshash":"aa5423f0fa3b61789db48de4e58f510d1d093286dcffca1308b6ebd158092616a594fa","first_seen":"2024-09-28T07:14:26.572025Z","last_seen":"2026-07-15T14:42:34.346246Z","times_seen":110,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b0506ddf-52e0-4b2d-8f59-16f795505312.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.861Z","timestamp":1783304819861,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b0506ddf-52e0-4b2d-8f59-16f795505312.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47302\r\nConnection: keep-alive\r\nEtag: \"69bae2574526d5faae2cab421295d6fb\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:22 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKbL%2BfqoCjBxhUJVVwCbNsjXKzHBnuNLXxQTkEykB0iWdy9gDwah%2BJFeA%2F9LV8Ut3JOk5RrxFBnre7xIfl%2Bh1K5%2BPS5sAvYDCiXmnMNr5yeKvh%2BgUBmYlRYrGmfZJXRVoRz2VcW8Y9%2FgPtPnlZnb70I%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141709\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74bba94ddc9-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304821=PHsDDjrz4Z+/+e2eZY4DMVSb4A5xFonTNDligRG26AzxKVwa4ytNuYj3ytelApnXy2LG8zxX7G8HYmU8gOGdms7bjk/WRqKrbFicadW9JXM6el1r3nJHAZvv3ZasudUjd7zyxcD+yN2YW+rwHrldfwh//eEWZ97xgxFHrF8uSUY7SUhO8mptd+HJVELbDSk8\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35401c474e51\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47302,"size_decoded":48463,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69bae2574526d5faae2cab421295d6fb","sha1":"9fbb080feb70d0129b259ee1836a307e2f43a7a7","sha256":"24dc34c37f47f8b318cd186472dfb0aba29bc601bb589497d9131322abf3f12f","sha512":"b6b43f6f2a27bf41323dab6e956cf9e581be28a51078e3ec6568b79a145135dba1644d3e3b8e0a5bb8e7c8fdc132ea34c5002e2c81fa15a9e29e581767b9ad00","ssdeep":"768:3ZnM3sRPLsymAdeJz26xNEyuGpVt/5NS6xUdP8Hx3JZa1pASN7ZWjcTH:JnusBypuGLZnStl8HcjASN7ZW","tlshash":"6223f2c4856c2f711255d3f8ffa06b48c6783940bff8afb69f360a65186d2d2c90a44e","first_seen":"2026-04-24T23:10:16.805393Z","last_seen":"2026-07-17T18:50:30.460271Z","times_seen":655,"resource_available":false,"data":null}},"time_used":2113,"timings":{"blocked":1785,"dns":0,"connect":0,"send":0,"wait":302,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_df036cfa-66a5-49f7-b863-3c22d1a3d180.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.867Z","timestamp":1783304819867,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_df036cfa-66a5-49f7-b863-3c22d1a3d180.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 120978\r\nConnection: keep-alive\r\nEtag: \"1af718e662844a31716cc9bf3248f8e4\"\r\nLast-Modified: Wed, 10 Dec 2025 11:52:31 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2x15PU5jfqOp7fou0Ry0C6uRYQNOMi8URHE1b4aNAaKPk5l63e0i3WwX0mP2YP8BbgvqlgyvujQtTnhbP3rbgYdIsM0ttIyzcsidULsjDctaSLeE6zrKSmmbNTLNV7%2BzlfRJqOkKpYlfXBW6HVuEw8%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141710\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74dcb6a983b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f35401d9e3ad6\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120978,"size_decoded":122128,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1af718e662844a31716cc9bf3248f8e4","sha1":"e54b87093f05f4d0c5d96fbc689f0ed37ffcbcaa","sha256":"670ccce96c9f21fc7364791b4870e1915788e14fb105a16cae131cae271279b4","sha512":"93a7b9e3a5b4438343a8f1abe967cf1b3d21a347b42526dd8604da5f9c953c14ad2dc83bcd7e3f340a9b3b90b9a4c98f90ec88c689875b8e2b0536f0b9ca7975","ssdeep":"3072:nO0/MDrjGP/ngyzlMkxT730AhwPBv78vHWJ8AxCsDozmmeYj:JgrA/nnKBrpvovHWLxCqImE","tlshash":"a0c312ee7ec309b8e112676d12dd07968e16e06f482b0d959e2f40392b02716ef7dc5d","first_seen":"2026-04-24T23:10:16.785822Z","last_seen":"2026-07-17T18:52:03.799318Z","times_seen":663,"resource_available":false,"data":null}},"time_used":2498,"timings":{"blocked":2128,"dns":0,"connect":0,"send":0,"wait":303,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f8306425eba6e0167bcdb25a31b67ec8f","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.194Z","timestamp":1783304818194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb25a31b67ec8f HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: q6lYpQHy7mMuUQ32w5pXpL5SVug3Oa6TgcZlSBWvNejyW7O7/NV7mwow9TI1w6wJV/n4O+GgE0zWMFIg8hfs9LPPhB+kLHxIMI0BDTRtAmHp/Ccz9IMAy4Vi8PQjjaOP4vo0SnpeN1Rj+nhjZ83K6ND96JNvgMm1CPw6vft5dok=\r\ntimestamp: 1783304818190\r\nsign: 1n33116l7ni43l70\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: R3WBdTkXFH3pZGHyNcQ83MAQMhXJ2NSp\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:29:58 GMT\r\nCache-Control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 460949aabb714e0788680ef22bb71510\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f35400f954e44\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4063,"size_decoded":5096,"mime_type":"application/json","magic":"data","md5":"1f12c60583f79272282cd4c4751c54a0","sha1":"4747c6ce58eebb656630985f6752954582286a12","sha256":"828a5605cf56e6e83658de3355885ed3e4d6a5b3ca0cb43ea2aad538635f1286","sha512":"fccd258f73c744f8e789df1f1a93a3014e393731955b80684a7a8c1eb749af98d6bf806559965412daf4ce84607039723063d155bce59a5c8a217466f3e1e5cb","ssdeep":"96:eOGS7hTEAzTi6qcngDyVxtSy8F0gudjORXWaVcTixU/0wBkzu4n79LANSW2lONSq:VP7SaDqcgDMxC0fxaVI0wBkzlSo0NSq","tlshash":"c5c15cd08330e320f624e7dd0e979ac05349194e93fd7602ee2052d66ea42c963ada1d","first_seen":"2026-07-05T11:19:36.707408Z","last_seen":"2026-07-06T04:30:34.930903Z","times_seen":29,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/public-resource/holiday/23/icon_btm_jr3.png?version=1.0.0","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.810Z","timestamp":1783304818810,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /public-resource/holiday/23/icon_btm_jr3.png?version=1.0.0 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nEtag: W/\"a3c26af2c995bbf9b9c4ada63e9e2180\"\r\nLast-Modified: Tue, 26 May 2026 12:06:45 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCf-Cache-Status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMdn3uEZcbnSz5yX2XCQWrkcMMhOQ2XyvjjkDPaUQg8ASShnsnVClgXJ2jqo5GHJL96LBfKmyhsJVzorj%2BTqGM8Av9fVz1Y0QmHYTnRO2ZP6M%2BZTNvyTjeNZo0Ca4FXBBp294Q%2Bd29ZEUn1Xjq75EDs213s0jR%2FQyPI%2B\"}]}\r\nCF-RAY: a15da4799f7ee6a2-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nAge: 141827\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354021994e58\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11334,"size_decoded":11732,"mime_type":"image/png","magic":"PNG image data, 600 x 180, 8-bit/color RGBA, non-interlaced","md5":"a3c26af2c995bbf9b9c4ada63e9e2180","sha1":"c474610ebc685eea834ffb4b47b0c6f3e3da3dc4","sha256":"d8610575c3ab24a0e12b256072b838b10294097c3be15f5e7bf24cfc0e01c63d","sha512":"443a2f35004711af29ccc7163fca57364601f41a725ea491dd8fd1d6f3de826d2c6826cb2fc3c0d93c6c43e4909b72312d2151b8de026cdc62342831cae5a6bf","ssdeep":"192:W7/orfwRvkJvZMptBnz7k9b5hEyC+/NoRBlzomUJ8lMq6dTii2Ywe3Pv58yZA7DN:c/om8ijGb5z9VSlzomUJ8lmDHwC58yeN","tlshash":"e0328d36e7fa5cc72c4d8323354bc182c6ab9db617b25a5732dead26059b51043f2d32","first_seen":"2026-07-05T14:43:49.719623Z","last_seen":"2026-07-12T06:54:15.769105Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4536,"timings":{"blocked":4236,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/css/40621.1781011881923.0ab0fca2.css","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.051Z","timestamp":1783304818051,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /css/40621.1781011881923.0ab0fca2.css HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-1439\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35400e15507b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":1961,"mime_type":"text/css","magic":"ASCII text, with very long lines (5177), with no line terminators","md5":"a0ef4268641ef0b005737ce8cc0c4b44","sha1":"9bb50b9000a419e7a701392b0d7d6c992cf585bb","sha256":"f64c7a7e6ecd620d1c7f8cc67e1eda83a0a115a8d86f3954efdaba3c09d62e66","sha512":"07605ebd7e16aef28f0ad5ed406f29ea9b77e8ba6b2079c810aacf8faf0b4a8d18d4f7775c62860cbf6d4379729a60076103a4daa833c860ddebeee3793ccbe2","ssdeep":"48:ZSPkOO2s2L5Pukasq+nArLkrL4QuQKhUjUkM5P6CdRDRWURcWaTHR/:iOvyP2r4rEDFP61LR/","tlshash":"d1b1412f01703349641bad6807dc67098325d8b399eb37da259d2a0dcbc3f861eb718b","first_seen":"2025-06-26T16:31:28.933081Z","last_seen":"2026-07-17T18:34:30.549765Z","times_seen":3241,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/ecb/8f8306425ea0731361b69124f50b66fa96f8b71569c26a6a0b","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.197Z","timestamp":1783304818197,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /ecb/8f8306425ea0731361b69124f50b66fa96f8b71569c26a6a0b HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x32i.top\r\nXign: hpUL46qBI1lGOiyE9ezdLIQyJKbN6Gm/hTkLIc6cVNiZFa0dehzcPl2YLY2HgEg34TQ/1E8I7Oz3wUfHQGBPL2OGzQKd8s0yw271S3jBmxufyhwQReoVF5AcG5sEvzPYUiqyrB9a5N64MD1HQDM40jDkbR/kIEn2pczgkPLpoJY=\r\ntimestamp: 1783304818190\r\nsign: 87b735r144d96b1j\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: sCwmmiKph42GZpAt4eCSBHjZKHdXbaS4\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 06 Jul 2026 02:36:58 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 7d282065a74d4c61ba752660149f7d03\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304818=Gk1ERAAdkG8KyS9khuSNTLTfH0jJGjYAtjeojIjBuJf9zJFGfKHpyoOC3oTIpceGfAh678wraMJTaUpDpV3PjY8tP0pWlcu+hPAyOy4AUA+1h/sicH1NdZkdhmReGdSBbnxuTzq0ye3v6BaAy8L/+jJ29vIuGKwvuHDGOH0qjyEyRWUi3rNdPQ5ZZGkv5fqj\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f354010cf5080\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4479,"size_decoded":5512,"mime_type":"application/json","magic":"data","md5":"89ce9720b667d112246b3689cf271a65","sha1":"2d22b124a29d441fe06e74f701c4ea90beb5bb79","sha256":"e864dc90f96ce6faa920bac4223ecbff01f429352f1fa3593cad474dac681f3a","sha512":"bd8d0c17d08ee8e7990a5539df0aeabb81c2d65499e1a941db01f4ba6e209c560a67c3838a2c3abcd90fb5b9217b9572a500551b00218b19a0db4f9370edce9c","ssdeep":"96:eOGPuijdq5RAs3ylPEZiTKHWQ7iUPDMry9SCs65vT9Iw7wPpBRWomqIJW3a8WZf:VbAYRjGEZIQ7f7WySkvT9ocom2q8+","tlshash":"55d17c279a1017aad7510cf5120509cc39ecaa0cfbcf8aaac478b5f57adb51ee39cc05","first_seen":"2026-07-05T14:43:49.716739Z","last_seen":"2026-07-07T15:32:12.419645Z","times_seen":3,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":552,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size750x590_1103f977-5f3c-414d-8305-ab6884e8769c.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.898Z","timestamp":1783304819898,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size750x590_1103f977-5f3c-414d-8305-ab6884e8769c.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43614\r\nConnection: keep-alive\r\nEtag: \"f0558545ac271256cf9e2e089c4b5d7b\"\r\nLast-Modified: Sun, 09 Nov 2025 14:30:08 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1R7bgYL8fjYfrLYdt4zJr0agzAdlKjJh2chqq4X51CtV%2BVp44GZR8zr7cL8EoHToq6vMEYqNrvfnmGTsi8bmxCmw%2FL%2FkKpxtIDWMTsPWPpQFaYiBT7nxgg1rbt8SpnWmmJMhfmZ0pQz9OAgsibmAfU%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 141712\r\nCf-Cache-Status: HIT\r\nCF-RAY: a15da74f0802094a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304824=CUfAMstckh1C4/cf51D4d2NzFX5D5d0651fH6bMTWMeMNJb0Tg5ao4Y7HuGB2ZKgRjR2GEZkveykoX009vvY6zmz/6eyGTWBpxINUXZ4dq3TG17pQ2RL9AFcR4I0A06pTqd9sXBCgVhZSX4BbcrwpkLNXW+mpL57HhqYPboPRX4alalNrVj2a8nvyveh9vNA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354026784e5e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43614,"size_decoded":44767,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0558545ac271256cf9e2e089c4b5d7b","sha1":"9594bc20fca63f0cfc8d31eeda8158bab7c54139","sha256":"cdd8fa33c321da25e96a0fff96453673d60d6c59c309aa7a2048e32b78f29e75","sha512":"e9a34139f7f091d9269ef1b87c11fa7900523ac4d286fddb7843e64afb1ea084064441c836ca8460185a800378cfe5153141613f0807d84e0687a1ef41f027b6","ssdeep":"768:c8urDr4gpwG3TMvUToCKvqwP9bDPCqO45+V0D63GQu54vlb:c8urDr4VGj9KPPh3+y2Dvvlb","tlshash":"b41302a684b210b1cc6db573dda010661bb07cb8ad6d5d1e0690e60fadbcdf12ca3e90","first_seen":"2026-04-24T23:10:16.765262Z","last_seen":"2026-07-17T18:34:30.567837Z","times_seen":747,"resource_available":false,"data":null}},"time_used":4715,"timings":{"blocked":4390,"dns":0,"connect":0,"send":0,"wait":302,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-06T02:26:49.642Z","timestamp":1783304809642,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /m HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 06 Jul 2026 02:26:51 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://x32i.top/m/\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304811=UPkpFly0ZgUbmbNPhj/GcOSqPK8U0Me0o6x3jL+0yq1qNBL4ZulfhOSYGdh5YuTjDPWz3lOir81E9ov+c0l4u2q5HtVyT7y8w/hsAKTPl6pNpqKU5+bKdy76+gY67c8ACpnAEKmm1/ZJxd63j3YEFRclpQ2ekdnw+pCv9ScQAhLH+EaLeEhjKfjss5BZcblD\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f353ff4bd505b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T18:40:23.841109Z","times_seen":17321112,"resource_available":true,"data":null}},"time_used":2225,"timings":{"blocked":-1,"dns":1025,"connect":292,"send":0,"wait":303,"receive":3,"ssl":601},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/18936.1781011881923.c4835433.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:55.517Z","timestamp":1783304815517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/18936.1781011881923.c4835433.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:55 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-13e5\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304815=UPV3Ih/MWfTNBFxB3VyHAb63HgZwFJAcLhRrXMmQWY/UTYil2hSf1FX6j/wzA70QDi6/7CZuasu+35X0LKK13TGeYkmkM0jDZxPXXxgjhVAGOXzY15fvx+jOhYEo6/yeqBXB9pegIhh0yah8ZK4LFNtmIrtd0IrinQIPxCyparHMM1PBSq7epNqV6TlPhjbA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354004314e40\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5093,"size_decoded":2672,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5093), with no line terminators","md5":"ef933198ad34a7c7161b09ebc222fa1a","sha1":"dfe195c35c6ec7eb06f6b74d0913dc2f1744644a","sha256":"72d500e30f9bf8e13269348c415470f37f645001ba9d85971caf568021f75b08","sha512":"6d5838601b1a70df73169b6a4ca0242d346d2e390f23345426526934da5f17381d789723790cca2db384ebba800ba6819ee4880e4299cafeb6a11e76a46f478f","ssdeep":"96:0RIRXZ6PHCVBNlteeU4D+XuNSvUPPVor0Wvhl8:0RIRXZ6PmjGeU4DovUPPur9m","tlshash":"59b1fd8cb281b07007af2674862f155bf23f9890a58df46ce1b1e5d07ef151a827be69","first_seen":"2026-07-01T01:07:30.802598Z","last_seen":"2026-07-12T06:54:15.819Z","times_seen":5,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b9e3bfea-9391-46aa-b7db-5466e619a75a.png","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:59.864Z","timestamp":1783304819864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b9e3bfea-9391-46aa-b7db-5466e619a75a.png HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1086\r\nConnection: keep-alive\r\nEtag: \"bf3d921165a3f71e2df3355fa367995b\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:10 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ER6m0XXbZdCrcD%2BBdaZ7u20RHte1QYY29h0Hp79uUWukEA2UhPRgLQ6tRz0I2yitV0OiP1qyfkyIiE9Ybu3DG4PIZKDYYrJVQ6cA0WWQ5tYJY9NusctoG%2BdJG9PskiFGfZXxtMmnaOXHQ6RV%2B%2BSThYU%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 52630\r\nCf-Cache-Status: HIT\r\nCF-RAY: a16626185c9737d3-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1783304822=orxGo3NYbHIFjfDxHIW6J0yYSVN9Ls6kzBEO0/iK9iXnFQg0lVIElYZTWKrSUAPv+y6lKRX1sLGW6rsRuU7580RlEWJxdD9NBATyVe4kc3M2JvqOQWe3q53KGwKZNX0wf97h78DWZ6Q+Ca1mTa0+02X1+MA73p6tgK5g2lzoLjg0SJOhlXiuQ0Kai9nY6XhN\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f35401d35508f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":2239,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3d921165a3f71e2df3355fa367995b","sha1":"3b7cdf04a4ca59b14bc51326218ea1cad70f8f8d","sha256":"4f4109d5d1dbf5144085bb9671dad452cc50bc01fac3bb74eb706042338b0ff9","sha512":"d7d910ee314b0b7dde201bb3c2cdd01e242481487960067c4fa5686a896080436c3e6529f3e0db49628013fa1801562fd206127f840c96ffdc161315cdf82371","ssdeep":"","tlshash":"5811b6ae8ff7e268aca3f51564f5d4a2464d3a52088813c0045611f9860877a9fce9dc","first_seen":"2026-05-02T01:47:15.989776Z","last_seen":"2026-07-12T06:54:15.648789Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2316,"timings":{"blocked":2023,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/css/home.1781011881923.38488e2a.css","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:55.533Z","timestamp":1783304815533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /css/home.1781011881923.38488e2a.css HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:55 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-163b3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304815=UPV3Ih/MWfTNBFxB3VyHAb63HgZwFJAcLhRrXMmQWY/UTYil2hSf1FX6j/wzA70QDi6/7CZuasu+35X0LKK13TGeYkmkM0jDZxPXXxgjhVAGOXzY15fvx+jOhYEo6/yeqBXB9pegIhh0yah8ZK4LFNtmIrtd0IrinQIPxCyparHMM1PBSq7epNqV6TlPhjbA\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f3540044a4e41\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91059,"size_decoded":33286,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"e74f15d7fec8fd844f3f07595fad8d36","sha1":"6b072e1cd8db98eabc09e33e5aaecec0fa1f385a","sha256":"e0a518c123b57bf6db4c12b779cb9414056760733b9d1d59ccd160d4ce0f08d2","sha512":"74d96ef5f45097c02d494946f446bb8a1d5fb7b89389543f9c278b5b93678e4b50e75ae534fa8ded5c2b377381acd47403d8baadcf01676bed44d997eae44d1b","ssdeep":"1536:fwRzO3RM7jufawS2d3a8WiLKbzGhbG9jpXdNdp9khN+sJ/:fBiuSJwLUK09j7p9khN+C/","tlshash":"20933b76a610253db427ca72baf05bd8b524c846d7634a3df2537e25cbc72f21236394","first_seen":"2026-06-12T19:29:57.241174Z","last_seen":"2026-07-17T12:51:05.069473Z","times_seen":580,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/m/undefined","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.122Z","timestamp":1783304818122,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /m/undefined HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:59 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304819=gjQbRyENqCyHq9kux4fLOJgQNzyhDiXYoOov8weJQyMrWNTdrxmurdoPsy/TalX8nMyUf2Ipi7FztKVEKiLgnvuk6c8AlDo+j4tStrbImE5I9yzweYapma9bXKkSL/ov2PR59IhPtuehZqxo7XIjxPTF6Kz4/uorkll1djPFOMzQA3qNRMUQyvV4ibQa8Wqn\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777219f354013b54e4a\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24671,"size_decoded":11470,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"886080ace6e341d83041fb9cab6fe765","sha1":"5a574ce85ecd12df0e7dc823f625a419835f5ae1","sha256":"e3be735996c2a43a47a27cf9f5f0183c27628f24e496e6469cadd77113e67a89","sha512":"fcb22ed8a2bd6c818f4997b3d4b98b2c43a200919d365a29f9e3d17a2f356ad4585f093f1d20183eb2617d34b41a2483dcc6ad65af1ce3bd8c0097d9fb663c42","ssdeep":"384:21ERlxqNBPJ82VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJ8iNYiKop/E6wkpcu2llz","tlshash":"c3b2191a9df3497a2423303a1f7fb20869b0d0134309ed403e4de7594f95aaa56f7bd6","first_seen":"2026-07-01T01:07:30.836706Z","last_seen":"2026-07-12T06:54:15.668123Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1679,"timings":{"blocked":1368,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/kc523-1/logo/logo_download.png?1781011825626","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:58.174Z","timestamp":1783304818174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /kc523-1/logo/logo_download.png?1781011825626 HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:27:03 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304823=CMx9j/EH9f2OZkxqxHJ3Pt4xSS2NCDIcDmXIsJeBvym5jiK4MZV9wsH/qiPCMTW7xoS/P94CoSq9btlVOXqaC5VcVMqlQLoDfu/lbOFOgQdMcolZslBrXZjb16JtAKs6DP1PsV/pm0WjnRr/Nh7NyoltwEn+v7SQSDOKSQxuPMrND7XXpQN5w1ZhGkLiLSI8\r\nAge: 141827\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 776e19f3540236d509f\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":579698,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-07-17T18:34:30.522877Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":6276,"timings":{"blocked":5337,"dns":0,"connect":0,"send":0,"wait":310,"receive":629,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x32i.top/js/chunk-common.1781011881923.b470d60e.js","fqdn":"x32i.top","domain":"x32i.top","tld":"top"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x32i.top/m/","date":"2026-07-06T02:26:52.694Z","timestamp":1783304812694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f38g.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 11:00:20 GMT","end":"Tue, 29 Sep 2026 11:00:19 GMT"},"fingerprint":{"sha1":"84:9B:92:49:AB:E6:C0:02:18:56:82:AD:35:14:26:1C:25:F5:3D:66","sha256":"CC:0B:14:AD:27:BD:40:B1:DA:6F:BA:49:50:93:D7:62:27:88:22:D6:10:0B:B6:77:E9:34:21:81:64:B4:C4:55"}}},"request":{"raw":"GET /js/chunk-common.1781011881923.b470d60e.js HTTP/1.1\r\nHost: x32i.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x32i.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 06 Jul 2026 02:26:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-27606\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1783304813=+UCqAidqXoBC9TalSx0RzBswwqgCIMXyeUrd5PAmgLnOgmaCForPlRYw8xi05x7CcuVKzp/Lta0lWyxED2QIGFqf2XxSQRFEGHprKhdmJsvL1dYunjqv8y8ndsyok/JoNa7PAbFUrxwMp76BlLJRAjxMZS+Iw2CfpCFqq1RGxeCKAvoCOU0krP7k++swSpkW\r\nL-VIA: l1=CJR9oEa4UnlD0OBR\r\nL-VERSION: 1782907133\r\nL-Request-Id: 777719f353ffd373abe\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161286,"size_decoded":36940,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08afa88982cffd7b96a2190cdafe1c42","sha1":"abb87563ff4cd658f4436118c54f3f39c08f74a4","sha256":"8673d3fc3524eb9d8b4020b3da3109aa5ab5e569ed8d0074f2b72b8643f813ae","sha512":"70c9df3dd7b3e3d41a607627c6a2750f43673649dbd55c7a56606a7d3e67382cb2991f146f7ad2359cc5ff1615f9db484b54642917150351017d0fa4385c3d2f","ssdeep":"1536:jBY8bgGcdWUa2UTY6eryXHuLmbErF/G7D1dMI59H64likx/vocGAClVbGD3tFk7u:jBYCRTY6wjFetH64liC/vocGAcgD3t","tlshash":"65f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","first_seen":"2026-06-12T19:29:57.317434Z","last_seen":"2026-07-17T12:51:04.984372Z","times_seen":627,"resource_available":true,"data":null}},"time_used":1748,"timings":{"blocked":1023,"dns":0,"connect":0,"send":0,"wait":468,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-06","alert":"Phishing Block","trigger":"x32i.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"x32i.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}