{"report_id":"8558dd34-4a28-431e-8216-dd926acb1281","version":0,"status":"done","tags":[],"date":"2026-10-09T17:24:15Z","url":{"schema":"http","addr":"xpay-app.cc/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.40.43","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"title":"Xpay","dom":{"size":31299,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25708)","md5":"d4eeffbcd74bb560b13f7e07c7f8dcc6","sha1":"f2af29b89f7275e898c4c4971c0df9952c7653c5","sha256":"c15936f606b28da1d7e45dea82354e174fe132c30c709a54e3bc25c46ec3e128","sha512":"3706175c91dcd687909b4e7bc2d078972c9e8a4d09b61df6a0f72b7a05109f0856670ef09cdd3c4530758eaccb92760e113392871d1c24e8da8c166ac3d70ea9","ssdeep":"192:m1Hm7693YhwKadHB0nfiE9hYGvVLQU0hYGvVLQUZ4hYGvVLQUlUc3e6CsqFpyxW1:mxLp07hfVohfVN4hfVu8qDl","tlshash":"c8e2ff30a695116b0277ebc0e1737f1a72a3e36fca0ba8483eec45905fd7cb8b459564","dom_hash":"domhash3cfdf2ef15ff7cf2a35aea8148c2f088","first_seen":"2026-10-09T17:24:31.07406Z","last_seen":"2026-10-09T17:24:31.07406Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xpay-app.cc/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.40.43","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:24:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bin.bnbstatic.com","ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-03-27","domain_rank":229363,"first_seen":"2019-06-17T01:31:06Z","last_seen":"2026-10-09T16:09:21.828724Z","alert_count":0,"request_count":12,"received_data":24854,"sent_data":6498,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api.xpay-app.cc","ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-15","domain_rank":0,"first_seen":"2026-10-09T16:18:14.300054Z","last_seen":"2026-10-09T16:18:14.300054Z","alert_count":19,"request_count":20,"received_data":208372,"sent_data":10581,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"client.salesmartly.com","ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-10-03T06:55:21.007595Z","alert_count":0,"request_count":2,"received_data":84968,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-10-04T02:16:29.419083Z","alert_count":0,"request_count":1,"received_data":828,"sent_data":768,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mix-ads.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":5285889,"first_seen":"2026-05-14T23:47:06.027768Z","last_seen":"2026-10-02T21:13:15.642191Z","alert_count":0,"request_count":1,"received_data":102813,"sent_data":618,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"xpay-app.cc","ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-15","domain_rank":0,"first_seen":"2026-10-09T16:18:14.296989Z","last_seen":"2026-10-09T16:18:14.296989Z","alert_count":37,"request_count":37,"received_data":6727629,"sent_data":17467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-10-05T16:34:03.690152Z","alert_count":0,"request_count":13,"received_data":1372253,"sent_data":6142,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-10-09T14:08:18.646617Z","alert_count":0,"request_count":4,"received_data":2683,"sent_data":2807,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-10-03T07:12:39.897582Z","alert_count":0,"request_count":7,"received_data":5130,"sent_data":5910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2026-05-14T12:23:01.692825Z","last_seen":"2026-10-03T06:55:21.580349Z","alert_count":0,"request_count":2,"received_data":6186,"sent_data":1259,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-10-09T17:50:40.725037Z","times_seen":3130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"078d34fe7a560aa4c85c171752c9da91","sha1":"d345c9f936a08bd2750f557fe0b527b7ac82212c","sha256":"8d5e76ca949bdb88548b8b3d40f8bb0530f53f1c0e21186b92a07e8b1318c854","sha512":"3791865d2dffb77fe213188ec29b6e0d6e55fb0c4d783209e76bc02eca1e1b44541c6c44efae2f6b1f6f1c2d00f34910abfa8c70b523f43507da4aca58c9240e","ssdeep":"","tlshash":"0ac08cc4a0c26e101602681410af25e4a038442670481b12cc94dc482e220f08233e98","size":140,"data":"","first_seen":"2024-08-20T20:15:32.212744Z","last_seen":"2026-10-09T17:24:31.132414Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","size":19114,"data":"","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-10-09T17:50:40.753631Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","size":52936,"data":"","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-10-09T17:50:40.752898Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","size":50154,"data":"","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-10-09T17:50:40.846878Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"318dadb243b7bae0c06ee5b71574e386","sha1":"5b7485536a5ece433fd9572dddaf84e22c80c783","sha256":"6d27698f1d212ece6174824d08c4ded4ce00f3e16702736cdb3db248c8c61946","sha512":"ab7d2b38196ac26fef86d3b5b19a5c74a130a028aa3889072decf83bc73fd99dc7464f4748fb0d46d557ccfad2d243e836dbca6c85db5449206338fbae75b6ea","ssdeep":"","tlshash":"bbc08cd4a0c72e102626641510ff29e890284026b0485b538ca8d8482e630b08233e98","size":150,"data":"","first_seen":"2026-10-09T16:18:30.316315Z","last_seen":"2026-10-09T17:24:31.133019Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/charting_library/charting_library.min.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-10-09T17:24:31.081224Z","times_seen":1516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/es-BFBd0jvn.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b39d333217ff9b56cd0472e58c4fac11","sha1":"4bd70f8e60ab5ddafa36046fed02dae34b4119ff","sha256":"7f36b7ceaf9deef93dfeeafe4fa41f5e087ff63e9a7b9bd2555ba02aa3eb1ef7","sha512":"52f345221bcf25500de806cb2b6c38bf9ca7aff86e1ee39538f1f398fc495f1d6df482eb07fa985ab075eb6372c42e64553590b79e7eeb9ae22939ac79414ab2","ssdeep":"1536:fj5EutRqEI1DdlndLkzHPB7epp1NUAHVLn4:fjxneZk1epp5hn4","tlshash":"3973f9280dc9ab5614f35315b5cbda2390f84d85e194c01b8bfd87ba62d2f89c3db6b4","size":79158,"data":"","first_seen":"2026-10-09T16:18:29.750742Z","last_seen":"2026-10-09T17:24:31.11561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2da67ed7ce81ca6d9c3bc6642b302d36","sha1":"09e451ab23bb08183caf66313c4b54e75b0dcd65","sha256":"677e788e0e30c1acebc792e1c4b71235457ea575ab8542b18f2d86798798806e","sha512":"261340dfda630202d496678b88a64d827b41fe3cea2d9fdbf09bcff2ef2357313b9a7ff0568c08133f8b67fa2baf788916d10e2d72570091d74a3eb2328e66e7","ssdeep":"","tlshash":"0ec08cc4b1c23d001603685020ff35e89034402678485b03cdd8e8982e620f0923beac","size":150,"data":"","first_seen":"2026-10-09T16:18:30.305125Z","last_seen":"2026-10-09T17:24:31.13358Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-DxbZSAdd.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a9ca07bef0855683f67ebc5f94b33bc","sha1":"37e8284c133ade3bdec668391ee8b20385cfc20f","sha256":"0fc0b16017c29483711acc09fbcb6712ed0f245312505f8c7edf11b2b260f6d9","sha512":"3ebd15f431213968cd73ed07936198a83f0f7e1d3655f7ae287451387e684bce10b8c9fdab1d29ad13d2eaed74522d9ab3aac34663fc5a44d2c2ce169c2085ac","ssdeep":"12288:CwV0Rw8Ztp1fn0rteSw/b/xpnfrPRTUvE26325KjHaDCGOLnNr/Ja3ehw/BDtj/o:eRLnhAt/g6+2hNMN","tlshash":"83c46c4df2a5783693f75490a0e60444626c0b6de00488f1f5bc9eb917b2da2e3b7b7d","size":556891,"data":"","first_seen":"2026-10-09T16:09:38.509986Z","last_seen":"2026-10-09T17:50:40.816258Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4b494494247da8ee189951f939a28f9d","sha1":"ffca8d36574996bedf72d1cab0e8e7c880c4ccfe","sha256":"9c9a1aab72146f51e793e4817e3cc33327eb515f14c1f2670dc06d6ccb7b6e05","sha512":"c5e2c9324726c9ab5ddcdda923ff2b4e7b45e75165dacd625235197d8e8d08db1cc664a4778477208230e68685abeaef1010b000a0fff9d3e10974be5afc6987","ssdeep":"","tlshash":"a6c08cc5b0c62e001a06641018af25e49024402670481b129d94da482e220b09233e98","size":139,"data":"","first_seen":"2026-10-09T16:18:30.262934Z","last_seen":"2026-10-09T17:24:31.134607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b328edef916cc7bf1fdeb389b5661d07","sha1":"be897a337114691b10789de7e814644c5c4cc493","sha256":"55a9f80e9b3f418f07b8b7cffac25b6dfa971b690da09234545508356fb8cc30","sha512":"dc48c85326afb5b2cb99df0fd5b3ca139acac8e3e6eb1f41f40162c4993bec33f39e7f2ff0d7a55a1f350a2d669af2a531755a8fe653762e006613d5f5c7daa5","ssdeep":"","tlshash":"1a01ce7eaceb30230012243a365b24287579a63711c45d8cfe8d0be44f01d384634f1c","size":850,"data":"","first_seen":"2026-09-18T05:08:27.131411Z","last_seen":"2026-10-09T17:50:40.76783Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f1ba516988ee0c299a9c3f93c7497b89","sha1":"91847d50ff7b3e6fb24cc7d0a201bd29d770b0ac","sha256":"fb9a1a1ef0ec77eb68212a4ee282549d7576dec1fdb53cd7dac76429de1449fb","sha512":"61fb5165fbe3f3d17c8b77e1cf835ac4ae50b56df1721ab31825a8592a4ea17e4650b6212ca7bd6b1af867345aad680065b926e898ac1d31a2a92bd4f3fc5497","ssdeep":"","tlshash":"79c08cd9a0c67e201642a81026af2ce5a028403a74885b02cde4d8482e270f08233fec","size":152,"data":"","first_seen":"2026-10-09T16:18:30.288037Z","last_seen":"2026-10-09T17:24:31.135209Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-B-nYIPzx.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3476b1709609e831a9889adc3a8ebd5c","sha1":"80c1fbc5943149b1334a8f42f3ab63b7ee3a13d4","sha256":"8a54dd00c6efdb8d02dc989692da777947e3bcb5b04bfc135d8c13c01b3058a8","sha512":"50c1dfb746dda05c8da39790b53d4b6a9d2b0c71941cdd2465ef3ba2f65ecf5d4423249f0957e590aad51bbf120e3a381743e2ee9b0f1a82a5240748c660fb3c","ssdeep":"","tlshash":"a001f46eed239777495d4154e602e00421061ad0a379a1e0da5c492663f9572ca9f71a","size":719,"data":"","first_seen":"2026-10-09T16:18:29.740821Z","last_seen":"2026-10-09T17:24:31.120046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/platform/deriva/customer.min.js?1791566617953","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d42394d6e411177d6abd215b0c08dd6f","sha1":"01f2189c19bbc26835a60f078da5067a026f8440","sha256":"8685dd592194f86822a10bc2cd8d6f397d9eadd116d1630739f1f908a29cf02b","sha512":"df052f9acf0cb1168d23703226f0cfc8dd00874d817d6fb74ff70de444a833b5e7fc811351dc10d18ceb0a032c70583bef52f30588ff55130f35a73cc70729ae","ssdeep":"","tlshash":"651120471c6164397bd9727b563f99ad3a5d92007004cd20d881d42c2d809e20d9edc4","size":1040,"data":"","first_seen":"2026-10-09T16:18:30.149919Z","last_seen":"2026-10-09T17:24:31.131237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"628ce9a25eb16454795f3af07def2239","sha1":"16141766b4848d34ee8329e0a8227999a8d7a8af","sha256":"8b581e5df0ae22453eb1bce65b39460a8330292b74f09a76311e5957807cb974","sha512":"a1ccb1f5307e9880d93baa73504717fb2c7f2160004ba4f7ec5f5095918757d9e147a792be90781f225541445e7091373c452676afbbc577dce61ba108366b6b","ssdeep":"","tlshash":"76c08cc4b1c23d001603655020bf36e89038406678485b43ccd8d8982e220f0923beac","size":150,"data":"","first_seen":"2026-10-09T16:18:30.255114Z","last_seen":"2026-10-09T17:24:31.135831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0695ab4715af4e40168eefbe6a4f7799","sha1":"06dcbcca990acb2543b168fdfb68d29a1b8ea2cf","sha256":"de559b477e59fd9aa7fec361ab8ade9ed204d3c00bcd74f67fcc71f59cf6cc4f","sha512":"d8b97cb01c4474d10a2bd429e373b837b53f2f656cdca698a06c853d2c6a3260d86e387e4df506e48dc9d33b9296dd175df591858d6e4827337da9c7807431a0","ssdeep":"","tlshash":"4fc080c470d23d101605751552bf65f4d024801774485b16edd4d8553f520bc9233f9c","size":160,"data":"","first_seen":"2026-10-09T16:18:30.367393Z","last_seen":"2026-10-09T17:24:31.136412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b491283dde2ae851f0fabe3100dff719","sha1":"966e149c887005f6b4bc8b6ba6a8b035c91ea619","sha256":"1c9c7369b75eebbacbf4d3967e8f4d0d31863117eb9e138c5409605bd087a8b3","sha512":"2073d2a5fec037fbebf6cbb65fe10c4dab5cc50c26c1e634c661d0fc18613e8207912f872ec58301cb107cb2c92366960afc7a0236716e76f3851b7a5ae3d049","ssdeep":"","tlshash":"16c08cc8a1c23d201602641414bf24e4a024402670481b12ada4d8482e220f08233ea8","size":140,"data":"","first_seen":"2026-10-09T16:18:30.310155Z","last_seen":"2026-10-09T17:24:31.13699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","size":109345,"data":"","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-10-09T17:50:40.81561Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36dfbe483fd9bf6ecfca4eff0b39f324","sha1":"021f19bd8f1f850cda7469eaa3a7cb4797ed03b2","sha256":"2b64f9cc91de67ea1d43011bf8cd49a7ec50089ef0a314282c29b4ce64cb8172","sha512":"abde2264dfbf1f6eee120697ca91a8ffaa19dbb943a499e13e5a7eddd95f63a906cea6d933ece1f20855700116f41e0044d4961af4c8e161dd84eeac228fb7a6","ssdeep":"","tlshash":"e8f05c2f166a7578230b40db863fb9112520a5a5401714a577ccd78cf7d6e6bc0cfb4c","size":570,"data":"","first_seen":"2026-10-09T16:18:30.242941Z","last_seen":"2026-10-09T17:24:31.137559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/vendor-BYq7wSJx.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49e9f3cf6fdc1d23c2ff36f920fa0b59","sha1":"39e6d38192ced754bd7242288a7f00e43998adb0","sha256":"af54200b25d7ad958ba414b503ccdb30cf2a68cbade4fca625310191dc1dace0","sha512":"a942e70db3dd0fab9bca410bfb17ad58bccaeb2cbfc3050143963b24f9e682c81bd7384f3d3aa018b58fe0c5da712cffe325a560d95f773238f4ec2aee0f3f66","ssdeep":"49152:4FOyEm0e9lDckLzFbTB7P6En4ouaByRmUxvXci7Zsm14mF44h/ZaWTPwipvTpuWm:aa54TnPWTsm14mF4zSZcZH3Py4rsm","tlshash":"c8065cd57251b06147a721e5143f1002f3396d49b40e80a8f6acd9eb7dbd88ea27bf39","size":3958863,"data":"","first_seen":"2026-10-09T16:18:30.300133Z","last_seen":"2026-10-09T17:24:31.138784Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e5ba05724fa22b6180caa5bdf6c84a98","sha1":"5e70f99fb3223d98c773931c85d6bca6e3016b64","sha256":"58af7911cd8c130241e9e972d683813d7368b3fc5e34c88453fa1ddbfe3e2b66","sha512":"3c0cd8ca995f28f2ceaf403eccf87578aefbb564552ec502e206087b16a9fb3200b2d26d01a7988ecbd35bf9d244fb6293849d0de7d08ef00ccb7d27a28d1d9b","ssdeep":"","tlshash":"8dc08cc8a0c62d101a06681010af28e49024403670485b469d94d8482e220b48237e98","size":139,"data":"","first_seen":"2026-02-24T15:46:21.712149Z","last_seen":"2026-10-09T17:24:31.139544Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-BdW_Sdqp.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5efc85f400ba14a6d1b469c78ef03085","sha1":"ad6df3e66eb57bce01ee4310c12654cd2039beea","sha256":"40299e69abab37f8293bff0491da76c96e6d946db44f1607826d4668cc1b22ad","sha512":"cb03e896e4f249a0456214c9cd01b7fce47ce6c1855d7bd3f1ba0de39f0a74fa74d4eee515f5fd652e69ab31727c4072330af1c4fd9fced24edfb87f5a94b4ad","ssdeep":"6144:Hu92+00JTD55TMNXbRJcpqvioHUGov8GJaVeeCkbY:Hu921O7MNXbrcpBoH68GkVeeCkbY","tlshash":"63a41941f84a897dd7b7d554509e0800310c7f9be00988a2bafdde562ba7df9336a738","size":464424,"data":"","first_seen":"2026-10-09T16:18:30.139169Z","last_seen":"2026-10-09T17:24:31.116765Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1dfa497d7a8b07185a414466439205ba","sha1":"21706dd276209c356abe0d4f0afe7fa1b338c1ba","sha256":"d1a06887cebea6e13a3b0dcb03b85834f2da6945b72a431e87bea013a50867cf","sha512":"f9e9c2109811c5d45e6a66fa938a6e8e30da5dbb445dde95334bc4d8e006869453154d3547bdbc8146e8f6ee06554def94c2e0b66ec0f85da936d37853a3b3fa","ssdeep":"","tlshash":"d6e061ce74b14d823c4441a4d4c758b974514423881d3908b746dd142fefdddd4b856c","size":394,"data":"","first_seen":"2026-09-15T14:41:05.998575Z","last_seen":"2026-10-09T17:24:31.140316Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-BcEzOB7Y.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdadc0a2dcca3d67032db7ce15c6900a","sha1":"b4f8aacca2f21823f4aa1ca636a39fae116e4dde","sha256":"353d6b3a7054831a4836d8dc5b6c23c20cc64c0e4e82a18c1d8eae30fd67d87f","sha512":"285c682c5589c63daabe977386aed572d3a49e70f6294de9fbf51389910723bb3e558bc0b332b97296180501c297628e431429da6e5f6a353a0e2ad0cd7f1094","ssdeep":"6144:UHbQU7sQzO72ZEVYlpkuMjBPHyeUothTFzI9p+Qz9:wDC6ZEmlpkD1/yrYhJ0Lz9","tlshash":"db44f845b252a43253f281f640760401f32a7a8e7507847cb17dddeb2daed6d72bab38","size":277620,"data":"","first_seen":"2026-10-09T16:18:29.816574Z","last_seen":"2026-10-09T17:24:31.101089Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4d8788761670648886a7ec5f4118e2","sha1":"1524156f8bed7418e07564c0a39217316e22a650","sha256":"ba6c26b3a3262dd69291950045f675df64745fe1f53d81c3c231defda5658435","sha512":"35e020c5819184811b496b2f9018af5f11af1f637799cae2494fdbade75d0c149d0a01828e682ec1e412d95794c940b90a66157cfdf11646947b20507a392ce3","ssdeep":"","tlshash":"c2c08cc8a0c22e101a02a91414af25e49034402670881b028de4d8483e220f08237e9c","size":141,"data":"","first_seen":"2026-10-09T16:18:30.253432Z","last_seen":"2026-10-09T17:24:31.141052Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bbf6b0171f3feb44344ea3506192fca","sha1":"99efd9e3bcf49bb168cb02b97e2307f04ea33c00","sha256":"715e5364252b0b8375c3c24f2786b543e71c49b7c322eba63dfc0f2c34734448","sha512":"372d7173ede30cbb3548d235b5ae63bf959dc9702b238e8433ed2d9bba4658e3fc96e02bad0d182e13a398fa9c186e3b6e8c98d78863e1a45b35d2091e4727b7","ssdeep":"192:UoHXYpBtFRiX0QdIYep3KmWnqmQg2uzB98I6yYH7ltCAwxeon2OyTVzY9Hw6RCjP:5HXYpBtFYXSYCWq5g2hyQmGu2jyijVK6","tlshash":"c3321a193832697556b80c9460799301b5ed27633005d4f0f2fcce7eb695f8782b9eb9","size":11360,"data":"","first_seen":"2026-10-09T16:09:38.599424Z","last_seen":"2026-10-09T17:50:40.801401Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8c023b1220d9969013172954f73470ce","sha1":"86aa58192d2bce92f0d89732989b8e2dbc8839ae","sha256":"a505ee1199830542446c3d2b984e3f5827ea73b90f64a205a0ec88234f809f55","sha512":"9cf809664ba99431381594346be551a91c1bd5834af64f8f9dd6951d311305adcd6c871eeff3ac4257b6f739a245611fd0bb54ea13f9b550ded57764ad14430e","ssdeep":"","tlshash":"cec08cc4b0c26e102a12681014bf39e490244036b4481b128c94e8482e230b08233ed8","size":141,"data":"","first_seen":"2023-06-09T10:02:02Z","last_seen":"2026-10-09T17:24:31.141677Z","times_seen":479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"41e67b88372b675d22c781e17219e3cd","sha1":"9f5cb1b37ac3254d90260d8ca5a80eeb038da441","sha256":"ec2b0f9dd72456b9829aafdfdf6c223fb556d9b5ba084ac23f569e828595ad77","sha512":"0b5e5e4eafbcfdb5e514c036700c29936214f279deaae1131fcf249e99977f4968cec2c1e996fce78c08d7da6a1c0b9b028281dd2217e157141f7230de3bd976","ssdeep":"","tlshash":"9ec08cc9a0c23e701642a81422af2de4a028403bb4985b06cda4d85a3e220b49233ee8","size":153,"data":"","first_seen":"2026-10-09T16:18:30.270351Z","last_seen":"2026-10-09T17:24:31.142194Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc41fc2e7d3f17e2429b7f443de25ee3","sha1":"d7fba0efb98251dee4966db26d33e19ae84f4fda","sha256":"446da0df775eb52282cd83239df9b5405ed2c37041c9a997148d75122d9e74af","sha512":"833ca188d802fcdc2f840b22660ef760720b3475cf9c29f68aed5102b6e0b9c57a520a1547670d33dec3aae0090d949452b4796b086b452333d1533319e4f40a","ssdeep":"","tlshash":"63c08ce8b0c23d201a02b41925bf26e9a0244026b4585b06cd94d8583e230f88233ed8","size":154,"data":"","first_seen":"2026-10-09T16:18:30.29691Z","last_seen":"2026-10-09T17:24:31.142766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/code_project_plugin_g1kwgl3.js?t=1791566618880","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86698fd84bfc45e1d1a0046ae385bc3e","sha1":"c3e1bf145eaf0e8f68a8dfa2359a7e719ca4ee2a","sha256":"d6bec0099cae6c62866e835def82a3c538beed00cd76e3a97927bb340cf6e815","sha512":"538a8afc65110dd9deeb1675b6533a05d0a2d606ee89bac249da87a84b5f463c69833adda39fd94c065584e1112fc32e1385fdcf1a20d2d5e7dc5af2f1dd23d4","ssdeep":"","tlshash":"de80041403155017047f05140111134333d4535015f050110131d01d75705d741d144c","size":36,"data":"","first_seen":"2026-05-14T12:23:11.039703Z","last_seen":"2026-10-09T17:24:31.079942Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dadb543168ead49104bfdbd9a6792ec","sha1":"e107d310f08d785f513df33c57ffd4d5ee9eb38b","sha256":"180bebe289c59cf98a27430d0753a1a50170d40e40524b05c8373160a8696d59","sha512":"ea2db13466c34612bc7f01196882e037fffba5b487a7e1c492eddf2777c6462436a709998f3791b24d952229ea01ef373d1cb9be44a94affab73e92f59ed170c","ssdeep":"","tlshash":"ea311499b9b1b431779508f660bfc58bb5723562380dc000d98fec95b92ce60d632e59","size":1673,"data":"","first_seen":"2026-09-18T05:08:27.365418Z","last_seen":"2026-10-09T17:50:40.746932Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BXdNs9wM.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8503ba82b08b8c99837696a4a0031884","sha1":"43f5c5d00871958d73f78fb61f13317b7e1ce82c","sha256":"532d7c0a97bd72cfcf575b2f5bca87cc519773edc46cd25b7d148edca988bdec","sha512":"aeb3fe11bc6dc994a9f4567e73512b14bdabb63c213ef28002d52e6aa86ccc981f460f4e8ced55a94949b293dc66194dfa7d630a0a711722e7f345f4c473b1a7","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDm:fWYmahMqBDDAx/LANwntDm","tlshash":"757319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","size":79629,"data":"","first_seen":"2026-09-23T21:06:49.600983Z","last_seen":"2026-10-09T17:50:40.74978Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e61a60a08f7337d9e09734beb4240bc0","sha1":"2bf75dc41e8316f21866f4d13fc3e152e59dc864","sha256":"afbc131728ca09b0e4ed7ba10f1d41fa44413d7e7efea71aa9a0eab55a62495b","sha512":"adc9242f6bcfeec7f7c7b2a4f4dc16b38eef6275cf1af35e2ba1cf59a27518742b01e36aee23fd6dce0a0946db4fad490cfe27a2807994d117b547c10dd73a3e","ssdeep":"","tlshash":"f9c08cc9a0c32e002a06a81014af24e4a025402670481b128de4d8482e620b09233e9c","size":142,"data":"","first_seen":"2025-06-17T01:00:47.536476Z","last_seen":"2026-10-09T17:24:31.143317Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/ac-chat.js?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","size":2425,"data":"","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-10-09T17:24:31.129697Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4f4a7b44e04adcd6a0ebc18e563e3595","sha1":"5c74e05fc4ecf3b16ed23e8d6092fb2f3931a00b","sha256":"7af6f0515b27a63fdcc29b26207b82b42a883ced7e5b6c3806184562d2afff62","sha512":"aa100a25c8c2fba565ec93fbb5ccf56bad681872a0196d5cfda8a972cbdc3d8c0c48a9d94c94bbd40dd29b36f40457a6a365d1f624f00b5c77760f8edbfcf2e3","ssdeep":"","tlshash":"52c08cc4a0c32d102612662050af64e490244426b0481b069c98dc482e620b08237e98","size":141,"data":"","first_seen":"2026-05-12T17:29:33.199352Z","last_seen":"2026-10-09T17:24:31.143903Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e082948e3b5d4d10caa5d323f717ec6b","sha1":"44002bd35186dbb792c2f94d098b8835ca8d3647","sha256":"0cf18d620397f670f1d5d31c1b6cbdcf22036a7e7d92f004b408f7793c32213b","sha512":"722f6786466f3a8b1a43dcd78d8bca5fb61999e7f76f953cd189a7d695c99b214ba100b7f58b8d395104b3882ef78502c8c437a4cf07d08e99d26527fd2ceba0","ssdeep":"","tlshash":"dac08cc4a0d62e101612642010af35e49024402670481b429c94d8582e630b09237e98","size":140,"data":"","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-10-09T17:24:31.144552Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c5f1c8eddbd0a8c91ac115d4b743529c","sha1":"aaa4ea7d4acb5a0f0631e6376f0d1cecb21b6678","sha256":"33c3b57fba23cea7ee8880dbc8d411c494152efca60a34e5164970ddb33263b5","sha512":"4992a3f01a22bcf54a61e7090d303140027c6a0c4b2b947071a76aa1680b0b482b925eb6c24e1bd0be01aa0a3a29b262a027befe5528afdba3502209793b2e4e","ssdeep":"","tlshash":"99c08cc8a0c76e001602692254af34e4a0288027b0481b43dd94d85a2e220b08237ed8","size":147,"data":"","first_seen":"2026-10-09T16:18:30.272323Z","last_seen":"2026-10-09T17:24:31.14521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/#/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59794249a649ef2ff00e8bde85a3eadf","sha1":"66d0cbacc312107ce3c0d9fac5409cabf97ef14a","sha256":"e1170d01d9eabf2b1f0b61494219b56f76ded457bec121bf5d0a30f430754228","sha512":"2690fb3ecce0c31df24efccc0be90dc78336aa5b1d0e6961142196166c8e4c18055621f35b4143a5477d3dcc2f14cd3dc9924ece96652c41eb9e3d94925345c6","ssdeep":"","tlshash":"c6c08cc4a0c22e101a42651054af24e4a024902770481b02ad94d8582e220b08237e9c","size":141,"data":"","first_seen":"2026-10-09T16:18:30.283713Z","last_seen":"2026-10-09T17:24:31.14602Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","size":1578,"data":"","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-10-09T17:24:31.097118Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xpay-app.cc/resource/fonts/Arial.ttf","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.329Z","timestamp":1791566618329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xpay-app.cc/assets/index-BO9lpG_z.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab13082-ff9e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ez2nVyHoFpzZUM5IbvjmzIpdCOm0RxuUKT9Vfl0xVNfjCjPDmKvjohvJNbDT3fvW8PgSF3ostI466bp4jE6rI1UJPBTD3XJqqcctkmYdBAnkdP4Jbe5VVktr4bP72w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13048ccc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047724,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-10-09T17:24:31.075292Z","times_seen":8396,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/grid/download.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.619Z","timestamp":1791566618619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/grid/download.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-1ecf\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQbUudAQvCDeV5nqAe6m8NpAg3gJhAHIYf8bPGNHbUOpFtInGFhHqSxF5ulTlK%2BbCriXoiVNIXnZUJihlkAw1kjz6fHUGo3VibW4ADBYCkFC%2BUooHnIlc0FqgycHeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13065de34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7887\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7887,"size_decoded":8581,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"a390c8253a59c6f485df8499f04798fa","sha1":"c87ca55c66fc35069baf84dfc4e62f21c1f09c86","sha256":"27145aae993e65103bc768246b7b5f9bb64faa504f270a5e8138bc26a466c716","sha512":"f750545e77b6b447a20d08398ed5b8289cacf628dc0ce9debadb5d01ff0c1fdb2d2bb4ff648025e703a1ba1cdef2ddfbe97db4f4656809620fcc4f87e20f0e7b","ssdeep":"192:A42IA6Rg7g8T0ZKRvV//mwgRRVdpFjlL9vAi8ldZFkXU1U:A42IvgUShotZ9v0LHvW","tlshash":"1ff17ca6ce198c4fc747b6294583b8c60c2357fb6a373a3fae2b0f8e527c157155241a","first_seen":"2026-10-09T16:18:29.69667Z","last_seen":"2026-10-09T17:24:31.076002Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/LTC.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.636Z","timestamp":1791566618636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/LTC.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 957\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:54 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:30:31 GMT\r\netag: \"db1f13e46508474023e51dac9b924272\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: g_cdj3TjMVGw_vf5Heig0wXuWzyx3JC9\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: RNBqpE28a39ZFd8D0RFjNI3ehQ-Lo2dpr7QtP6mB9irmX5ZBfIwNmg==\r\nvia: 1.1 37798a4f149ea1e0911026d4797dacf4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nage: 16544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":1585,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:24:31.076967Z","times_seen":718,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":25,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/trade.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.652Z","timestamp":1791566618652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/trade.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=4,i\r\netag: \"6ab13082-9af\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0txAbjdvWTGIpYrWlc3i2aBBqXEjZYSfEklROiQF4hRhI%2BpKwPcku8YElhUbJ8RbkXP%2BRZVIWR%2BHPTjELQpJP%2BclTiU7WOxhppqR%2BumG3ERbP55mW%2FG3fWzhHVk2nA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13068e094e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2479\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2479,"size_decoded":3180,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"e3ac2c12921ac226136ca27ef7848b9c","sha1":"5841b18af45e487de19a326844b299dc4065028e","sha256":"d4871c65aeb9565aec29f171956fda3c83eaba774a54c70dc97ae7b8d9d79439","sha512":"815a424be41ea0e85745023e7ebaed2614a1a36672047bf37860265024129f5b619bef5167172e596e83476644bd7f4d7095cee113c7cb6169dda78d2f018bbb","ssdeep":"","tlshash":"e7512a46ac1bed16efdaf3d2dc0bd2052ad5d110078f198cacbee914e63b6147685b38","first_seen":"2026-06-18T16:02:42.522557Z","last_seen":"2026-10-09T17:24:31.077564Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/vendor-tAodn-mc.css","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:36.442Z","timestamp":1791566616442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/vendor-tAodn-mc.css HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:36 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzlwYnlJGO9%2Fp3yngbf%2FlSEtbsMGsO%2B%2B3rwwj2BRRhRnqqnJmKNdlwjROmCoW2rZhdH5XofDDfDNej2j%2FkiZXdKG5Qzd6i84MWnRG1ewdrO8gUYt8xvHLZhKGvMM%2BA%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-1c0cf\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f12f8bd664e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114895,"size_decoded":42703,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"60e63a8455c7554eadecff143b4de662","sha1":"91bbccfe36f0d729c403f3a5dfcb1a0abb398fa6","sha256":"7fb2aa7f2f98edec15504dec43d94a8ead6475c72403f6954fbfdc26989a9151","sha512":"deb79fb6595e5c45626e1809bfe81f0d0ac56cf1a2d6f6b8498c408d94d781af99e8b537ee3b2727cdbbb59b3ddbe2c7f731946e6ba2802078978b72ae951a9b","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX3F1Ah5a4zZ:ZdN0rxmNH9yDWnCR","tlshash":"81b3c4a5e6c4a1fc6f27f2659b87a6d8f23cf661cd01caa4f105511d0ec7bf50223a29","first_seen":"2026-09-15T14:31:02.862826Z","last_seen":"2026-10-09T17:24:31.07816Z","times_seen":6,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.xpay-app.cc/ws/c64914f5-6aa7-49cf-ac66-837569af7930","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.459Z","timestamp":1791566617459,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /ws/c64914f5-6aa7-49cf-ac66-837569af7930 HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://xpay-app.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 89PXepraNOD/RK7U3kZ+lw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 09 Oct 2026 17:23:37 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://xpay-app.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: iTf0Ve0T9Mqe98kCw7a0eBnA4C8=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BS%2B3sWI6B6yIAnMEgjAOhSDQaRYJLFnjHaHNAAD%2FjCO6%2F5bZ8rEtuHQ64JA3Bm8%2FGNdDFlUutKoc8mLDbOMYyNP6tKhWXUs0jkDnJ7po3k%2FVA7g2%2Bdvg216UUS5uP%2BJIfhc%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a47f12ff4bc00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":884,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":0,"dns":20,"connect":16,"send":0,"wait":383,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/common/getAllSetting","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.469Z","timestamp":1791566617469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zurqfZEthUXWa3%2FXJKqohe3t%2FHb%2F4HCY1MABNGlscbSASgZndN3KJAWcYVgUc5MfWW3byNeLhQRjiEE5OCduGEPghwe7kUoA9ElHQfp83nDHeBalPzDByxekdvuOwNMR5Cw%3D\"}]}\r\ncf-ray: a47f12ff29704e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":712,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/TRX.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.643Z","timestamp":1791566618643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/TRX.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1315\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:29:49 GMT\r\netag: \"79cbcbdfcc32e9ed14054fb9f306d76b\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: n6Q72N4CRo3VkIHj4mksUjkTB7ZCHWEN\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: WiKnYACebAH3HoQUuTm6Z8FBObnlNOU6lq5cvdQQtATmK_lYDh5sEg==\r\nage: 16558\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1315,"size_decoded":1964,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-10-09T17:24:31.079336Z","times_seen":1269,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/code_project_plugin_g1kwgl3.js?t=1791566618880","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.888Z","timestamp":1791566618888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /js/code_project_plugin_g1kwgl3.js?t=1791566618880 HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 36\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\nx-oss-server-time: 2\r\nx-oss-request-id: 6AC9231AA846BB3739A33D5F\r\naccept-ranges: bytes\r\netag: \"86698FD84BFC45E1D1A0046AE385BC3E\"\r\nlast-modified: Mon, 14 Sep 2026 14:53:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5566078588811732647\r\nx-oss-storage-class: Standard\r\ncontent-md5: hmmP2Ev8ReHRoARq44W8Pg==\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: YEavCaSwvN4HCzZ8bS-aKox4rGruEAW2xKOBJHe5va0J31CfEIe8xQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":697,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"86698fd84bfc45e1d1a0046ae385bc3e","sha1":"c3e1bf145eaf0e8f68a8dfa2359a7e719ca4ee2a","sha256":"d6bec0099cae6c62866e835def82a3c538beed00cd76e3a97927bb340cf6e815","sha512":"538a8afc65110dd9deeb1675b6533a05d0a2d606ee89bac249da87a84b5f463c69833adda39fd94c065584e1112fc32e1385fdcf1a20d2d5e7dc5af2f1dd23d4","ssdeep":"","tlshash":"de80041403155017047f05140111134333d4535015f050110131d01d75705d741d144c","first_seen":"2026-05-14T12:23:11.039703Z","last_seen":"2026-10-09T17:24:31.079942Z","times_seen":80,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/marginA.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.656Z","timestamp":1791566618656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/marginA.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-5dd\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdYuCb50Irile%2FbMsczoKXPQUVmUsgultB667ulKc8YO2slmz%2FX5j2xCSRCtFldzg0SJhbTYzNAVQxekfjZkaNAX8qibp%2FWCW03fyDwri%2BYPNVCMGbsaWSat0pmPRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13069e114e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1501\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1501,"size_decoded":2198,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"47b6b659b3abe477cdfc31b2f929b686","sha1":"6420a0f1b1c08a1e8b3f1411ca924b4d0a761d11","sha256":"1fffb21923edda484f070010ec4fd797e12e7ca74e1f0c1a0145ab5809dcd14c","sha512":"4b3a6378c3d3f12e34d577e85d6430d4636b66592e5443541b5b31118762f77bbefb409fa8752f05650bf9d69a919ef1bc666cab0ba503ee35d311305193d2c2","ssdeep":"","tlshash":"87311ca74390d7bcc7a0a3bfb56b08d45033cadc09d141f451c95b52c4075d1ed80db6","first_seen":"2026-10-09T16:18:29.94735Z","last_seen":"2026-10-09T17:24:31.080541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/charting_library/charting_library.min.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:36.437Z","timestamp":1791566616437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:36 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EPnEccLTlhUVHSvWctl9xy2KMDJqJWAt86fucThgjQl3ZshCsDq9eHO1wQubngRHwQotWXHa49%2BKH%2BjwIw9ZMuA6mUX5EfielNCeroTl5KCx%2By%2FeUMl6I%2Ff4A%2FKBg%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13082-2a6a\"\r\nage: 4194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f12f8bd614e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4023,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-10-09T17:24:31.081224Z","times_seen":1516,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/grid/plug.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.620Z","timestamp":1791566618620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/grid/plug.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-1372\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8KcTBT6RSLsnzdt9Zm6%2FGNvM5HJD6PeR26XEkyqcoI4GFO2Gte53srOOc4DRPHmF7y1lF1twDT8gZ3aFxHnDfpTUWyVo%2FgUl5veV8D84okn5P887hFf0nEnWnYHGvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13065de64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4978\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4978,"size_decoded":5672,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"219bd6ae1d27f82b72a5879f9aa9e33d","sha1":"38a9b43587e19b65a207b8700699ff0758aa18d3","sha256":"bf4b55eafc64cb050c677bbd7ab12a77d088ef55a655a9ff2b7c4b68a3cd56fa","sha512":"27d6e75a0e3fcd6ceccb750831098d0bf7f9a5422098f8a8214d5f271087dd1f2cd3052fdba7f0ee2229c4ee23b05c6505c392225f61e98e499877458cb90612","ssdeep":"96:+7UmrwfphEbQLzfPg7lCi1j7CoWkCybdAEV9gKDoayL6nhaXATs7K3mcB8K:GFcfUkHf4wo/Cybd9IskATiSm88K","tlshash":"43a17de3f2b93b342683cd654f2a4f183579d665110279be05869cb0459bc1e5da8c2c","first_seen":"2026-06-18T16:02:42.4084Z","last_seen":"2026-10-09T17:24:31.081795Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/tradeA.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.651Z","timestamp":1791566618651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/tradeA.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-5d9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4bpuTBITcyAkeee19AYOgFX%2FfAWBpnXGXdfPgwuwPo1p5YN7EX%2BmJ54tqQFpPhUQrtT%2FkXubpLeavEnVOs00BOd2eWVO8dQLxgFfz7bZgibYlmktJ1ybAVKyWFgtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13068e074e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1497\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1497,"size_decoded":2192,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"5d4d16d01f01a8d418a861f2f0831e26","sha1":"d1b78c5f4f9be0ba8fd2f8446ec343f4f6e785a3","sha256":"33ef6fb80d335deb0eecbde5c508ba2f08cffdad91662fc33bc308131888d13f","sha512":"3e4b9aa27b91e14d78137503b16edc4ce6b64858dcb16ef11e076bd798edd8597e010945d47b70f83bfd1bc44fd1ab6ae0384c25f3fa60658b22791523384248","ssdeep":"","tlshash":"a831f7c71760a8180e7163ab66247443a91ade2370c7a13e62139be04f554a7f5ddac2","first_seen":"2026-06-18T16:02:42.529561Z","last_seen":"2026-10-09T17:24:31.082367Z","times_seen":5,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/plugin-BrcH385T.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.236Z","timestamp":1791566619236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/plugin-BrcH385T.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:35 GMT\r\nx-oss-server-time: 8\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8AE5FC9BFCE3132C18B2C\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15254958038375797185\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: siAwKLOc/5iWX5dXxRsacg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: Zn8Fu_uT7FwkAgTw_gEpmSDPlRil5rzWr2nubxfxS0GgCIJZEiO4Sg==\r\nage: 29884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":328964,"size_decoded":95224,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2203028b39cff98965f9757c51b1a72","sha1":"2937238582042315a986989886fed3e92ec35a5f","sha256":"98d7ef1f37cb27fa4295a5e516f641fd6e6240936d3ed2b6b561fb958e4e6cab","sha512":"4e3f2e0a419d5ff43027e37eced3f4fd62b2758359e8daf6c4b221d66a853eb03358368ae5393975c2c3d74801fe409077f34442aad2958fc3ca01debc305aa7","ssdeep":"6144:JFoXHJxcnD595VSSTDSv8MHz3xQRcOcOc5mjeiwORywd:JiXonF95VSSTDSv8MHz3xQRcOcOc5mjl","tlshash":"a864297ceb10313df937ca116ad0b29c6038a0e7feb20d9dbe557219c2d60c946b5a6d","first_seen":"2026-09-18T05:08:27.044503Z","last_seen":"2026-10-09T17:50:40.749036Z","times_seen":89,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BXdNs9wM.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.323Z","timestamp":1791566619323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BXdNs9wM.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 13:08:57 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8E769A846BB3439368FAB\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16066696494737045803\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: hQO6grCLjJmDdpakoAMYhA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: g-ox4OsmTwdWBdol2XmXGomTUtK20rxrIFObMNwowcfzcMhWdZsh5g==\r\nage: 15282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":79629,"size_decoded":32458,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8503ba82b08b8c99837696a4a0031884","sha1":"43f5c5d00871958d73f78fb61f13317b7e1ce82c","sha256":"532d7c0a97bd72cfcf575b2f5bca87cc519773edc46cd25b7d148edca988bdec","sha512":"aeb3fe11bc6dc994a9f4567e73512b14bdabb63c213ef28002d52e6aa86ccc981f460f4e8ced55a94949b293dc66194dfa7d630a0a711722e7f345f4c473b1a7","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDm:fWYmahMqBDDAx/LANwntDm","tlshash":"757319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","first_seen":"2026-09-23T21:06:49.600983Z","last_seen":"2026-10-09T17:50:40.74978Z","times_seen":72,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.326Z","timestamp":1791566619326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 13:08:57 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8E76965E6673333842067\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11117890345216515431\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: hROW2spQLPFFIc7LAqymaw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: _m-EIHkGAkyCDuvG_IsCR5_WpCOJb7df6vewwMao4sfQKVfXMrukdw==\r\nage: 15282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":52936,"size_decoded":20356,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13923)","md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-10-09T17:50:40.752898Z","times_seen":533,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.327Z","timestamp":1791566619327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 13:08:57 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8E76965E6673333611E67\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17389672731008990191\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: QUYS0PYmdi3UBkqdEfghww==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: 1w_Wl4er4IYk5HoL5cDhK1PiSYwdm0VBC3LZi3aUrgTuiafBihGoQg==\r\nage: 15282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":19114,"size_decoded":7682,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19113)","md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-10-09T17:50:40.753631Z","times_seen":531,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-BO9lpG_z.css","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:36.444Z","timestamp":1791566616444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/index-BO9lpG_z.css HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:36 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxnCcsnWbEPkSBYiQkv8mL0ch2gmD9UiOETpZiKCQREG4njyAf3tVyY6ksjpUtyHXt%2F3UKMn6s%2FBmaXv3P7RNjdPf2M%2FMGk5O%2BfHADt81qP%2ByJBawYsnuDNx08fR2g%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-7ee9f\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f12f8bd6c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519839,"size_decoded":96629,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"632f491462ea06c82e032d25ceca14ef","sha1":"ef59d3cbd5e3d7f34295f843c3479dc914d670b4","sha256":"0f3953ee90986020a81427d2f3de9484931f74ab511cf755aaf097cb7d717e08","sha512":"a7d45ada7a08411cc1aa977d86029490f2862a3817992994d65ff92d1341e1b029c56ec3fa324cd6be9006315512b67c960255559f457e5aa262216370133b26","ssdeep":"6144:njN/9Spd+KmkZ8w71ZACkFDS3vyf58rBeV05TaU+UgW:jN/HKTZ8w71ZACkFDS3vyf58rBeV05TJ","tlshash":"1bb4e869b55001396f33da69abcd96cce12cfe61c8029ee4f242551a0ec7ff72362617","first_seen":"2026-10-09T16:18:29.66927Z","last_seen":"2026-10-09T17:24:31.08522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/common/getCoinList","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.472Z","timestamp":1791566617472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EInOLn4DajnW8VPHCBUOLpM6VA97yUFXZPeN7wZajDbOMF9D6hvJXcxCSBNZIkMpHTk4vcLq2iHOJo9j65lPRaYBCAS585%2FAOtk3b26G1zmGy7lDB4qYHATBSPo6yFYivyA%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f1300ba847131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30647,"size_decoded":3989,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9c4b96aed127b3c68e39ce71044e5565","sha1":"c0a6c1137d6dc241e85d5b5e2c4eb9ad0b08c2de","sha256":"aba8b41cdde93968aedd6e8766a6e417aedc6fffc58d1fbfe5e4d921febeaa48","sha512":"471abeba18025fd63011b490c451476c70278496bd14afd45a73a3eca65531bd09a21269267c96bf11af2bc9e29f6c6a430c755d5eceed1888f9ea81ca8553b5","ssdeep":"192:GX2F9XINEbXTcPXHeVXxBtX0+zXIJVFDXPsPXzflXTSg3XELy3XFupX9B9oXU0eq:wAkGapTnFpgn","tlshash":"04d22155553ce4bdc978d0c11eaf7d26509c326facd98d27d1ce8d8c8ed5ab12a0af02","first_seen":"2026-10-09T17:24:31.086415Z","last_seen":"2026-10-09T17:24:31.086415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/headerSimulate-DWJl-Rb8.css","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.627Z","timestamp":1791566617627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/headerSimulate-DWJl-Rb8.css HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Omdi8X%2BSG2Z6oXQW%2FH5XKmZUYJ7%2FI7IPyX3lW7YZajGUmu5Rtva9DA3Rvw7neUJdmVLa7rJAH6DLsAvKl8ct9bx397KqsdNmD1AuYXStHRPhbezynBrO5IoLOeWzQA%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-2de\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f13002a164e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":734,"size_decoded":1017,"mime_type":"text/css","magic":"ASCII text, with very long lines (733)","md5":"92ef223d6032baae3d36f11525ec83ef","sha1":"3f135a6c83518bc4be79daf88c3e5c4c224fb076","sha256":"be4d0eafcf94e268d6a92ea0beed6d98994969aa9171ef3ed63bfeaf9ce6b560","sha512":"7f00887ed52e7042095c497552a9ce26086822c943da8aeb02d4661ec62a2b769cface0c8ea3063ad0ab164696fc21ccc6b36aa0f4c76ad22c1801fee465bea7","ssdeep":"","tlshash":"10019cb9ba78d0237cb745c6351899dc9a007da79092dfa4d2231971c5dbea71712a00","first_seen":"2025-07-27T10:32:01.660004Z","last_seen":"2026-10-09T17:24:31.087624Z","times_seen":17,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=66c40d9c8c313bfd808cf713624c8994\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619592\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.602Z","timestamp":1791566619602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/log/log?plugin_sign=66c40d9c8c313bfd808cf713624c8994\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619592\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 548\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":548,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlnwSr985yh8htTV8rCyiyGI%2BPnXbr3umN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2Fl5y%2FlXFjI5vjI2l9IAlmMeR9yh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFW0TY%2B0Ca%2BfT6%2Fs9lWyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyQjWrazvsNc%2ByAEgyGcEPnX5t3uwfdyiyAOSM2OaIAs9l2vaM2OhBdHGrnmVfQu41nz%2FyAKhtAyhbC8hf9cZNSHVPQcVfVzwP9cVyAKhf9%2B%2Br3zSyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47f130c993656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":607,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-10-09T17:50:40.838956Z","times_seen":3006,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":6,"connect":11,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.436Z","timestamp":1791566620436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/centrifugo-token?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 1c1423b8cbfd764e2164e326c7d2f364\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b6dee77aba5fa89e26f65fb3ad646b6b"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47f1311ede0723c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xpay-app.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 6924765e-d9b2-4997-bb7f-e492dac89a7b\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"93637080af4b229001a88ac07932ded5","sha1":"c81a93b5c92870ba0b8f2a6b3c86dcb97bdb9684","sha256":"005151b0a4dcb360071c3e967063f6d6420ed14c10d00ab84cd9571ec3932524","sha512":"60b99e3771bf3a447e88a3d54d1cec6cb7909a1a72bb1861b69806f37965f5ef7cfab4c2a5df130ceec89d7ae40d6bb09891404f0a624d87059f6e44636e2f8d","ssdeep":"","tlshash":"f0f0594b7abd0f5271f9388808794db484872370dce48725aa6d50316f5aa14a18354f","first_seen":"2026-10-09T17:24:31.088638Z","last_seen":"2026-10-09T17:24:31.088638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.439Z","timestamp":1791566620439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/centrifugo-token?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47f1311cdd6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":560,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=1\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620709\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.715Z","timestamp":1791566620715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=1\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620709\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47f13136eae723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":560,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=dabda76218bbaaed0b86af28a613e350\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566621210\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:41.213Z","timestamp":1791566621213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/station/log?plugin_sign=dabda76218bbaaed0b86af28a613e350\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566621210\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 507\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b6dee77aba5fa89e26f65fb3ad646b6b"}],"method":"POST","post_data":{"size":507,"data":"data=0qHafQ8hMhHKtTc8f5KWBS%2B8sNvwsNY8BQIABqlWyh8hr3zwsnV%2FyAKh0TY%2B0Ca%2BfT6%2Fs9lhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8yh8hfQXQyAKhyh8hP3u%2FrqyiyQX%2FBXX2yh8hs9%2B%2Btuzaf9XqN9VvyAKhs5OjI2Hhs9HVIAtAI2rAr2vSl2VVreuhr3rvlAcVre6hBdH8PTXG1nmb1nohMhHGlnwSr985yh8hsnI41nz%2FyAKhf3uGrXrErNfhBdH4P9wVPhyiyQIvIQl9l9s9rAvmr2%2BQI9HAMnoql2l5l5ymI2ymsnoSyh8htnVvyAKhsArvrnDSI9uhs2XQs2Rmr2y9rAsarQy5sno9IerhIQyhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:23:41 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47f13168b1756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":637,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47498af492a382fbe1f1e0284161ce1b","sha1":"ebf5aa44439e910c581fdf8dd37e658d3dc81459","sha256":"78c58ad8600afe4a1e0951da8d030411ca35b69e53324c38f7a8c62c6edcbbf7","sha512":"d3a6c6ac6acb5649ef16037dcbbde9234ff08b123d83af3550cb321bbf1ab60c001c174970a6acbd5de6767457d121100bb56c56e88c1c67ecb2d656eff20261","ssdeep":"","tlshash":"d8b012621119010b1f84006f10023754965811804e104340a9f8c510024c9c9a342078","first_seen":"2026-10-09T17:24:31.08962Z","last_seen":"2026-10-09T17:24:31.08962Z","times_seen":1,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/platform/deriva/logo_180.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.222Z","timestamp":1791566617222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /platform/deriva/logo_180.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPmjTMugVSYIFh6rzAYHHn2muTyi9QiN%2Bs4PmZF5b1knEqJfR%2FG5HMKV%2BWyy9ZJ3pCRS7qRNJF2UUFe%2F8tIh9d7UqfcTdQNA%2FcuX9ICj1fcZ6kVn%2BNsk6oW3EVPCwA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a47f12fd98424e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":751,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-10-09T17:28:51.254602Z","times_seen":47757,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/LEVER.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.647Z","timestamp":1791566618647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/LEVER.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 690\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:48:36 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:05:38 GMT\r\netag: \"4dcae47b7d96f2fbb2d801dfd47b5c1e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: oACzLePdzh2djr7fhCtdz_tZCjL_rtOA\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8pVj5DXq_ZOrFvpTryTAA6DB99FUVj3Xi0bQ4P74yANc256u7ZXQUA==\r\nage: 16503\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":690,"size_decoded":1338,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"4dcae47b7d96f2fbb2d801dfd47b5c1e","sha1":"29a20b523a063b8043f3b6e760496c8328c26e93","sha256":"695bf855827cc465acc27a004c5066ef17468d51d3afac72e8b6fd0a80b594cb","sha512":"79aa8c8acbaf7aa42b5cfb8e7ce99b7d21903e9c90fadcdd847ec80e16f9531a5c44446f5febc937053d13ba4a0dc6ada737ec0b229d8ece9346f6009c28c5cf","ssdeep":"","tlshash":"960144adc154a8b4f10e55216c9045c15931fee82888451e4564e5183396a10f6cf2df","first_seen":"2024-11-06T16:41:01.114719Z","last_seen":"2026-10-09T17:24:31.091134Z","times_seen":135,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/platform/deriva/logo.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.710Z","timestamp":1791566618710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /platform/deriva/logo.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-2f3e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0fs96HsvDIPUcIbXVqdGO7%2BH1KoxT%2BXDkYdQBo6KVVs2t9rKbEUnhCzN2b9ddiVMpuHIjotdOaEBqmb%2BCjLVPGVJ4d45%2FEphdfVTfG4rwm6eQYZKSpQ4xtpz2bI4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f1306ee3a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12094,"size_decoded":12793,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"e18a38f6051168b84e32a4e35f59d454","sha1":"e26f133e0cad9817741beb129aecaba62b0399f8","sha256":"57f678f9646a83c0c8e3e6a98bf554378d246d2ab24a7e43fbef054bfdd817eb","sha512":"fbb08679f08bdddab14d301144b72302ce470ba017cc04ea11d811eca1a1b32e1477aff9b0cc699d5448e9e9795ca84e7f93c25ea6c0ea49e15bda0ff833f00e","ssdeep":"192:MSECgOBM7lbzqTvloTnMcgq4YSuhrocvs4Lwvk6T84vTE4/1OTKlL8i8+1:L+hz2vKTnT4YbBs8kvTE21+SL8i8+1","tlshash":"4242bf7f4b50119caae3d6a39228491b7a451d9cd7737162f2cc3ad3d8d801902fddda","first_seen":"2026-10-09T16:18:30.183214Z","last_seen":"2026-10-09T17:24:31.091697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.329Z","timestamp":1791566619329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 13:08:57 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8E76988D14B3932A21D36\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12708522076119217507\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: 8qJFifcjKSlc2ZVLi4Kniw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: 40I4lifRZ2FWUmryJig0WaCl664g9kGf_orFVxWGsUQypoWPc_3zkQ==\r\nage: 15282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50154,"size_decoded":16349,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25425)","md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-10-09T17:50:40.846878Z","times_seen":532,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.365Z","timestamp":1791566619365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 13:08:58 GMT\r\nx-oss-server-time: 11\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8E76AEEA19D3132DFC3DC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16134971315845804156\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VbsXXiLX6p8NP0gV+iTFeA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: uR9GDMa448DLdQ7PVeUEEy5HxIjjZU6M9HGpJ88wSi5IXXZl-K5OxQ==\r\nage: 15281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":109345,"size_decoded":39307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-10-09T17:50:40.81561Z","times_seen":531,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.593Z","timestamp":1791566619593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 05:38:11 GMT\r\nserver: AmazonS3\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nx-amz-replication-status: REPLICA\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 01abec7ece24959c09067a58477de9ee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: Fm7ibVr67RSSWlCJi5cOkPpgYXVNGWpsAgH-2PwiHrsPvpBTuHHRgg==\r\nage: 819928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":11866,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-10-09T17:50:40.725037Z","times_seen":3130,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619587\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.598Z","timestamp":1791566619598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 21:51:06 GMT","end":"Sat, 21 Nov 2026 22:51:04 GMT"},"fingerprint":{"sha1":"DB:AB:9E:78:CB:E8:C8:0A:A9:8C:FE:88:39:5E:BE:DB:7F:20:7E:15","sha256":"0D:B8:1F:90:BF:A4:B5:3E:DB:C8:A7:15:63:42:C3:A0:A8:91:D5:19:74:6C:7C:C6:4B:BD:4C:91:84:69:37:3D"}}},"request":{"raw":"GET /plugin/info?language=en-US\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619587\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 9c2742b45f6c60da20601c7a337d94df\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\nserver: cloudflare\r\nx-request-id: 2e970b6d-400b-48eb-ae3a-676b4e5c63b6\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47f130dec16c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4643,"size_decoded":2608,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"75b19a4bb0c09d707f4f189078887293","sha1":"bec66f15a8e75c46608efb0e898fa9bfac5e57dc","sha256":"8c22776cff2c5f0a3e5811aa4b1b0cccfcd4b206ee6cee8fba26e824b779d7c1","sha512":"703e6dc4884655b68af8c009f1688f9a8d25efbb536935159c33e17c48f3c93e0143bd4c8a82f40ff83570b84d4e196dc962f6dd7118a1a855cb753317075891","ssdeep":"96:Ce9994pvLb2rz9ZTes+KmhMicL/H/ddFPaXZdSDHKY7G:hp6qrz90sp/N/H/FjH4","tlshash":"1ba14330a16bcd23a1d308a461ed9e116d9b9774c1cc8e14eeacde1d89fc8e6a70740f","first_seen":"2026-10-09T16:18:29.716795Z","last_seen":"2026-10-09T17:24:31.093919Z","times_seen":2,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":6,"connect":10,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=d9abae68eecd763d029ff29a2ab24ef1\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620089\u0026_lt=\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.092Z","timestamp":1791566620092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 13:46:02 GMT","end":"Thu, 17 Dec 2026 14:45:59 GMT"},"fingerprint":{"sha1":"6B:52:F9:47:66:41:96:5A:37:0B:77:43:46:F5:FB:DB:96:82:F6:36","sha256":"F5:48:C0:4F:08:39:D0:49:3C:36:E9:6B:31:19:B0:0C:85:3F:85:03:4F:14:0A:44:E9:22:88:E7:1F:D5:28:8E"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=d9abae68eecd763d029ff29a2ab24ef1\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620089\u0026_lt=\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 345\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b6dee77aba5fa89e26f65fb3ad646b6b"}],"method":"POST","post_data":{"size":345,"data":"source_url=https%3A%2F%2Fxpay-app.cc%2F%23%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=799065876c9ecb2ab058b97b5d3acc53\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext="}},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nx-request-id: 2c3f3def-1b40-47e5-9095-327759e481a4\r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: a47f130fac4656b9-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xpay-app.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":796,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c39654077b3b1889392171e2e2614a8f","sha1":"ed7fd275dd55fe5368ea954f038ddbb558a9669a","sha256":"fb6df06f6e528c03837cf32a61983373d7c2b7ffd66012a3bb9b0ae3b077b699","sha512":"233069d24cb29b7f2d3fb0a560964dfef909106bc1870ed212c033d171bd4e2bef5cbc3e12d5a0ee367610a3e1f90172853f096ef9d9db71b76fcc902a03e2fa","ssdeep":"","tlshash":"9fc08c27741d82e72ad1140a40192482126204218fa3a3188cbd82260e9e19433b2850","first_seen":"2026-10-09T17:24:31.094566Z","last_seen":"2026-10-09T17:24:31.094566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":9,"connect":8,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:23:35.932Z","timestamp":1791566615932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:36 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GALwsTY1w9HkqkrRRKCDU03NW4iAVhHSEWF%2BBHatFrlT9cLIClI7VDiahZ21CYD87TROkE5g58xPLnIuaA%2FaW64%2BNjwrVUqdFzt6%2Bz9RQ4eLaJdRD5rpld8YU%2Frk5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: a47f12f5bb624e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4115,"size_decoded":2195,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1735)","md5":"32ec742655faf1c1efe011712f6c419c","sha1":"703f89f26e55d56498384bfdc30ed70d3ec2f339","sha256":"d90b98f2a0298e24f974ff660a6e0baac6a9bed993c6abab724c668f85a3a28a","sha512":"19e5acb5d1beca3955067d349478b4fd6959e87949a412d5d01ed1ab5a30a861e83ac182bfcf3027e79a4f179e3c182a08f7b14462ae1afa1983ac49cd46d454","ssdeep":"96:ol7Xu+zb93YhwQ9aYEeA8Z/Omh70mUsGs:m/b93YhwaadCt0nfs","tlshash":"508131a34ef1990933594239cbe7f0088b219587962a9cacb0cd40ec8fd5f95c9e7775","first_seen":"2026-10-09T16:18:30.111647Z","last_seen":"2026-10-09T17:24:31.095514Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/USDC.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.646Z","timestamp":1791566618646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/USDC.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1390\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:24:09 GMT\r\netag: \"4a0e5e239b274e9ec4a17ac738ab46bb\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: LMAigT3VdSbYQlD0RdT_CyzcgN1amCKd\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: xYbz2evqLv9SaOQ346Uti_LwgfI9XY7DUfAsVWeliF8FtEaAWSXInw==\r\nage: 16558\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":2039,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4a0e5e239b274e9ec4a17ac738ab46bb","sha1":"ba18ca71aeb54d5d2b3f197fdf2bb9b7ecbacab7","sha256":"1cb080bee7d509d8ec9e8eebbd89fd838c36fab0438dedf3d178158fff34eabe","sha512":"0b88ef9224480bde1211e74ee3c32dcb9f36b7dd185c1b22871aa8dee3581c04944964c867bc7c83fcc81337a2a78f0d86d40b2501fcb7e85e17a2b07cd2b826","ssdeep":"","tlshash":"f4210be3c3569f41f71e9ee6c1d809e61c24b441b02127529f05ba15dd2cbc4a6e2fc7","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.096124Z","times_seen":465,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/kline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.690Z","timestamp":1791566618690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fg6QoYGygsfC4d5FE80f2kXzhq3gThND9nnqDCdw49vPtw04f5Bzi0UWPqYRAe28emmyPwAtakutXPQavGDaWcWQ8sLxLr2DfptjuJfeUmJx0XTFpB8fuiF8a7r2thLhjeg%3D\"}]}\r\ncf-ray: a47f1306cb977131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":706,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026limit=20\u0026sender_type=0\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.437Z","timestamp":1791566620437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/recent-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026limit=20\u0026sender_type=0\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47f1311cdd7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":560,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":7,"connect":9,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/SOL.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.641Z","timestamp":1791566618641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/SOL.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 404\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:19:36 GMT\r\netag: \"5e22a9302a4383454bfe530f0ddffb53\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: .y99HULHsmBO8l5_Ll.XajXf2q2ZdJQz\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: PiG1v5sRWeGJTmplA6r3zZtnJ8LmE-zt5ERlNT3P-5zLFleb2M5zAQ==\r\nage: 16558\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1052,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:24:31.096643Z","times_seen":1220,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/kline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.695Z","timestamp":1791566618695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRTPDycX5dqvLUC2blj5UiBKSxG55BzZUXyJ9lnTj5miO6wZ1A%2BtHAwSdXanvwKNaSBQPsmdBH0nc7VcDC%2BIqXC%2Bfch%2F1HMba636SltG%2FSzsabYtu2oFEAy6F26Kr1MpGfs%3D\"}]}\r\ncf-ray: a47f1306db997131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":716,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/notice/getAllNoticeList","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.702Z","timestamp":1791566618702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PVBm8PeK%2FhRtcs%2Fp1uTOYk1NPV2Hz90fhSCC1%2F%2BPWDqNIWs2uuno3UA%2FGbNWHmIjUC42KgOWfyoJ3teOa9Iiji73MzeFGmRSrrPhGLFjUMfOST6ZNyCH1%2BrD%2Fs%2FmmiqUsLQ%3D\"}]}\r\ncf-ray: a47f1306db9d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":722,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.721Z","timestamp":1791566618721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:35 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8AE5F8F7422393846243D\r\nlast-modified: Tue, 01 Sep 2026 02:49:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14896938545536636896\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: +ZiCBLRlxfKRzeVsc2e3HA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: 1V-0uR-jllvwYRAmh3EHgFyuZnxXQjivQ-3VZtyAsHSQEizCVvmHgA==\r\nage: 29882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1578,"size_decoded":1430,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1578), with no line terminators","md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-10-09T17:24:31.097118Z","times_seen":708,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":6,"connect":23,"send":0,"wait":20,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.082Z","timestamp":1791566619082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:34 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8AE5E82114332312E1056\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4629340629526719112\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: Xa21QxaOrUkQS/29mmeS7A==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: axl6Zc3ycE92MDqx3zSUDQPwjhiIecSC7Re2M7K2PeHGuaWGcPLdgA==\r\nage: 29885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1673,"size_decoded":1464,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1672)","md5":"5dadb543168ead49104bfdbd9a6792ec","sha1":"e107d310f08d785f513df33c57ffd4d5ee9eb38b","sha256":"180bebe289c59cf98a27430d0753a1a50170d40e40524b05c8373160a8696d59","sha512":"ea2db13466c34612bc7f01196882e037fffba5b487a7e1c492eddf2777c6462436a709998f3791b24d952229ea01ef373d1cb9be44a94affab73e92f59ed170c","ssdeep":"","tlshash":"ea311499b9b1b431779508f660bfc58bb5723562380dc000d98fec95b92ce60d632e59","first_seen":"2026-09-18T05:08:27.365418Z","last_seen":"2026-10-09T17:50:40.746932Z","times_seen":89,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.152Z","timestamp":1791566619152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 10:30:27 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8C24375AAC53031296D95\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14618663378529148972\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: C79rAXHz/rRDROo1Bhkvyg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: cEQzELPcNOttiesii1Z1JFFfqGRzFvG7Hpetu6oFUqCQTVDBrS-IrQ==\r\nage: 24792\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11360,"size_decoded":5219,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11359)","md5":"0bbf6b0171f3feb44344ea3506192fca","sha1":"99efd9e3bcf49bb168cb02b97e2307f04ea33c00","sha256":"715e5364252b0b8375c3c24f2786b543e71c49b7c322eba63dfc0f2c34734448","sha512":"372d7173ede30cbb3548d235b5ae63bf959dc9702b238e8433ed2d9bba4658e3fc96e02bad0d182e13a398fa9c186e3b6e8c98d78863e1a45b35d2091e4727b7","ssdeep":"192:UoHXYpBtFRiX0QdIYep3KmWnqmQg2uzB98I6yYH7ltCAwxeon2OyTVzY9Hw6RCjP:5HXYpBtFYXSYCWq5g2hyQmGu2jyijVK6","tlshash":"c3321a193832697556b80c9460799301b5ed27633005d4f0f2fcce7eb695f8782b9eb9","first_seen":"2026-10-09T16:09:38.599424Z","last_seen":"2026-10-09T17:50:40.801401Z","times_seen":21,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/BTC.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.634Z","timestamp":1791566618634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/BTC.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1125\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:47:39 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:30:33 GMT\r\netag: \"75f196b437f9d87fdc198bc904c66c4c\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: KEU_GNz.cEPy87FxxsLaGlv3ekYfu6Aa\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: BYhsgPzPZBVdYQWhmFZiM-YxmjmDQ4z8ACaVfkVNXI9AKaluQY_oIA==\r\nage: 16558\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1125,"size_decoded":1774,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.098571Z","times_seen":2096,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/kline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.661Z","timestamp":1791566618661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: es\r\nlang: es\r\nContent-Length: 67\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":30,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLIasdYxQcVQ787QouYj21mO9020ZhLlKGOzh2YeQ4faRmPD94LZa28uUo9Wf1dC4ceZSby5d6o6N2bLvHOctAb1F37pqXDb6csiKHl6OOBjc43n0Zxps2VJ9uAkn9d8JLs%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f13084be67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41639,"size_decoded":11737,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"40a3a4cdd6458dc833c31dd57f5cbf1f","sha1":"78738a12fd51e9d107ecb5e0d3382a941431d8c2","sha256":"50b91a75869f33f33e011490e10eec33febd38e5cba635c9334e37035fcfcd25","sha512":"c0762c2d2366dc3c453c3e4d0ef89071620425febf62ba2d3bd66816931d4a29ac6e8d164069b426aabeea522f431b88852ee674b378e2867b4c3cb697012fb1","ssdeep":"768:CkcfzpWP/26wIHjkzzkFqzsAwzuK3ZFQGGi4l9wMHGIdgm1CfsWNGZJjnV:CkRP/QQkzzcT3YGebV","tlshash":"b913bfb08d4992bad4346c8a1bb7bcd04d157bc776dfef41928b1e1189a3f61c386392","first_seen":"2026-10-09T17:24:31.099086Z","last_seen":"2026-10-09T17:24:31.099086Z","times_seen":1,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/newKline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.698Z","timestamp":1791566618698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /newKline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9irLsFJflyd7G80UusmfbfsLLOabImHlyidaccboUywr26hYEoV5cysACfCg1IUQHu8XdYazgwP%2F40Z%2FHrHOOq%2B1eR7NbXQ4cqLbM8EsrlsNfC6YAgCHPZE8wro7a2cuEYQ%3D\"}]}\r\ncf-ray: a47f1306db9b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":712,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/financial.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.655Z","timestamp":1791566618655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/financial.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=4,i\r\netag: \"6ab13082-88c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhQGQi59H1hpojGx7A%2BM6xOxC0EC61ICLHxDxNZ4Dj3i9xQpT8A52Yu1bpNTEpeiB9BAZJtjcHWtrsRer9XAgaXIXCZN3GmdFhvpQzHTpj3H8c4J2lLwekxRyW1TVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13069e0b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2188,"size_decoded":2879,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"964eb70bebcdfc8e3920b7ee5efc312f","sha1":"d494ea72fd012e650f08ad666de908d5b9e471cf","sha256":"594bc49fd45a71204534f1dcf5628bf1c1357fffe23befaf0bf5a3c19ff80e92","sha512":"2619de514a5a32868549ee293fe9e011d72d2c47e4ab3efdbd19823935cb2f709051c8561c66212229de14b2f37587877fbdc3ce3aac1691ace5b641b6d1c07b","ssdeep":"","tlshash":"9b415a0342f33cb5ed4b08c3a1d81cd6b8e86d4c4606db2aeb4ac9743fae449c5ce841","first_seen":"2026-10-09T16:18:30.103823Z","last_seen":"2026-10-09T17:24:31.100377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-BcEzOB7Y.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.617Z","timestamp":1791566617617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/index-BcEzOB7Y.js HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5to%2Fm24FDdGYKMzSjI1Dhk%2FVV9R9EyA38L9p4rHoeMxRvsIDxMeFzDYibUjIFf5uQZiBNYAYGc5fO%2BFWEBn%2BTiaaTOc2uuHi02l%2Fw9NJiOrmrrdcLuic5eX%2Bb8HgOw%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-43c74\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f13001a084e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":277620,"size_decoded":84464,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"fdadc0a2dcca3d67032db7ce15c6900a","sha1":"b4f8aacca2f21823f4aa1ca636a39fae116e4dde","sha256":"353d6b3a7054831a4836d8dc5b6c23c20cc64c0e4e82a18c1d8eae30fd67d87f","sha512":"285c682c5589c63daabe977386aed572d3a49e70f6294de9fbf51389910723bb3e558bc0b332b97296180501c297628e431429da6e5f6a353a0e2ad0cd7f1094","ssdeep":"6144:UHbQU7sQzO72ZEVYlpkuMjBPHyeUothTFzI9p+Qz9:wDC6ZEmlpkD1/yrYhJ0Lz9","tlshash":"db44f845b252a43253f281f640760401f32a7a8e7507847cb17dddeb2daed6d72bab38","first_seen":"2026-10-09T16:18:29.816574Z","last_seen":"2026-10-09T17:24:31.101089Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/assetsA.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.658Z","timestamp":1791566618658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/assetsA.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-4de\"\r\naccept-ranges: bytes\r\nage: 4193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPSu8qlPLY1iTKnj6UlzLW0Vx6ibCfzSw8JXj0aczkUoJwP44lLcszoHMaq%2B44cRZd2GR0k5kLR9Df%2FDJPfWetdVIp1MNenJaQg29Pr4YP9A7o2KI8HhcBVCVtVqXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13069e144e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":1939,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e9378d93316d74cffa4093dbec691755","sha1":"c273ec651ce7d6ee625d9004e7ba93bf7c5a99c4","sha256":"3720dc0371531d5a5ba9e52146456e820e0cc46fc544198568e74725abb8b5e8","sha512":"abc0d61f97544702ae33ffcd43a1feb45ca63e3b9147d928c5131b206f7da79583d4df285b12b4246af153535f3662d101201ee24ec8d8e047fe713a496b2deb","ssdeep":"","tlshash":"4121e79284945b7b06edf33f4886c187388209f4d3b5536ecf0c03f62e60889b608e66","first_seen":"2026-06-18T16:02:42.339255Z","last_seen":"2026-10-09T17:24:31.101666Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/newKline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.667Z","timestamp":1791566618667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"POST /newKline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: es\r\nlang: es\r\nContent-Length: 847\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":847,"data":"[{\"symbol\":\"btc\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"eth\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"xrp\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"ltc\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"bnb\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"matic\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"sol\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"doge\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"trx\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"blz\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"usdc\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"},{\"symbol\":\"lever\",\"interval\":\"ONE_MIN\",\"limit\":\"30\",\"market\":\"binance\"}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtfjBcBYOb4c9sTy58EuQndizWjqyvTbWqYlIesHbH%2F0S13wb80OdIereuN93kiA1zRIrK%2FmTVkOjOjpRKDIec0%2Bnu938rtfqXnBMOUQTvn8uqDsfc3Lip6QJ2awUBjvszE%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f13080bd47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29450,"size_decoded":7386,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3f4e081dcfba038596d78a8ccc2dda67","sha1":"25973d9b112d9a9c5e15e631ae427e0f9fd1b88b","sha256":"45384558e3def0999cb462aa77fe60fc5a6ac1a0869adae3845b1f32d70dd8ac","sha512":"e7203a85d79f0d6c5a246b20973381263b2ea84e9380854c89ec85d11b0a054100bbab9fe219f161ecacf936258070a73272584bb792498bc8671f1bfbb68f65","ssdeep":"768:/jnroUJn2doo1MeQ85+Z3yb1jQO0tb6e8Hy:78UJyMU1jQOjy","tlshash":"81d2b3709edc81a598348c866fa3aef52c0737c7e6cedda2348e4c1859d6a64d2c53d3","first_seen":"2026-10-09T17:24:31.102212Z","last_seen":"2026-10-09T17:24:31.102212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2495,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2473,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619587\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.600Z","timestamp":1791566619600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 21:51:06 GMT","end":"Sat, 21 Nov 2026 22:51:04 GMT"},"fingerprint":{"sha1":"DB:AB:9E:78:CB:E8:C8:0A:A9:8C:FE:88:39:5E:BE:DB:7F:20:7E:15","sha256":"0D:B8:1F:90:BF:A4:B5:3E:DB:C8:A7:15:63:42:C3:A0:A8:91:D5:19:74:6C:7C:C6:4B:BD:4C:91:84:69:37:3D"}}},"request":{"raw":"OPTIONS /plugin/info?language=en-US\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619587\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 7186d4a2-6d5f-43dd-a726-27ea3fc7ad6c\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47f130c99addfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":703,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":193,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/common/getAllSetting","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.467Z","timestamp":1791566617467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opZDsuPreVQHdxiEaM0pnEvmv8vxmaAGXyYWXHzmktojyX1AF0K5AEPtHFscoExJfdHL58CrCPqeaatbbuCAEMMVf4FqszCzI807nuXlyRtSN2%2BcbmUzAPpY%2Fw%2B17Pq5YAc%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f13006a727131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15403,"size_decoded":4928,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14935), with no line terminators","md5":"863a420efe50dedf8e9f14de91c00344","sha1":"36bb3ab01f50b9259c1bd378d7b0a0d94ecaab7d","sha256":"e52ceda6465696bc2c839900ee5b151418082b956ef99cfe5788f2f2160f9989","sha512":"f5a8894e046d7cbb36c8b753878ec060424fa4ea022e150c9b934eb2f904b3f55908b2fc922ea6cd5e6ca199a4b9078dd41a61f91f6b901db74bbd781c363a22","ssdeep":"192:cAnwC1GA3WNkZhP+EPG+cEoan2Y/vCHytZFrA9J/B5mIZsqakvWzWg42sRD/tD1h:6aAneO2AVDJKMAB119V6MlODp","tlshash":"0d62651835ecccbdd9c729d690e679863b9c2577e168ac09d4eaff2c8ad7570480e10e","first_seen":"2026-10-09T17:24:31.103365Z","last_seen":"2026-10-09T17:24:31.103365Z","times_seen":1,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-DEOOmvTz.css","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.620Z","timestamp":1791566617620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/index-DEOOmvTz.css HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWsJka6xytu09XVyQ1DMcOt5%2BG6HtgewUQ6b0qJLT8wgmxU5Rr%2BO0O0fJTLhJYHsNyLv7h104WIm1aV8QTH6laNcZjdHwIApg%2B%2BTa8H%2FjWRSP7tUtwCWWxvNN%2F%2BRxw%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-1f1\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f13001a0d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":971,"mime_type":"text/css","magic":"ASCII text, with very long lines (496)","md5":"78db1403425772f663b7a8e264334223","sha1":"7922023d2807f78d4972d0b85ff481f2073e01a6","sha256":"0d0ef1f6ac873cb74dad8c2bdc9893f43d2a246acdbd5171f246585dedd4d2d5","sha512":"4b0f81a16dafa721fe8767c809cba35acac33e2e9cc71cebc2bd731be97871de3ef2b27d50d6e31b7fb4fb6d4d83affd194b18d11b195f6125410e07411d1fa7","ssdeep":"","tlshash":"f0f084ace488b23b7d26c8c13d200288c0407c01819baaa0ea47277d58c3a632720328","first_seen":"2026-03-09T14:01:04.824046Z","last_seen":"2026-10-09T17:24:31.104384Z","times_seen":9,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/MATIC.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.640Z","timestamp":1791566618640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/MATIC.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 988\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 12:48:34 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:23:47 GMT\r\netag: \"96661ae9839cb25d5ccd5ca628edfa64\"\r\nx-amz-meta-autocompressed: true\r\nx-amz-version-id: fkOs0OGhd4avwv9InhksDpuxWprDb2su\r\ncache-control: public, max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: N4h8ZjHAZcQ-zVBcEMxu0xcZWGyWJ_LYgJaJIVztSSRxISmOLgGLTg==\r\nage: 16504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":1636,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"96661ae9839cb25d5ccd5ca628edfa64","sha1":"4b39c2aded636e57cefccf39d190d5274c26e534","sha256":"95ba109bb6073cfd498eddd377de0792a78027def314b0e6751d37d03773ef02","sha512":"1119ef04adc7aabb7ccd44154a2213d8ced88e85804b8368275569bfca34f6bb24c71ef2bc5ecd0bfba0232ea9510a938cddf2d7c4a4c6e11bf428a934c6855c","ssdeep":"","tlshash":"491154d7a5cdbd98df10d4f04e38cb8598b022ed9115bd832c5665119957302ddd2393","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.104902Z","times_seen":139,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/assets.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.659Z","timestamp":1791566618659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/assets.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=4,i\r\netag: \"6ab13082-7c7\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEX6lM9GGlTBVxIpgVuUm0voOCbTDHYlPqsxV%2BOYZShCJPYrgP1I8MkOGRz9IEXHQuP3%2BWe1OOFannr0Ne4Z2IUecDZJVoisoNefv8yEi5sX2%2BCqSDsskT5zBLp%2Fog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13069e164e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1991\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1991,"size_decoded":2688,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"6a77c7243abdca66abae76cfd71416bd","sha1":"a51afd06ed304d07391127df741da80c130fcfcf","sha256":"b3545ee5e8490bcf75a50f82261047be2dfd477019da778aaa6e7d074b3787ee","sha512":"5253c469c9de41ce0e8c83385d3266adb1a2d88e42eb5cbb85a3f39ba03b53f6d3736b6b9ae47e4c1d9947d4c41633f89f7d3fbb16e26e6d906213ce28010807","ssdeep":"","tlshash":"03414c5b21f0a467cd6329744ab7860b9dbd000510a4ca98ed9c7f78a01f059ab0643b","first_seen":"2026-06-18T16:02:42.44725Z","last_seen":"2026-10-09T17:24:31.105426Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620708\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.712Z","timestamp":1791566620712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620708\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b6dee77aba5fa89e26f65fb3ad646b6b"}],"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nx-request-id: 773a48a5-647f-4c5a-ad9e-73998de3b07d\r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47f13136eac723c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xpay-app.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":713,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-10-09T17:50:40.790711Z","times_seen":2481,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=1\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620709\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.713Z","timestamp":1791566620713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=1\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620709\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 04a3a3c54c673852051341549d39f4f5\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b6dee77aba5fa89e26f65fb3ad646b6b"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Fri, 09 Oct 2026 17:23:41 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47f13138ebe723c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xpay-app.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 34a0d978-4a86-40cb-90d2-f797638ec566\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":778,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-10-09T17:24:31.106943Z","times_seen":2124,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/financialA.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.654Z","timestamp":1791566618654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/financialA.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-5dd\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFDu8WO9FsaCJoiquyHB1WPvt3Z7TqwEv9BpcCxzY5pow%2BTDLzk9wzKK3N8ZiasgqXI9viFQkQSyDiyZcXkxdzvJ0w8dPMqvGyL6bfRwEaQwpDqBgdlidKA2Tz0wPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13068e0a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1501\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1501,"size_decoded":2192,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"47b6b659b3abe477cdfc31b2f929b686","sha1":"6420a0f1b1c08a1e8b3f1411ca924b4d0a761d11","sha256":"1fffb21923edda484f070010ec4fd797e12e7ca74e1f0c1a0145ab5809dcd14c","sha512":"4b3a6378c3d3f12e34d577e85d6430d4636b66592e5443541b5b31118762f77bbefb409fa8752f05650bf9d69a919ef1bc666cab0ba503ee35d311305193d2c2","ssdeep":"","tlshash":"87311ca74390d7bcc7a0a3bfb56b08d45033cadc09d141f451c95b52c4075d1ed80db6","first_seen":"2026-10-09T16:18:29.94735Z","last_seen":"2026-10-09T17:24:31.080541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/platform/deriva/config.js?1791566617459","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.463Z","timestamp":1791566617463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /platform/deriva/config.js?1791566617459 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gt7pWCofr77gwQqi%2BtwBcOl3zUwJgIOyP7ti04EfwZFyp9rFPu5GCn0b8U3TVOcjwgLajAiAIzFmCejw0sTkMOVls%2B9RseaK%2B8Rbx79tQNeUMZBt3GLB47Zfk3Ty5Q%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13082-170\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a47f12ff196a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":923,"mime_type":"application/javascript","magic":"ASCII text","md5":"2e704d6b6a18d74d60dc0ef3e908d493","sha1":"1cd2029224f7e87d4a47677ff7192d199f721733","sha256":"77018662dde678de0f131cf3d5c274199e70023a918cae021408333763653c4d","sha512":"8fa0389cee092a0a6b6be3cdf6473247077713b194978ff486165ceee341022f16900ab6079448cb0e8dc01f82ef2d55a27865862455faad1acd69cef4bcbe04","ssdeep":"","tlshash":"3be0208e74b58d823c4445a4d4c759b9b8924423c81d390cf74add142fafdded8b856d","first_seen":"2026-09-15T14:41:05.965466Z","last_seen":"2026-10-09T17:24:31.107437Z","times_seen":3,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/common/getMt5Amount?coin=xag","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.997Z","timestamp":1791566617997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrX5hES14blj2YCLoOyMKbFTsZ8ApAW73%2B6hTwxd2WVE%2B4PbNjE01WWuWUTNWKHwko8C6K8n2uHa5Yn8M%2FqqjIiKVEfibuHZIPvnvT0FAFayaOJaucZiWN6mX83ZwimfkzA%3D\"}]}\r\ncf-ray: a47f13027ac17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":712,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/DOGE.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.642Z","timestamp":1791566618642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/DOGE.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2808\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:53 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:23:16 GMT\r\netag: \"d55dd75446d505958e5210985b246bed\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: 4UYcBvJMh_uo_yVng7x5Db27Q1WSKk7g\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 5F2MFkEhUheLewAtBYWx7NRyOysreEkChcN_EnTu0AweD3UfK4vGSg==\r\nage: 16546\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2808,"size_decoded":3457,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.10822Z","times_seen":1165,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/homeA.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.648Z","timestamp":1791566618648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/homeA.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=4,i\r\netag: \"6ab13082-459\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FpRdiFcmsEWoHS5WXL77pwIIHs7YnvII3n4uFfHEfYg1m%2FK9y4EdQaZXyfs7iAmJM4tJ7%2FM9RE7MKl%2Fs0VR8yPS3cxS5hRQOLNG6dNiJC%2B9r1bMsjtivL9RGr94QQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13068dff4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1113\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":1812,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b40c54953a5fb4e293d78e1de8c47a06","sha1":"8de75c24842fa0f57a8323fff3d9d6bafeed5c02","sha256":"60fb37d298ab893416a9037a46ecfd1489d9bc533aaa4c8a87a7fd7db82084f9","sha512":"b25b0f244047c063ee48f0e5a5f69c58177096f4b480b4e6c7ef72f4f2a964fd87b57b00ac8993229eb4cd93246d05e2aba1d0cfe651ba2433b2535f17989c1c","ssdeep":"","tlshash":"722196474ddc7d53f21a5a63e4630940e82a41a04e70e05f4be57600ce239dd4e87faf","first_seen":"2026-06-18T16:02:42.372923Z","last_seen":"2026-10-09T17:24:31.10872Z","times_seen":5,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/kline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.691Z","timestamp":1791566618691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8Pe89g3IWbP819sPXE%2FNnQk8dSwKgeDLR8ViiYUFb1fIyA5a5JMQbSk5sSCeg%2FCypf9kEbCt3yZw1lOjQ3oRND0DskLqsbceBrb%2FmhPICb741LGXtkZjG%2FNyy5IundvOEk%3D\"}]}\r\ncf-ray: a47f1306cb987131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":714,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mix-ads.oss-accelerate.aliyuncs.com/prod/project/g1j7wpl/p1_v2/integration/plugin/image/20260914/1789397611244/photo_2026-09-14_20-29-14.jpg","fqdn":"mix-ads.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.089Z","timestamp":1791566620089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /prod/project/g1j7wpl/p1_v2/integration/plugin/image/20260914/1789397611244/photo_2026-09-14_20-29-14.jpg HTTP/1.1\r\nHost: mix-ads.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 17:23:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 102247\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC9231C048FEF5FC5D92C2C\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"980943F75A8785AD6B6D1416F0D9F7E6\"\r\nLast-Modified: Mon, 14 Sep 2026 14:54:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3943961483481915779\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mAlD91qHha1rbRQW8Nn35g==\r\nx-oss-server-time: 24\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":102247,"size_decoded":102813,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1254x1254, components 3","md5":"980943f75a8785ad6b6d1416f0d9f7e6","sha1":"62cbec057e9de8ce954d7a5f84a9214d13a50af2","sha256":"285a341646f8582f02f8f19b88d6fa811b691b4bdfe134d80e21274a7dcca4f6","sha512":"97a34559f469e98bbe566794e99b730b9e2ccc7d8ed38a9aeb8cdd2d09d772d76f58ec1c8075d4e7696d2947a3049fd91226fc0fee2adbdfd168d8e92f5452e0","ssdeep":"3072:rQ2PtiZV4j0kjl9UQ4mAYHMcV221xaymx:XtVVf4mAYHD42gx","tlshash":"79a302b7b31a6a83c63e313244d74300bd4d7ee46f861b4aab59567364b7b90bc60683","first_seen":"2026-10-09T16:18:29.908624Z","last_seen":"2026-10-09T17:24:31.109209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":3,"connect":21,"send":0,"wait":203,"receive":24,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/chat/widget/code/install.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.174Z","timestamp":1791566618174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqq5v5PhrMk6Vg3ndYQSHqtOSaWlCDt4zZ7m9ONjsJn0TUOXzBd7A56Jgxn7w2lXXCVt5hdRZB08r244ekn4IbXs2DWQlg3Kq%2BGAXf9%2F7NQUVXdunewpGVmN63aSJQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a47f13038c2a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":743,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-10-09T17:28:51.254602Z","times_seen":47757,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/kline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.662Z","timestamp":1791566618662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: es\r\nlang: es\r\nContent-Length: 67\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":30,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPUnPDUSOKhxKA95N744i2UdEYJshb2mcWhONJ0%2BBOZDyh0m9eJhe3BRN88m30npPy0%2FO%2Bl4ogBoZWtWGj%2FKJmjwjgQvW5biZY4ecYNArL4j8KDAfAiWwccQ7lRFoLbF3Ic%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f13081bde7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40175,"size_decoded":11503,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"79685cfa7a8fac188a1e7e6c44118f7b","sha1":"5bc21b847ae4a37d0744ab3b454e783e48f72cb5","sha256":"1ff409fdad351ecfba7893fd3d35f70c13d271ff929f50d133e44080f958f90d","sha512":"3ddcf30d95cf0d2cc1c3085b958fc2e029795214c53b42142ec2c7d61e19a387aed954819d15b015fc3cc748a1c872b1ebefb68788b4b0eb0b033770cd1a492e","ssdeep":"768:gtjPQI+YttfdUwuVY2NWg+VMuhwSvqKbTEK6oUJO:xI+YttlUxVY6Wg+VMuBqKUK5UJO","tlshash":"6a03bf755ab9a4e9f5349dc69ff39ee20c0233cb57dfea42458ed8125990321c383b92","first_seen":"2026-10-09T17:24:31.109723Z","last_seen":"2026-10-09T17:24:31.109723Z","times_seen":1,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/notice/getAllNoticeList","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.668Z","timestamp":1791566618668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: es\r\nlang: es\r\nContent-Length: 2\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g30iAjI2e3iPvTYWJZwiY2r8VEEIRwuUkOeBqoAAIZH6v%2F%2BiqutCvkdsLCe%2FTLsMzz5liMMHdySHkD2%2F8H0N%2BCxZWz8V61wOqo7Yc4fkuihxsqucyna0lUxCiLT5xFTWS9I%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f13084be77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101,"size_decoded":937,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"928103611a5ee5b8cea2c97b9638947b","sha1":"729f35dc56d0435896966717c499c0a1ca2acbbe","sha256":"478c72c7cac5cf12b49d05089bc8df4af280e82b4803e66072439e005a2bb2f2","sha512":"363512abc6121571e2a03071741c382fc61a070dd38253f9527381bde0f2d59c31c7067614c887fe302205a1ab3f2edc8b211886c0cef48511bc7c7f8ffd3f61","ssdeep":"","tlshash":"05b0125278e894817033a846415601044af0134c25540904a9dd9138d70833afcd3434","first_seen":"2026-10-09T16:18:29.931011Z","last_seen":"2026-10-09T17:24:31.110824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/newKline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.697Z","timestamp":1791566618697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /newKline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8a51Hu29Ntg8Rr7%2FdVIXw0cGoe6Mblrb7BgisZ1LkoPkxdvp%2BdLo9ubfaOjR3ZxIBUEjueb6LffL39pM7FxQu28qkhINOrtkx4rsPMNRJtIZc15C0iL89WoTteg6T9Kml3g%3D\"}]}\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f1306db9a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":710,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":1429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.238Z","timestamp":1791566619238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Wed, 30 Sep 2026 05:38:12 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 01abec7ece24959c09067a58477de9ee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: t81R9UXUPv8-3HEvDYAR38av9nde7TEcGubGYPUxsGSsr3GXtfPy0w==\r\nage: 819928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47223,"size_decoded":47881,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-10-09T17:50:40.796221Z","times_seen":3649,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":36,"connect":43,"send":0,"wait":26,"receive":42,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/ETH.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.635Z","timestamp":1791566618635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/ETH.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1100\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:30:28 GMT\r\netag: \"8658d5935ab59ee39d15c39226279d46\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: fcMwz_FrxevnVgNtIlzpA9y6vfUJIaPK\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: GXvwzeKc1ksYKDOje5EYYYbXi-t9zivc9QFV3hZpI0dlheM4tg6zww==\r\nage: 16559\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1100,"size_decoded":1749,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-10-09T17:24:31.111894Z","times_seen":7852,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/XRP.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.638Z","timestamp":1791566618638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/XRP.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 953\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:41 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:28:04 GMT\r\netag: \"92f9d15be55070c0f267e7b9609211da\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: QRK6OD8vVyictvg2hsHVXOfI_qefjrI8\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: teU4x0YVy-uBmwdYYskVKq2Z_eGLEAyloVFyFBhdJlM0W242Bt6vHA==\r\nage: 16558\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":953,"size_decoded":1601,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:24:31.112416Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":37,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/BLZ.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.644Z","timestamp":1791566618644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/BLZ.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2875\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 13:08:48 GMT\r\nserver: AmazonS3\r\nlast-modified: Thu, 06 Jun 2024 17:25:46 GMT\r\netag: \"0f51074728ea7a0b05e3faabed2712c3\"\r\nx-amz-version-id: egHG0Aao3BZ6jsZ00StEmgqwaC2mYguT\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: T7sqavqotypa84PZOCY8wTMSdWoBN3VpJCsigsqzTypD2_JwC8iCfw==\r\nage: 15290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2875,"size_decoded":3450,"mime_type":"image/png","magic":"PNG image data, 49 x 49, 8-bit/color RGBA, non-interlaced","md5":"0f51074728ea7a0b05e3faabed2712c3","sha1":"ebeee75be591c3f38f0f2f321479906fe77316cf","sha256":"af3c20d9c5337d8c37cf2f13fa20420a57be06558cd847962992be261dfe0df4","sha512":"c7c68d9a9b4282002e940ec9af3106cc5c08fee1e706d31bd5806e17ddb1067bdfb0904e0e2c639bd17f5b8e2d7a87d0d958ee9e90f8e349ce7c3faa5ee9a3ab","ssdeep":"","tlshash":"9b514b8f84703c403c60883be9e21638acdaff825fa9536eb6984b541c78795d8ddd24","first_seen":"2024-11-06T16:41:01.071927Z","last_seen":"2026-10-09T17:24:31.113005Z","times_seen":32,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/margin.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.657Z","timestamp":1791566618657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/margin.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=4,i\r\netag: \"6ab13082-88c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uE2Ap2hNzk7obkbhuwLGxUCfjbw%2Bk1PDvuawZFdLS5D1TZ8sxhfvlQqtvcXA2dut4ri2oDQnR1u3j0LHzWwX7tJZqGJIFSwvzyI6%2F9bP22pRDZ4QkQc9J6CN1FoAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13069e124e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2188,"size_decoded":2881,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"964eb70bebcdfc8e3920b7ee5efc312f","sha1":"d494ea72fd012e650f08ad666de908d5b9e471cf","sha256":"594bc49fd45a71204534f1dcf5628bf1c1357fffe23befaf0bf5a3c19ff80e92","sha512":"2619de514a5a32868549ee293fe9e011d72d2c47e4ab3efdbd19823935cb2f709051c8561c66212229de14b2f37587877fbdc3ce3aac1691ace5b641b6d1c07b","ssdeep":"","tlshash":"9b415a0342f33cb5ed4b08c3a1d81cd6b8e86d4c4606db2aeb4ac9743fae449c5ce841","first_seen":"2026-10-09T16:18:30.103823Z","last_seen":"2026-10-09T17:24:31.100377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/ssc-iconfont-CvtfPMD8.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.234Z","timestamp":1791566619234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/ssc-iconfont-CvtfPMD8.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:35 GMT\r\nx-oss-server-time: 13\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8AE5FAFCCE6393869DAD4\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2681771549310603774\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: PobtdwDKoyu/AB0zRTW4zA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: XoP5I44TMj8sjRfiqs4iKXgAefz82LqcjQd9IMRkYbVqBKUu2HkBwQ==\r\nage: 29884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":149811,"size_decoded":66407,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3e86ed7700caa32bbf001d334535b8cc","sha1":"a3877d3becda80e835f0e5050408a8868a742166","sha256":"fa2e8e908d997d5c56f36a8071254fea91454c787c4c880e30ffc879ac661723","sha512":"4355e6eec3ab00b907c23d724b1befa5b14d66f9f279b87195086be554cfaa014c35983eb5f80137539a2ff203b92f42f53af6656488521d236cf41c9f9f413e","ssdeep":"1536:JunTDOzLoiyVimLONTaeMxv0UqGgzlfzLSqFpFWGFeFjF4FFcpWtE+uV+F8oe5Iz:JFoXVdU6xcnnz9u+V","tlshash":"7be308bcea5115ddfe39ce47271072189c3630effef44d98aaa632495be548cc5a0878","first_seen":"2026-09-18T05:08:27.214854Z","last_seen":"2026-10-09T17:50:40.748424Z","times_seen":89,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026limit=20\u0026sender_type=0\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:40.434Z","timestamp":1791566620434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/recent-msg-list-v2?login_token=cd6c63f6f99e8f7bc9d2133329529ad7\u0026limit=20\u0026sender_type=0\u0026chat_user_id=c1152bcbe67c56ce9719ed1bdfd24ed0\u0026direction_type=0\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566620430\u0026_lt=cd6c63f6f99e8f7bc9d2133329529ad7\u0026_u=b6dee77aba5fa89e26f65fb3ad646b6b\u0026_xma_=661577 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: a4eea22a5b08113a258139a4d20af161\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b6dee77aba5fa89e26f65fb3ad646b6b"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Fri, 09 Oct 2026 17:23:40 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncf-ray: a47f1311ede2723c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xpay-app.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: c27b1f90-4a4b-43ee-92b7-44c24e98dddd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":764,"mime_type":"application/json","magic":"JSON text data","md5":"78d539ac5b6a06a8bd02b3ace8debb63","sha1":"8e22651d8d1e678777cfebdb96983cf7df6e751a","sha256":"d817b79090a73b71e09ad6e2daa2c137408a7cfb7916aef50da18a1b1b0229f0","sha512":"e821cc4e11e272ac7ff31855b135a17839c3032c8d1e2a89683b7e937ac1443f8c7732821bf10fe3f120b05c9c5325e74f6b7616a478e5ff9c98ea2519e92a96","ssdeep":"","tlshash":"5390021218281c560b06a48a74091b0591d4114049141621cd8c5158870945c6582521","first_seen":"2023-05-07T20:28:16Z","last_seen":"2026-10-09T17:50:40.790127Z","times_seen":593,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/platform/deriva/favicon.ico?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.224Z","timestamp":1791566617224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /platform/deriva/favicon.ico?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkuoVo%2FTzy5kNNfvf9WGpF2UYn3ihcNNoXat%2BnQkjk%2BYpXKUx6kbdm6YYnX5POu0HWS0EfkxXKzhAwVLAisLh6FxbBMAGPDwzImHeT0iztWn5rzXogmXf8Lc0HoZlQ%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13082-423e\"\r\ncache-control: max-age=14400\r\nage: 4189\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f12fda8434e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":4176,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"40748a69ee7b6046d0f2d05d258fc22e","sha1":"ee7076a41be081392a4cd3410fa366ce3ddf3494","sha256":"7147af87fb99381c58908e0d682b178b32de9c4d6bebe49ddb01ed51b76a2fc8","sha512":"45e61b22fd146dc5a892bab4f065000c04b02baa57864d98e4b130f694f9d724ca0a3d6dfafcfc80c0ce20bbae99cd580b7d2e43629993283ade6a9220155a6c","ssdeep":"96:MzxSAobKDCyLK0V33ZmGyQEq026PBW6gO3L:MzKuDPB33ZmTQEq0XsG3L","tlshash":"94724d02d119cafff861473449c396493515be94ab5b18556bf2ffb6b5be3250dc8300","first_seen":"2026-09-15T14:31:02.8561Z","last_seen":"2026-10-09T17:24:31.114566Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/es-BFBd0jvn.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.195Z","timestamp":1791566618195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/es-BFBd0jvn.js HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yV4Iyb7VHEnp9Aaln9hsidmuEmpqILQXj5YwIv%2FeH6eFPVFFvBnn3%2FGuAiUlA5NjaQQE7X4qMIsE%2BJhoTVnYlbV%2FAlWsyY4eNaMuSZLnvZettbSvmNPqGxtuU4HpWQ%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-13547\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f1303bc5c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79175,"size_decoded":23052,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64617), with no line terminators","md5":"b39d333217ff9b56cd0472e58c4fac11","sha1":"4bd70f8e60ab5ddafa36046fed02dae34b4119ff","sha256":"7f36b7ceaf9deef93dfeeafe4fa41f5e087ff63e9a7b9bd2555ba02aa3eb1ef7","sha512":"52f345221bcf25500de806cb2b6c38bf9ca7aff86e1ee39538f1f398fc495f1d6df482eb07fa985ab075eb6372c42e64553590b79e7eeb9ae22939ac79414ab2","ssdeep":"1536:fj5EutRqEI1DdlndLkzHPB7epp1NUAHVLn4:fjxneZk1epp5hn4","tlshash":"3973f9280dc9ab5614f35315b5cbda2390f84d85e194c01b8bfd87ba62d2f89c3db6b4","first_seen":"2026-10-09T16:18:29.750742Z","last_seen":"2026-10-09T17:24:31.11561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/BNB.png?2.0.1789997225903","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.173.161.86","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.639Z","timestamp":1791566618639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/BNB.png?2.0.1789997225903 HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2560\r\nserver: AmazonS3\r\ndate: Fri, 09 Oct 2026 12:47:40 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:30:22 GMT\r\netag: \"cb84d3ca48a52e3df1025731a8bef4ec\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: VPOEiAD2nY8z9QSV1.wLDACbBRxBtI9s\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b692bc875a355cf4bcfdf091c20312fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 1uwLbDu5thed_rv4RjUf9wtzPMX3TeokE4xrKtnT2akiaPKvU-W9xQ==\r\nage: 16558\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":3209,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-10-09T17:24:31.116223Z","times_seen":1812,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=f9df2a3941a1313cab2f1888539d2fb3\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619593\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.605Z","timestamp":1791566619605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/log/log?plugin_sign=f9df2a3941a1313cab2f1888539d2fb3\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619593\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 608\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":608,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlnwSr985yh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCk8BAlqBAubl2fml2D5IAs5M2RkIhypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWBS%2B8sNvwsNY8BQIABqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHaf9Xbt3VwrCyiIe6kBdHpP9tbr3u4sCyi0qHhfQzSf9XqNSIafTYWfGohMGphs9zW19VVfqyilC8hP3zAsnj2t3zqsntVyAKjbC8hsSXqfQX%2FtuIAfQV8tdyiyhypyQtVPQXqsNcEP9khMhH9lhHzBdH5r3wbfQX%2Fr3XqN9aWr3DhMhH513uvPSfhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47f130c993756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":607,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-10-09T17:50:40.838956Z","times_seen":3006,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":201,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-BdW_Sdqp.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:36.439Z","timestamp":1791566616439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/index-BdW_Sdqp.js HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:36 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LJdVCOlF8RjLnCmFjmjiKOCFOmPQBhbOQZluP%2B0fitTvuU6Qkiv0vODsS6VWSg%2FcNPDhIF3%2BhFPB5dkt62N3v%2FdtYxEGntOZwUmYec%2F9pjzg0cBjRctNXTkmwQqqg%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-71628\"\r\nage: 4194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f12f8bd634e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464424,"size_decoded":117428,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64555)","md5":"5efc85f400ba14a6d1b469c78ef03085","sha1":"ad6df3e66eb57bce01ee4310c12654cd2039beea","sha256":"40299e69abab37f8293bff0491da76c96e6d946db44f1607826d4668cc1b22ad","sha512":"cb03e896e4f249a0456214c9cd01b7fce47ce6c1855d7bd3f1ba0de39f0a74fa74d4eee515f5fd652e69ab31727c4072330af1c4fd9fced24edfb87f5a94b4ad","ssdeep":"6144:Hu92+00JTD55TMNXbRJcpqvioHUGov8GJaVeeCkbY:Hu921O7MNXbrcpBoH68GkVeeCkbY","tlshash":"63a41941f84a897dd7b7d554509e0800310c7f9be00988a2bafdde562ba7df9336a738","first_seen":"2026-10-09T16:18:30.139169Z","last_seen":"2026-10-09T17:24:31.116765Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/vendor-BYq7wSJx.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:36.441Z","timestamp":1791566616441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/vendor-BYq7wSJx.js HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:36 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b28bX2m6vYBk6bVdHRP2QMF3uPWB%2BnQynjuoM7l5n%2FepqSDev3F3gd32ay4GKMrRQ05p9sv%2Bxk8lpf%2B3HH5wsUyIfQeYJDPAMLxd0klNQWs2lUscs4IToCFCMAnwFw%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-3c684f\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f12f8bd654e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3958863,"size_decoded":1163758,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64365)","md5":"316caddd2c73e785de401c6cad944d07","sha1":"bbc362b676dcd940537c964c51b1f2ac46688902","sha256":"8c9ccc3c3a23756f315abbd84a78b917dd8a6303057a57b3bab4af74679b8a49","sha512":"d4386bc8c32d60c637f20134f523cfb84bee38df6148396b8310301e2e66ed61a98f1e0fbb93e3fe55a732011d9a19a8fb3b10b6460fa45d6291d7282d63fd1f","ssdeep":"24576:4FOyEm0e9lDckLzFbTB7PjpxN8K3Bn4oua5HyRmUxoMb7ciLnZsm14mF4G:4FOyEm0e9lDckLzFbTB7P6En4ouaByRN","tlshash":"d8253ac976d2f06107a764e140bb0007f3396e59740e84a8f1a9d8eb7db9d899277f38","first_seen":"2026-10-09T16:18:29.663488Z","last_seen":"2026-10-09T17:24:31.11733Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/common/getCoinList","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.474Z","timestamp":1791566617474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFoSr%2BWl6p%2BzK7j%2FqLtQdvCD9U%2BXee7Zxyxz6KXnaZR9wuonTqvPZGu1q9XKaMjMjb797m%2BMJOy1P9koXXjFY5V4EQTCuOyzOoQs8KDVw43jAOM9ePWWRpdBxH4LKcd%2FQsc%3D\"}]}\r\ncf-ray: a47f12ff4a3d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":718,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/grid/recharge.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.621Z","timestamp":1791566618621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/grid/recharge.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-19a9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEVNPpeOigzGy99nVpEJ9DwM9y6%2FoPoPKHTOEx3DaxJKyhDG%2FOl0LYr7ptVxY5G3A27MjFRXBWqH0fsmYlxLsckfEkKSFKLlwPE8HPGXNJknPSjC1qA0JK54oQq4fA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13065de74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6569\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6569,"size_decoded":7263,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"c017b1d7f8260f5f5c620addf50d34be","sha1":"d836e68f355ad816aba997e79473a25f2366d62b","sha256":"1bdb0e75f16f94d9288a19c6df478724beaacc86fc358a9239060ce9cb5126af","sha512":"87d221cea5e3d35c553af7d065757aec37054e28767f9776c3351bb92ed5c3eda0d5dd58a0ad1b153cd81c00095fed47ebb9b906c62f806e2ceb054709e4d806","ssdeep":"192:6JKvdNQpvxOy5+gE/bJPR4q2/V8HiweMhg:6JK1UvEy5+tJyq2VdPgg","tlshash":"81d1bf737104b4b0aa392a726175c3d4e9fd7430019fcc528b669acc08e8d8a6ab4ded","first_seen":"2026-10-09T16:18:30.080196Z","last_seen":"2026-10-09T17:24:31.117882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/tab/home.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.650Z","timestamp":1791566618650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/tab/home.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-70b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D7iDRAgnFhGnpoITrWnV54VR7hNZpel%2BGHdLLScck0YVh6mdMsYZ0%2BK2KTFIyKV%2FR3b8MK%2FRQtPKCDKJxFN6F40GRPdfY4y8ItH1wUNlVaPvsuLFZs0nNlCU5qfcbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13068e044e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1803,"size_decoded":2500,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"be16135a66a0b6f9b51f8e2c55b053db","sha1":"15d8c034f18b952ef9f8a9b718dc7417a2a83849","sha256":"87e511ea401d7d67749c34bb6a8934db885a904eeccc60c2275fa5cf648ee0bf","sha512":"c3ec379b5c846d2d1245ca3ab02a8c4f15837d74171309714b1310161e4f59fe387bdb0233039b71fed507448e76ac2d865b03fcb09803a24671441fea2b35d4","ssdeep":"","tlshash":"d5310967a233cb4882e890ade0299e538b82011f22a6352900907ea90f6290df17c7c6","first_seen":"2026-06-18T16:02:42.394211Z","last_seen":"2026-10-09T17:24:31.119003Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/common/type/defi_activity_type","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.704Z","timestamp":1791566618704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yh5dWazR8e1hDJt55CBBExKQqKPPhwX2HzTjH4TjP25RBoQKWO%2F411a5mB5WaCYSVWFUKC0Z6RrFH87CBVOO4lTTV67sLe%2Bh8ThL%2BLoNgBw0Npl%2BknK6ZPIFrhADcJmNACM%3D\"}]}\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f1306db9e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":714,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-DxbZSAdd.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.434Z","timestamp":1791566619434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/plugin-DxbZSAdd.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 10:30:29 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AC8C245F9AF893433CEB11F\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9418835807800073087\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: ipyge+8IVWg/Z+vF+UszvA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: gwN8bjzZKkHUboMDCdxECiOVijRxjRvhPLT907su6J9se2Kp3XYgAg==\r\nage: 24790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":556891,"size_decoded":191560,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65426), with no line terminators","md5":"8a9ca07bef0855683f67ebc5f94b33bc","sha1":"37e8284c133ade3bdec668391ee8b20385cfc20f","sha256":"0fc0b16017c29483711acc09fbcb6712ed0f245312505f8c7edf11b2b260f6d9","sha512":"3ebd15f431213968cd73ed07936198a83f0f7e1d3655f7ae287451387e684bce10b8c9fdab1d29ad13d2eaed74522d9ab3aac34663fc5a44d2c2ce169c2085ac","ssdeep":"12288:CwV0Rw8Ztp1fn0rteSw/b/xpnfrPRTUvE26325KjHaDCGOLnNr/Ja3ehw/BDtj/o:eRLnhAt/g6+2hNMN","tlshash":"83c46c4df2a5783693f75490a0e60444626c0b6de00488f1f5bc9eb917b2da2e3b7b7d","first_seen":"2026-10-09T16:09:38.509986Z","last_seen":"2026-10-09T17:50:40.816258Z","times_seen":21,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=c2aa3e858ee80f1e248dd15d88189489\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619594\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.606Z","timestamp":1791566619606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/station/log?plugin_sign=c2aa3e858ee80f1e248dd15d88189489\u0026plugin_id=g1kwgl3\u0026over_time=\u0026env=chat\u0026_=1791566619594\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 351\r\nOrigin: https://xpay-app.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":351,"data":"data=0qHafQ8hMhHKtTc8f5KWBS%2B8sNvwsNY8BQIABqlWyh8hr3zwsnV%2FyAKh0TY%2B0Ca%2BfT6%2Fs9lhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8yh8hfQXQyAKhyh8hP3u%2FrqyiyQX%2FBXX2yh8hf3jar9V%2FN9VvyAKhr5uZt9tplqypyQuAt3VWPhyiyGY%2Br9Xn1nXSyh8ht3zZrnkhMhyhBdHa1nohMhyhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nset-cookie: ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b; expires=Sat, 09-Oct-2027 17:23:39 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a47f130c993556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b6dee77aba5fa89e26f65fb3ad646b6b","quoted":false,"path":"/","domain":"salesmartly.com","expires":"2027-10-09T17:23:39Z","raw_expires":"Sat, 09-Oct-2027 17:23:39 GMT","max_age":31535999,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"ss_uid=b6dee77aba5fa89e26f65fb3ad646b6b; expires=Sat, 09-Oct-2027 17:23:39 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":812,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47498af492a382fbe1f1e0284161ce1b","sha1":"ebf5aa44439e910c581fdf8dd37e658d3dc81459","sha256":"78c58ad8600afe4a1e0951da8d030411ca35b69e53324c38f7a8c62c6edcbbf7","sha512":"d3a6c6ac6acb5649ef16037dcbbde9234ff08b123d83af3550cb321bbf1ab60c001c174970a6acbd5de6767457d121100bb56c56e88c1c67ecb2d656eff20261","ssdeep":"","tlshash":"d8b012621119010b1f84006f10023754965811804e104340a9f8c510024c9c9a342078","first_seen":"2026-10-09T17:24:31.08962Z","last_seen":"2026-10-09T17:24:31.08962Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-B-nYIPzx.js","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.619Z","timestamp":1791566617619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/index-B-nYIPzx.js HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qp93uaN57OYEy%2FiQib0%2BRSmvYY1c6PYYSPFySJnlrwjKDG3V9PFm5ZvWxbEBqHRmoQiqlt0HIf47x%2FgG8e3NtwZIHcMwA5nWKqjQkMCY1q12KWPMWLcBvv66MEJ08w%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-2cf\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f13001a0a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":719,"size_decoded":1170,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (718)","md5":"3476b1709609e831a9889adc3a8ebd5c","sha1":"80c1fbc5943149b1334a8f42f3ab63b7ee3a13d4","sha256":"8a54dd00c6efdb8d02dc989692da777947e3bcb5b04bfc135d8c13c01b3058a8","sha512":"50c1dfb746dda05c8da39790b53d4b6a9d2b0c71941cdd2465ef3ba2f65ecf5d4423249f0957e590aad51bbf120e3a381743e2ee9b0f1a82a5240748c660fb3c","ssdeep":"","tlshash":"a001f46eed239777495d4154e602e00421061ad0a379a1e0da5c492663f9572ca9f71a","first_seen":"2026-10-09T16:18:29.740821Z","last_seen":"2026-10-09T17:24:31.120046Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/fonts/DINOT-Medium.otf","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.331Z","timestamp":1791566618331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xpay-app.cc/assets/index-BO9lpG_z.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab13082-11d88\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59t9UPOrUNmKWWUixslUXd6qV8t7xRd4vH3ueTPccWgZAe7uCyGSe2ujCF3cEfbcI4LUiamReTcJxdPwYgOW29pHL3o%2F3VF1SbefcVv%2BiQT2xAwU80P2a%2Fu3WVsdQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13048cce4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":73812,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-10-09T17:24:31.120578Z","times_seen":7741,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/svg/212/custome.svg?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.618Z","timestamp":1791566618618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/svg/212/custome.svg?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzRGgBs5HpX%2FiEIU%2Fa5C5%2F0tdCBSLod%2FzWFRXW76WnSX%2FXRQ6jkNgeFdETm6e31Q4G9%2BhrMkM61JusjCvrPjb6QQoZwsp%2Bp9iq8GU%2BsnAFXxW2DvgWtS%2BBV2kzmLOQ%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:26:27 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13083-3ce4\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f13065de24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15588,"size_decoded":5049,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c32db503db273119b15cc56c41a98f1","sha1":"46bfd5bc309d7fd1cd90270f8fa3e46375d1aedc","sha256":"278445aa809068f0cbc63d7e66a0f82921bae2c4cbbe4bf9dc83341acb516e74","sha512":"dcd80d79729fdd4c5a2fee266d8523b52302414cc6dc74c70d46d850dc164ae0a62157cb388c683fb4b89a322fbf8b34380c6a9f13c5d151c729ffdd293ea07a","ssdeep":"384:tEr7qnUsbhnHbXY9RxPMk067KcSpjAkXqB9hjXBFKybzVni6oChbKgpGE8hLkgXC:kuU2HbXY9RxPMkd7KPL6BFKyb6g4DRkv","tlshash":"2d628be8d6a433e57184d7ab40c22d853df83cbe7d33a21ae46b4582172e5da053e85f","first_seen":"2026-10-09T16:18:29.852828Z","last_seen":"2026-10-09T17:24:31.12109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/images/212/grid/withdraw.png?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.622Z","timestamp":1791566618622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/images/212/grid/withdraw.png?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=5,i\r\netag: \"6ab13082-14f6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuoDrFc0kvT%2FXnrIKsm%2BUpmk6Bun06tqd5QlQFgKdFrgeojqd8jikgOH1AJycfkG2lyhZoybA5QOcurGnC0QV2phkrqScHv3oCs0P5FbDGOltq48KvYAwKn2jkFMJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f13065de84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5366,"size_decoded":6060,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"9de0961e3dacdbf00d88912b620f049c","sha1":"68ed35b085e7efe80d621f49154d1344ac13a88c","sha256":"faec69966c2f5ff09f6687be58c1c035ef934afb9c7c757e870107b441e04257","sha512":"8ade94849e4e95ee93fb188bf86a8dfa8b4f1873773434550a64b84fa51969702dc3111ad4c4f16c1017601f4e4b7dd1ae27f5b1b9d47cad13189a31c1254575","ssdeep":"96:Rs3a+BK/me6VAxTXdv2mwiaaapwJ7j8tTitwVPPI8Gdsyv5f5v:Rs3nBK42xTpbaaFwPmvZZ","tlshash":"3ab17e606e3d664a8695dbfb1f2540e26b02a7eaca471352f37790c40d243d2f0cb7d2","first_seen":"2026-10-09T16:18:29.821569Z","last_seen":"2026-10-09T17:24:31.126348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/resource/svg/212/moren.svg?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.637Z","timestamp":1791566618637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /resource/svg/212/moren.svg?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2F2RxfsBLYdyBzD1KDIPGzjAsWNKDVXe3XUecVOdno6V1%2BSCuMFtsrQyc2bKAMhA0e%2FUwU4hEs0UMFgWJjWfGKTTsBxK84zOcrInTQYhgGpLlYCQo1Pxb4KEU1qO9A%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:26:27 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13083-17f\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f13067df84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383,"size_decoded":915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72202a80a59cc9f38dc7d80c0c2f4ecb","sha1":"17579846bd828162af61626fc375c8db501d7145","sha256":"9646ff42942e2df2d6b23cd7346d904f28c0dfac553ccbed6777f99b78b1cd2d","sha512":"0c89cfd20666ab70a074273fd2ee5963d234624027b9921635d83ee0629e757ae457a85afa67c074052e162b5efeaf013fdc91394c3946484df91d3ed30fbfa2","ssdeep":"","tlshash":"5ae0d8a55cb94c17840a46119fef5588a57cf2c7935540eef35424f20d301ad5ace96d","first_seen":"2026-03-09T14:01:04.808183Z","last_seen":"2026-10-09T17:24:31.127035Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/kline","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:38.664Z","timestamp":1791566618664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: es\r\nlang: es\r\nContent-Length: 67\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":30,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:39 GMT\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLcrdK9rBNPUBo%2B7HAw3BVZc5FbwPcEpW86zufKJw7L8P4mJ9jdNajPDn4FyAE%2BnnWqJZLHwy9vapig0XMc60V3mz9AOE1wwdnzUbYDSmZ4a8ozEns4DDgb0tCugJcpq8bQ%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f13084be57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35702,"size_decoded":8350,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fc363a9e95da0e153fb69d5f21108a3c","sha1":"ed70c187cf2b8c3d941f1f536d44ae0450f58e7f","sha256":"c77eb05d616cc8e2c1ee685e01684a54b96c718232c513c561a1e3ffbb7ed825","sha512":"15ecc9d0d3c432f4541ee7e951be5f8507901749ad3f6d9d649498a2415098050f5c8b9a62b91a38e53bd75abaaac07124900f46f5d5b50ec94f116eee8ae640","ssdeep":"768:+lMOUXPVMgOASQwGzvrNA6UAqZx0kMOtQj6PCOF8ikYhB5Hzfjc3bh+TFg2L323l:QMOUXPVMgOASQwGzTNA6xqZx0kvOj6PO","tlshash":"24f2f978f9e8c0e9d9298e86bfe39cb0491733d766ffd955318a90315ad432392493c2","first_seen":"2026-10-09T17:24:31.12763Z","last_seen":"2026-10-09T17:24:31.12763Z","times_seen":1,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.105.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:39.109Z","timestamp":1791566619109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 06 Oct 2026 00:00:00 GMT","end":"Wed, 21 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:A3:8E:58:51:BB:D3:63:01:F3:04:F6:82:90:E7:24:3A:25:5D:BB","sha256":"EC:4D:2D:8E:F0:58:20:33:F5:29:82:AA:4E:67:79:59:F9:B9:27:C2:C5:86:BE:C2:DF:03:3C:33:C3:F5:96:B6"}}},"request":{"raw":"GET /chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 850\r\nserver: AliyunOSS\r\ndate: Fri, 09 Oct 2026 09:05:35 GMT\r\nx-oss-server-time: 2\r\nx-oss-request-id: 6AC8AE5FDA989C3833B63044\r\naccept-ranges: bytes\r\netag: \"B328EDEF916CC7BF1FDEB389B5661D07\"\r\nlast-modified: Fri, 09 Oct 2026 09:04:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1234926626382590416\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: syjt75Fsx78f3rOJtWYdBw==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8dea89f951a7387e4ebbfe70f982f4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nx-amz-cf-id: nwZdO6jQF4N3euc6SG6wVa67QLZa7NON5DitEpOJ0ZyvZI5ZPAnRIA==\r\nage: 29884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":850,"size_decoded":1564,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b328edef916cc7bf1fdeb389b5661d07","sha1":"be897a337114691b10789de7e814644c5c4cc493","sha256":"55a9f80e9b3f418f07b8b7cffac25b6dfa971b690da09234545508356fb8cc30","sha512":"dc48c85326afb5b2cb99df0fd5b3ca139acac8e3e6eb1f41f40162c4993bec33f39e7f2ff0d7a55a1f350a2d669af2a531755a8fe653762e006613d5f5c7daa5","ssdeep":"","tlshash":"1a01ce7eaceb30230012243a365b24287579a63711c45d8cfe8d0be44f01d384634f1c","first_seen":"2026-09-18T05:08:27.131411Z","last_seen":"2026-10-09T17:50:40.76783Z","times_seen":89,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/ac-chat.js?2.0.1789997225903","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:36.445Z","timestamp":1791566616445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /ac-chat.js?2.0.1789997225903 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:36 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYbLvEjPqy0Q5VcjyQbI9NvMxeg2zZxVNqfJEhtSfgq%2FiVe1E%2BwkNhglqID1QCPXs52JS4fXDRty1kwArVNeGD485itGRJIzqYi70nALezS%2BSDC5DKlPvpqDtXg2hg%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13082-979\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f12f8bd704e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2425,"size_decoded":1667,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-10-09T17:24:31.129697Z","times_seen":25,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/user/getCountryCode","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.473Z","timestamp":1791566617473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /api/user/getCountryCode HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfddFGVqQvfPD3vxMNiBtmR%2BJ6uG4B68gZoUS3RLlrl65obF%2FiMh%2B1mqirjZhj2mT1iH4A5NAIhnSJ%2BREg3N0MSS%2FDm9s1HyUbFDPTJipdpia%2BVBMf4zzlhf1Gz0Vis1ST0%3D\"}]}\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f12ff4a3c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":718,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/assets/index-eaAmUr4l.css","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.622Z","timestamp":1791566617622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /assets/index-eaAmUr4l.css HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2Bi93MHb7hm9TRpJ4hoVfM8g6yUOqcwlDnx2bZawX%2F9EBP2wAaX0Yeez1nPW%2Fhbeu86pRNfeKw8Hrr%2Bp4zhaZbSw9rF%2FXUewG4WQiNRiLTfqflKYWRipeM07Sf0wWQ%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:27:06 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab130aa-e5b9\"\r\ncache-control: max-age=14400\r\nage: 4194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a47f13001a0e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58809,"size_decoded":9968,"mime_type":"text/css","magic":"ASCII text, with very long lines (58808)","md5":"de87b8802cada0bf819b3fd8c327f3f9","sha1":"d0608b86db6381aba6fc6770f30e7f3ee0d88a78","sha256":"57fbb271cd2d442c2440c89f55d395ebe6569d9dc2f480ecbcc5dbde7237594e","sha512":"14a299b3af0b0e79f9a2cdae2e53332c49f2c917a102baf4179a4cdbecab5b818dd6f218bc55d76d0ab0312b8569f2f1a5d3ad38b5d022110a5732330468a7ed","ssdeep":"768:1ppepljGbniGuXFuamSTvKkEVldxatN2hl:fUjGuXFuamSTvKkEVTxaUl","tlshash":"c343c669b65c2239f83bd6d6be94498cb108ff52d1439ad8f65b1b350ccb5e32a30748","first_seen":"2026-09-15T14:41:05.978795Z","last_seen":"2026-10-09T17:24:31.130619Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpay-app.cc/platform/deriva/customer.min.js?1791566617953","fqdn":"xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.955Z","timestamp":1791566617955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"GET /platform/deriva/customer.min.js?1791566617953 HTTP/1.1\r\nHost: xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWqQCcOR4HPOB2cwMspgMZvILxeeNr7rUTQ11165GTEBZ1x%2BwCVp%2BXFdapfqat7opnSWaBW94XqarU0i23DH2Z6hHq%2BUktJ8YwMG%2B9HbNWC9rFyXoiWF6LhvgXJqeQ%3D%3D\"}]}\r\nlast-modified: Mon, 21 Sep 2026 13:26:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab13082-410\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a47f13023b6c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":1310,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d42394d6e411177d6abd215b0c08dd6f","sha1":"01f2189c19bbc26835a60f078da5067a026f8440","sha256":"8685dd592194f86822a10bc2cd8d6f397d9eadd116d1630739f1f908a29cf02b","sha512":"df052f9acf0cb1168d23703226f0cfc8dd00874d817d6fb74ff70de444a833b5e7fc811351dc10d18ceb0a032c70583bef52f30588ff55130f35a73cc70729ae","ssdeep":"","tlshash":"651120471c6164397bd9727b563f99ad3a5d92007004cd20d881d42c2d809e20d9edc4","first_seen":"2026-10-09T16:18:30.149919Z","last_seen":"2026-10-09T17:24:31.131237Z","times_seen":2,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xpay-app.cc/api/common/getMt5Amount?coin=xau","fqdn":"api.xpay-app.cc","domain":"xpay-app.cc","tld":"cc"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xpay-app.cc/","date":"2026-10-09T17:23:37.994Z","timestamp":1791566617994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpay-app.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 00:35:28 GMT","end":"Mon, 14 Dec 2026 01:33:10 GMT"},"fingerprint":{"sha1":"18:8B:DC:1C:2F:AE:FB:29:8E:F5:17:46:EB:FA:D0:15:9F:2F:E8:82","sha256":"2B:F0:6B:D3:CD:18:4E:1A:0F:08:61:CB:35:5F:B3:8B:D9:08:74:75:7C:56:E7:D1:AB:90:40:3F:AE:B1:A8:89"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.xpay-app.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://xpay-app.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:23:38 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://xpay-app.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tR1NgR1rEbGvpzWyGhFKvITyqQ%2FYBWSvMXDzIgQmXnVqEvUFKUcG9ggo4tQI9FPl%2Fl%2BrwiNmRM4H5xvCwBoXt%2FDTnWXCleB4vofUdJoVaxKscWj3WWOg7k%2Fnwu%2Buexl2R8k%3D\"}]}\r\ncf-ray: a47f13026ac07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":718,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"api.xpay-app.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}