{"report_id":"8d83925e-4604-4c7d-ba73-a4afea78cbfc","version":0,"status":"done","tags":[],"date":"2026-09-29T17:11:50Z","url":{"schema":"http","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"title":"OKX Trading Bot","dom":{"size":234390,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55270)","md5":"2d2b37b7d1452d636494b279cd4ee239","sha1":"0a734dddd7460c1f2b54fe4f21a68032faa6e1ea","sha256":"7f752cdd9489d5ad7fc191d6a1549b150f7dc6a1c5cdb78a873e2fc9773e0c14","sha512":"da72916fbaad96601a68302cd955b85f425ac5e2da68fc8dfa4c5f9d093b09a779fff49038f46f9d92df942776329e8fc168cabda11e85411e27332304bd8277","ssdeep":"1536:J2SfHQ34OOb+fAdtxO4MDMczwKCBymZdKnYWsgozDrzBWYGrmVc6q1L5HJJbxaSc:kO2g","tlshash":"27341aa613e4d2d9f306c35cd5716c3631be34eabb94c18cc8cd17a6ae668e8442cd1b","dom_hash":"domhashdbfdab8da1e9147476bd77e102488ba2","first_seen":"2026-09-29T17:12:15.51071Z","last_seen":"2026-09-29T17:13:05.94748Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T17:11:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xiaomi6.vip","ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-14","domain_rank":0,"first_seen":"2026-09-29T17:12:09.379837Z","last_seen":"2026-09-29T17:12:09.379837Z","alert_count":26,"request_count":26,"received_data":4284578,"sent_data":11911,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"api.xiaomi6.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":8,"received_data":590953,"sent_data":4171,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-09-24T13:30:14.780012Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":2,"received_data":66434,"sent_data":1080,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b7d952fcf52762873474ce8192e7bd60","sha1":"a13179f906c43cae37c5944dd5c671d768e2c1f4","sha256":"2fb703136f0fba53ae312b7837242f5fc6985e728404cbfdbae77ec615d48b89","sha512":"38fbf60f2db601aaa675aa84ec4703cbfec671d1529aca7b9a121732b2bf9e205f087c62ddd7475284e5fa57cc9e85149f77883a619ffc953754ad08d9fb234d","ssdeep":"","tlshash":"74c08cc8a0c22d101602a41022af26e4a034442b70485b528c94d8582e220b08233e9c","size":139,"data":"","first_seen":"2023-05-23T01:00:35Z","last_seen":"2026-09-29T17:13:05.992084Z","times_seen":1061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d43360cb4e41e2f0fb69ed4fe612be4c","sha1":"0c0cfc8ad8236d13e93399756d82198283fb8737","sha256":"5311285d405215369bc6d3ad7c28e3d7290710039db1d27b2be4f7f9cf16dd25","sha512":"f3074312ce9f7c0022dbf9f42e0fb0953f5c843f2c130513be70173c207282fb7cb4bc9fdde59f97b7d577a34e4de40ba019e94f5436e77879b5ac477e379c3f","ssdeep":"","tlshash":"1d5122193ad4b7298257b0b4986fcd49f520043a02e8d8484b1cd6fae82587dabb9cdd","size":2977,"data":"","first_seen":"2024-05-10T21:13:03Z","last_seen":"2026-09-29T17:13:05.982083Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"111459594869556f10cc1e70225d7456","sha1":"ac9017ffce5eb8247c95ff0be19ed0ad8997aae1","sha256":"805904ef24dce3a96fbf8a54597a0a0dbe51bb633230e3067d775d111323c059","sha512":"09ab383a0228d98c66744bd7a845c4ebe8b9d48ce2b62f2f5636e8cac3487dcbed1b8c75456f8ecc55600d539cd1f6d0b00fa8f809c2a8ddec95bdf2e025673f","ssdeep":"","tlshash":"fbf09e1b1c47b1ae1bd6a17aa73f9d1b22112146319054137e0c80286fe083c5fe9e8c","size":500,"data":"","first_seen":"2023-10-12T05:30:40Z","last_seen":"2026-09-29T17:13:05.982883Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dffd12485a916eae51ce720b08ee638d","sha1":"315838200ac42093a6dafc5b04d6d356698e2c2f","sha256":"dae6ecb0cd45818719f7d2a2e001003663de74a31152b131a807ec282e261ae3","sha512":"ea5426b7f58105871b2a40f15d464dc3556ed8d28358a403e23ea507444e8fc77d2069134e4b74e691b8bf98b194131899c9f0061ecd9df5ee26c752df36ca81","ssdeep":"","tlshash":"ef11aa2824ea160c8117ba95b1bfff0c762c612561e4dc0c814dd079142edbed6dd9af","size":1062,"data":"","first_seen":"2026-06-07T18:22:29.81227Z","last_seen":"2026-09-29T17:13:05.983529Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b56685935f7f71b2b8ab78b429393951","sha1":"67a507d5ed6d1fa46b8b5cb9af6612c136274e0c","sha256":"d4a19c4526267ca77bc813c7589192e6ae9eb9e5d7852122219fe4d2dc1abc67","sha512":"206bad1b3d3e2656c2b5942290f665ec17c26fe55e63a824d89515ab2581757ba189c7e2c261397535f392384b2728f4f358ea5188b389a237563101bb1a513b","ssdeep":"","tlshash":"fcf0c2d95997593446eb15ff2b9e701060305002e909ffa0346f05446fdd72ae7e1be8","size":610,"data":"","first_seen":"2026-06-07T18:22:29.813319Z","last_seen":"2026-09-29T17:13:05.984295Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e0394286e034331a16624d7c91e7cd0","sha1":"ab920dd032fced2236e73697d29b412929749434","sha256":"4319010dbe429ca43f3a285840a104b4e6522f374b5b9d8aa0809eaca12e5f0a","sha512":"35724f1ab72b5c69549c9c63c4ede539701b8e21ca6f7f944658aefb2919153059e77a301c67d3cfc7530f01006afa0bc1f1e8459fdb0b5cb4f0b188e615fbbb","ssdeep":"","tlshash":"3de0c02a18ea18b99756a2b2313ffc053102300d626843727a4cc504ef90d7f87a4f88","size":380,"data":"","first_seen":"2026-06-07T18:22:29.814513Z","last_seen":"2026-09-29T17:13:05.984834Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bcf011ebdd38a31ab4a9a50b16a082b","sha1":"cf58024c54803f38301f50557a75a5a91a52106a","sha256":"c07f4fcb61301077a2ba5f8c58b87f3071d0a73eb2cb920ef215f66afa5de645","sha512":"3da41b64567304935815551bea40b466a57143fb55576dce44ade8ce3ddcc240c1908fa8766813cb82e2cf27bb298ae6699441d1dd7db6f2c687705ee4a39984","ssdeep":"","tlshash":"d9018b531cd9549b6f2710bd6b3eaa1232a51113544ad464fc0e9720af64e7c1724adc","size":684,"data":"","first_seen":"2026-06-07T18:22:29.815556Z","last_seen":"2026-09-29T17:13:05.985504Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/bOWbisvIY0BtIitO0O.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"785444ff09d9878d50601270d1ec2366","sha1":"659cd1329b133b0341729d508f428a8ca5119953","sha256":"c071ee54421cec061252ef479224d6e0d3964d809ae6b40d6f7848741bcfa04c","sha512":"d451d8a3a136c11e7820db46d64f9e0951048e77b049a7094af2dd4a8b5ec5c02daae5f8890f8d8c81fac0b24d095d9ad2c28deb2a3b57224304fdd3b76a95bd","ssdeep":"12288:AzPpL7MEazm+dNvk4pVo2NH0qBxsa7ABhGpA3RWvj9StnnBQIhfGplV9SIIYJU63:IPuC+dRkiBU3M7","tlshash":"257544286a1bf744e419c0d7f9373c84d599d68aa00b14d26f790bb31be2792eb9cd13","size":1650398,"data":"","first_seen":"2026-08-11T13:06:41.583663Z","last_seen":"2026-09-29T17:13:05.990613Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/Ot1v9jkAsN_cLkB11J.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c5329fab730ef95d7855927a6abd7de","sha1":"71f5c61ee71e7e5a7ea994818cf3fc2bedef5968","sha256":"52ef64d150496a410c5a049a47ab9ab4084d8081d92111632a8dc389956917df","sha512":"b8f94a9985c368f27acbe55346ba05c92640113e1b842c868f416df007dee83a0e03a9e6856acdb5892288555669613f489ba843c33640d7f91246abe03f08ca","ssdeep":"","tlshash":"4ff0200b9c11e3bd95bb5c143843301120483feccb2098c4e6e22270d392c3ab8aff14","size":544,"data":"","first_seen":"2026-08-11T13:06:41.539919Z","last_seen":"2026-09-29T17:13:05.97756Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/i4WEQe6m5MCOG4r8EM.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c6381e901708ab60e92eeed5239f3dd","sha1":"21165146fc00d989191abaec7f09da6096c20136","sha256":"18397e2bd6264e3f4f776866574bb9028208ee8e7551e97da069e72e21ce20c6","sha512":"c740eba395425d21c4bb62f99352d57cfc2333ea08d2595d2d0d81e6756a1eab8d821b4bd6285d67e8f4f0e29944e3e8ff2ff3c08472c25028844d99633212e3","ssdeep":"","tlshash":"11517349d8629fb7caa39259a2db1830e00823ef9a10045110f98a1a3f9cdf0573ff28","size":2561,"data":"","first_seen":"2026-08-11T13:06:41.51627Z","last_seen":"2026-09-29T17:13:05.951838Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-30T02:11:06.420606Z","times_seen":15511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/e2TGkPPp2b0f2bHt43.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"711f3fe431fd556f93cf602d60fb92bb","sha1":"37b80a4e9211f5e8e52f4bf4a6726d8d422f9fe0","sha256":"95f292f07b93de67b3f110e098c914cd401904d96578ed194b528b626c7e5030","sha512":"4aab6d0d24463e67511605c2e2d0955b5f0d7e6156931784c02a1a96663410209dff185a3068a268d4ee7a35229bb518b1d834df0c8197745d29f1c57231c562","ssdeep":"384:z8LST5a28wa8HVRtJlO3ZVv/tP3KZ6hOyLvUnkrjl5r:z8Laajwa81RflmP/tP3vOiUC","tlshash":"10a2827b00b007aafbf19320f141f8a627c91e866856a5f38dbf536259900f7b5cb65c","size":21682,"data":"","first_seen":"2026-08-11T13:06:41.534106Z","last_seen":"2026-09-29T17:13:05.958321Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/BL2ytyx1KGBuYLua9_.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29b85e2617ea313056c911d3826cb9af","sha1":"ca6214bc1e4044a6b2c7533d90cc8dd9f491dd2a","sha256":"840882385a779f5a2a23ad7e62875928479bbe90aba9bb1c693294f07534a13d","sha512":"894454accb5a0aa1681fc0a3354fa081fb31c97151e2d61d4fc7d428841f20786d918660291515e043c1f14cdba93b691db96d8dce262ff2a29e9ec01c60e4eb","ssdeep":"","tlshash":"98d0974c8850f1b2a12d4c9cf27238238b653f2633b44e41504e45395bb58bb288ff0c","size":260,"data":"","first_seen":"2026-08-11T13:06:41.482934Z","last_seen":"2026-09-29T17:13:05.973453Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/KRRoLkjSaXDkLw1Aqf.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae01f673e2f635d811992bf82b5fd9fd","sha1":"0c9245a89e542e247af420f6869ecc162801d77a","sha256":"b15896fb61b7d6c6ada629c36cfe0bcd7be9452b25e8b8b5aade74fff9406ced","sha512":"d4180c694df14dbee09132503c0ddd0d72fc349071e70b928e1a81ca2af5f41c3fe3393e7e99a760ddba82d54b178a00f287d34014970f5c5a7a7953c997c04e","ssdeep":"3072:jYV7IxqnZY5kWoH6J+2JfnXTSx86LTAXR9mSI/pJp3IVhAe4m:47pnm5AH6J+2Jfnokl","tlshash":"f2443a51640beb3ee4a3588d68491800340d4feed41c9d66f2fcb626afc6cb4573e7a8","size":257829,"data":"","first_seen":"2026-08-11T13:06:41.550941Z","last_seen":"2026-09-29T17:13:05.974707Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-09-29T17:20:32.061839Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/sEuQ4ZmFsWCtbS1_sK.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b87d383c7eddc52e3cc6fc69c32bb38","sha1":"2cef977152a6f0fc6909d79ca496bead1085dba5","sha256":"51d7fd369d517a1ed7d91f48b1d69ea9be9effc010b626df75fafbbe1c2410ed","sha512":"8c74872cbaac6b7d2fe19041abcc297248fa60c4022b9c731b79d0b32ff5127c4623c46c2b9d2f65a322810e1d18e9cb08389078c99899faf7eaf6010d77902b","ssdeep":"","tlshash":"ec012acc48f6cbf9d49702543d5a10a5d050674c9b31d955f05cad22674fcf055dd738","size":791,"data":"","first_seen":"2026-08-11T13:06:41.523944Z","last_seen":"2026-09-29T17:13:05.978532Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/swiper.D0sOey_x.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60fa4e0aee4624a135c9bbb00e0ae2d5","sha1":"27ce2ac449c95edb3262b5cc0c89464959a9e20f","sha256":"e00727f35d6587fceb81cd5fe08f181a1c2b7246703a955e80c718cb4e278f97","sha512":"fc4f1474e8a35844a7f2753ba744c0823515b05419d75c083ec487c647daf2c9fd88740e0d3d272d6e716a97f5a0cde39df57b72e5807d3981d9d63157bba7a6","ssdeep":"3072:X72Lz7VtYUf0irCIH0wEvFyPCENnRZDvPMI/2vlzoD:XafRtYUf0irH2FyPfNnRZDvPMI/2FoD","tlshash":"31f34b997250b13242fb19e742768111b37909497809d4e8b1adadeb2d3b84812ffffd","size":168758,"data":"","first_seen":"2026-07-01T21:54:37.967413Z","last_seen":"2026-09-29T17:13:05.963905Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/7aagA8uwCQB8Qlr-Pf.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15ff0a18f99c73420582808375a752d7","sha1":"44c45382cd2fb6123c6afcfd0d74524175f871b7","sha256":"bff5c4cc182e55deb0d92952755678ba636aeb45ff353ae3a6d66ddf43f3da74","sha512":"5daef9647670610f588021031a105568bffae1fef2e2c74493989f912f2624423e14cbf9f9b0afd0cbeabee3bb085cc4e46a6fee763a2c2c3fa6eb5f67b1c9bd","ssdeep":"","tlshash":"b651816c7cd89435c6bb59c894670812e51b0b1d82288af1e0be5e5d2a3e044e43ff38","size":2926,"data":"","first_seen":"2026-08-11T13:06:41.471906Z","last_seen":"2026-09-29T17:13:05.966451Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/ueD5jBWBUkCmWKitYC.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"536184d664e19e9c0d4ffb12a2f78092","sha1":"08cb9a64e7493192e65937115a9b1906c1081bf7","sha256":"6e9f96100cbf0e470eab0e5e48e69a7fd3495138ff40ee4f5649babd58798482","sha512":"c37b4e87e2697a1e69a14fda207352870e0b446fd2fd15763582b14583be6d6e3092445ba8b5487c2bd4a1eff4a48ad0efbbc8a0ad3b906f46c6677b7fdeec9b","ssdeep":"6144:nCIBu0i6rviJh34P2QqF3ez2Ammai2ocZukWTETRX4aMiZkekxnhl7Q2POC65KPZ:qADj","tlshash":"6c64756891ba8fb8d6735a54b487c880b2ad2fffc1114612b6fc1b361f8ace09775354","size":321765,"data":"","first_seen":"2026-08-11T13:06:41.512175Z","last_seen":"2026-09-29T17:13:05.955625Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"85cdff17564cdeae6cc2a7d15a194016","sha1":"fa111b15d2f2f284314d5c6f953480fe989f6a42","sha256":"b07179b3bd08374b256515ca2ec1db26ef23f35ea969dfc16e232170c2119a5d","sha512":"4f631fa87f3851821f10e989dc84c331edbfd7e4bf9455e0b7804a6c282556a8839cc7692576b6be20a18a23fb3bdbfa64cb31d223b1a3b9815f1f9a6e9a4efd","ssdeep":"","tlshash":"ddc08cc4a0c22d101612646420af35e89024802a744c5b128c94d8482e660b49233ee8","size":144,"data":"","first_seen":"2024-06-22T20:42:37Z","last_seen":"2026-09-29T17:13:05.989278Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-09-29T17:13:05.986322Z","times_seen":2828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-09-29T17:13:05.987412Z","times_seen":725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-29T22:01:14.869808Z","times_seen":1398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/0NcMztH18pBjhkmezi.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"275df03ee927f6e306e3fa90eaa30597","sha1":"2fbb6aedd96d2e0477e03f7a462f6dae6feb063c","sha256":"319b03f36229f1ae53b25f589716d726a2a917b281f19f5b9407b3849b59642a","sha512":"9ef608896877997721263926d66fa642f68d8c7a71d27d9d49d0f2fee40c9ea917fa447ef2f960a10f5abf881598d984a1357f70fe46aef1862e74412e4c9907","ssdeep":"","tlshash":"514184a8f401dbbca6374a3888120450220c1fef9164dee0f16e1f225ad6cb4a899f38","size":2253,"data":"","first_seen":"2026-08-11T13:06:41.495242Z","last_seen":"2026-09-29T17:13:05.965674Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/bVJ77t7D3CC--p6Y45.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f446c79fb4bb0870a990deb5ca537bd6","sha1":"f25020633aba387ee8200046b828a094240c9194","sha256":"56e8571b8ba88396f69f35e8f2b302b7227bcad4502c0a99a6cf83bb8d9cade3","sha512":"4c50de38faf854e76b69f7ce1af3e86e13c8b5b9b27a554004c60e13ce38a753d6fa7cb2be4d1b76c222820843c4af752317039fbb6c0b012b8d8cb875d9ddb5","ssdeep":"768:oxNmhmFp351iBFmsX5acDpbdVaPpgbuHvLKDgex0x:YwmdlWWx","tlshash":"45c22b706050c729fed8b0e928945c466d884bfac59295e3f2fecd82d3c2677ed94398","size":27604,"data":"","first_seen":"2026-08-11T13:06:41.537658Z","last_seen":"2026-09-29T17:13:05.948921Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/aiTUuRSJu5Bw-vXSJ1.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b94ccac64249db15670adc3a78f49ff7","sha1":"df66aca7f18b61fa479ecc143a2fb48e22ecc78c","sha256":"1359c9f5634c21794a75d5893208affa3efd04b1c048cb72fd5ae029fd132898","sha512":"33335b4d116cd422382286e521a8cadf5fe1eab9e1260f9f7cf64da49063f2300b50a1469d68e6d79ae1d15b4607dd3dfbc7e2ef64637c4669c2191f6b1473e1","ssdeep":"","tlshash":"61318498f81bcfbca47748395507c069910c4bdef326c70570e84a2607e7c39625ab6c","size":1684,"data":"","first_seen":"2026-08-11T13:06:41.460592Z","last_seen":"2026-09-29T17:13:05.957733Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c9906a60bf176582d9c762184036ff97","sha1":"5c61bc5b5cf5f9f82e45f9ed39397d6543de7e6a","sha256":"f72ccf65db7b64c33731893405e035c0d29bbfc704a4d4ad94d6e0d5a7684b20","sha512":"f922a474f726dceac9a7d8ae699f84be6815d0436ba8e3f514a21bb3d6907058ed6cd5544dfe13e21b701e787959e922df9967a2ea5a936b5ef789fe4848cfb9","ssdeep":"","tlshash":"bcc08cc4a0c32d002612681020bf34e49024402670481b438c94d8482e230b08233e98","size":139,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-09-29T17:13:05.988443Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff6e6f71e6f8808b46cdcc36f8d90461","sha1":"f42977ba717412fc17be1325e0cc44f4e2780171","sha256":"d7d1c9c17dacd93d7204fbe8d6e1027d6077a57bc5c7103f84910f7719c4c6c0","sha512":"c555071473477017a26e7782bcadfcfa21dd53d26e19f043397ae9eac7e9c0aea395692332db096998740a87031d66abcc0ab914cddc400c11d601f12bc48242","ssdeep":"","tlshash":"dac08cc5a0d2ad102602645510af25e490248026748c9f128dd4d8482e620b88233eac","size":144,"data":"","first_seen":"2024-06-22T20:42:37Z","last_seen":"2026-09-29T17:13:05.981509Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-09-29T17:13:05.98688Z","times_seen":1102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-09-30T01:13:01.913829Z","times_seen":2903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"92e81ef4d7ff796a20b80fcb8ecafb14","sha1":"3858157355200e83aa100cf5f214e911f10693ba","sha256":"d3a581bf91a70a8ca524ae1c262c4038b94530ea30d0464f6acecb58018931e4","sha512":"a23b0cc95270d3cd86f1ba4cd9605d791f61bc593f4570b1787e9cb84cea444ee4c8c3bd311fa45748451d191ac8b9c3736792935dfac95d25ef292b62f83983","ssdeep":"","tlshash":"1bc08cd8a0c22d105612a81211af29e490244026704c2b028c98e8483e230f08233eac","size":141,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-09-29T17:13:05.987903Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/#/login","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3ce1149faecfe227eace9e808029e684","sha1":"74c2bad8c096eb81eedbb7ca46e99a04b023bc1b","sha256":"8e68fdd77111a1a173dc65e187e0baacd040906f8ec301e25deb23e0cad92224","sha512":"f5a8725693f2c3ff951b1ab2d3dfeecd442b0f069e878c922f877fb96c4a0cbaa7f69ad5fe4dac46c2abb5c7df4a51fb827c2ca82a95fbbdc91d96ed106565b3","ssdeep":"","tlshash":"6ac08cc4a0c23d005602649014af34e89034442670486b029c94d8482e620f08237e98","size":140,"data":"","first_seen":"2025-12-27T00:47:11.188496Z","last_seen":"2026-09-29T17:13:05.991338Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"/init?rts=1790701876957map[actor:server1.conn0.watcher17.process7//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://xiaomi6.vip/js/bOWbisvIY0BtIitO0O.js","line_number":2263,"column_number":689},{"level":"log","text":"/lang_j?rts=1790701880855map[actor:server1.conn0.watcher17.process7//obj41 class:Object extensible:true frozen:false isError:false ownPropertyLength:429 preview:map[kind:Object ownProperties:map[Profit_Assets:map[configurable:true enumerable:true value:Profit Assets writable:true] Total_Assets:map[configurable:true enumerable:true value:Total Assets writable:true] auth:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj44 class:Object extensible:true frozen:false isError:false ownPropertyLength:33 sealed:false type:object] writable:true] copySuccess:map[configurable:true enumerable:true value:Copied writable:true] invite:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:12 sealed:false type:object] writable:true] loginByEmail:map[configurable:true enumerable:true value:Email Login writable:true] loginByPhone:map[configurable:true enumerable:true value:Phone Login writable:true] registerByEmail:map[configurable:true enumerable:true value:Email Sign Up writable:true] registerByPhone:map[configurable:true enumerable:true value:Phone Sign Up writable:true] tabbar:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj42 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 sealed:false type:object] writable:true]] ownPropertiesLength:429] sealed:false type:object]","filename":"https://xiaomi6.vip/js/bOWbisvIY0BtIitO0O.js","line_number":2263,"column_number":689},{"level":"log","text":"/adi?rts=1790701881080map[actor:server1.conn0.watcher17.process7//obj54 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj55 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://xiaomi6.vip/js/bOWbisvIY0BtIitO0O.js","line_number":2263,"column_number":689},{"level":"log","text":"/cus?rts=1790701881080map[actor:server1.conn0.watcher17.process7//obj77 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj78 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:ArrayLike length:2] sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://xiaomi6.vip/js/bOWbisvIY0BtIitO0O.js","line_number":2263,"column_number":689}]},"http":[{"url":{"schema":"https","addr":"xiaomi6.vip/favicon.ico","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:17.142Z","timestamp":1790701877142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:17 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEK6dPBBby2qQWIkfm32iASlJ64boi8pqUGRzKBsgNk0ImRkpyrJrrbZXN5AzT0v8fVRNg2M%2BG4JHNFY27n8etz8aOc%2Bo3A%2FwOnEuo4%2FYefUiMi%2F3mJpamuu8eJNIA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b2c280b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":706,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-30T03:11:20.399262Z","times_seen":332754,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/lLrtQb5nXIDN-in7Ac.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.117Z","timestamp":1790701881117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/lLrtQb5nXIDN-in7Ac.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTbGyRazvlV4prgFnqK%2FRI25JJDym2kEMBNjHBURwcTj%2Boyxdy3mccgue%2BzVGsOt%2B5choVz2u9Upc%2F0or30Yw58yvVljsJyaAtY8ThpU3NjOoUIAQ7SZGznK8Ee%2FeA%3D%3D\"}]}\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 03:29:46 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a74a9a2-ca\"\r\nage: 6094\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b44fbc8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":865,"mime_type":"text/css","magic":"ASCII text","md5":"9cd0259b2ea1270774b0bd885f3d6a59","sha1":"2bd73d35751da067cec030ba8558d8e1e0e08bce","sha256":"123bec169a48a47aaeb0595c6cca642ddbcbf14d78104b15cb8e836a746ab3f0","sha512":"77b2837f18040e9f7b1e3b229243a4863dab9406b64795e9227631334fe7088a19830d6dbbc9867efe8cad2251a8fc9ed6616a9f459ecbf02e5ce66a5516a26f","ssdeep":"","tlshash":"00d0224c2c40f07e29c431a80f0842dc08992204ff035fa43124bc3100ca6f62037c2f","first_seen":"2025-04-17T13:49:08.709612Z","last_seen":"2026-09-29T17:13:05.967149Z","times_seen":136,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/upload/img/6a74b645d9a0.webp","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.731Z","timestamp":1790701881731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /upload/img/6a74b645d9a0.webp HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57224\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 16:28:54 GMT\r\npriority: u=6,i=?0\r\netag: \"6a74b646-df88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDHa%2FBgP4vUFdpIeogXL1nB4tPr775mNVvfB609mMsX3hm5Oy9YWE%2FSw4HJhI%2BX78ufep9SNM%2FUtwgEb5kxGGE0jm%2FXq1XPu3a3jfMUKK6LuJQ0XV97%2BLmjkHLf93CggoaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b48cbdf569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57224,"size_decoded":57978,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9d65de191a30229944d89635e89bbd05","sha1":"921dc7830db0da408841d62190240912cd8804c0","sha256":"b415580f79d7c0066312ad2b8bd6df94e78d34c4f2b4838e536c5eac92180745","sha512":"23fdd0dcba9086319f590a39b1731e094d4e614f7f665b7751a639fc7df5c6cfcd10e8e49a28d0da65dccc58b44a175380ccee45ac9290983726e9948385c42d","ssdeep":"1536:yQ8FeI5LF4LL47dWTJuPxXanS/+O4IfyDJftNP:y5Ffn4Ls7dWTJuPxXQa4RpHP","tlshash":"4b430194d05246ac8b3fad3dbe8f78099321697ec35d16fa421b6bb2401247faf156c3","first_seen":"2026-08-11T13:06:41.530283Z","last_seen":"2026-09-29T17:13:05.962892Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/nxTRJXfdM7DNW3sflK.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.104Z","timestamp":1790701881104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/nxTRJXfdM7DNW3sflK.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynACT1WgPzD0pKiTph5QOTaJK38g1fECGkE43FowCIHWyi29M5PUM2%2FvnSNwWYsE2lk0xzej8enl6L9IKsy%2BVAdacyWjSFN%2FANMUiICpsFt7eqbfcra6srifV5Gwdw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-f53d\"\r\nexpires: Wed, 30 Sep 2026 03:29:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 6094\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44ebb9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62781,"size_decoded":14588,"mime_type":"text/css","magic":"ASCII text, with very long lines (62780)","md5":"94d4efb3c3d011c61ed9ab294349b196","sha1":"99f44bead9a177f445cb5c8653560b2fc45772cd","sha256":"b348a26a1eb95ba73a0f76c64850155d3e437d31e5b278f057c941d8f42fe6fc","sha512":"0fe82b7087fb3471eb71c4cc76749ea27ce0489ae97c35e76ca212b7304a0ad2c25607d71f6fe0cadb7803a1b478834c187ceb73359433d85ec48ed466d0c928","ssdeep":"768:tAxh+qBm78u5Y0JcL6ROh0DNu95sRlDYxgRspTsGBvTo0NBW1sBR:EBD5EYYio0NZ","tlshash":"4b5376542668a33edb2bf15328ee46c91510f713d5377a4aba42733585dfb832231bca","first_seen":"2026-08-11T13:06:41.467994Z","last_seen":"2026-09-29T17:13:05.950011Z","times_seen":3,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/mSknUgTMJGDyZs0X57.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.108Z","timestamp":1790701881108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/mSknUgTMJGDyZs0X57.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7a%2FSKJVn%2FyfoZjW6ZnOlIlTnvIjJJZJrm5ebz6L2Aq%2FqJ2KuYkhX0i6jhXoShUWlbVdArsfQLQpPp09mY28Y3SH%2B0Qz7gEGH%2BdwSvjyBAMrhhIglJMWtwanYPqZw0A%3D%3D\"}]}\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 03:29:46 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a74a9a2-56\"\r\nage: 6094\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b44ebbc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":810,"mime_type":"text/css","magic":"ASCII text","md5":"78d460a3fd900d74f885c3c4cb00d279","sha1":"47ed7d27e30c395ffb86d879885561d0b134709a","sha256":"ba5fb0ce2a2b93296abde69bb1ec58ca910748493e94e52960cdac120dac4dae","sha512":"2b8a4487bce91a64319865a75c15d53affc911e30ffed5a74ea8a85ca4f99aff654546a23d8400a85c92ff2575bf697dc7b9d394f1181ce1d5d67e907abd4ca5","ssdeep":"","tlshash":"d5a0129450c0b0393d17a23047994b4d041d70558940cf9870a924f000c3af65127810","first_seen":"2025-04-22T04:55:21.175179Z","last_seen":"2026-09-29T17:13:05.956604Z","times_seen":33,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/api/lang_j?rts=1790701880855\u0026l=en","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:20.857Z","timestamp":1790701880857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /api/lang_j?rts=1790701880855\u0026l=en HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xiaomi6.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xiaomi6.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9rirUBDaqtHYr4VLCO0z%2BFov0r6TdESUzEtESIcG4yyPPi%2BTcM3OXVLNG9Q1oax%2F7LK9uRXhqieRxEgNpIyTU6Etyh688Zvum%2BinKBCj4tIZfVKIpMTroOgwscSfS8Qc4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b435c3d569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35992,"size_decoded":27936,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (35992), with no line terminators","md5":"4bfab52ac67407c6c296ed3e42b2b166","sha1":"0ee3725f20789bc5b808905d8853a18f88b9d544","sha256":"3f9ed6204c4371a6837eec753e752320b76b02210e427c317c1e4a7de0c8da2f","sha512":"761bdc647c800b48c4de15ab3e643c8ef98192bdcb646ced721c220199d1bdbd4b6283f48b0a98f1285cbc674b4ec887ea50c23dd282fed030339264914f5531","ssdeep":"768:sd1YYu1HV2UGDjRPFR3zesEqDIAoG+7apYvTVSaRi78yeKgvscfMyomRbY:sry112l9RCBZ76YvhSaRiwyt3cfEmdY","tlshash":"90f2016e1cb91d1739c4657b5b81d73f3ffb1e8d7206a40de90121b9219fe1a0921d36","first_seen":"2026-09-29T17:12:15.522538Z","last_seen":"2026-09-29T17:12:15.522538Z","times_seen":1,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/upload/img/6a74ad9385e3.webp","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.730Z","timestamp":1790701881730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /upload/img/6a74ad9385e3.webp HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33352\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 15:51:48 GMT\r\npriority: u=6,i=?0\r\netag: \"6a74ad94-8248\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60RSAlJ3s0uZjZl8ZdcmyHmCU56RRvsJH3J0mwbR42YlELVEuQdM5NuLwKmqt33NCAd3E3JYP45AykyoQG4F3CWKVXflhnnQgfI1vIhowlDHR6QKbt1UoaBg7OraGNcL2ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b48cbdc569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33352,"size_decoded":34094,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5dd776e0ac40d0f50631d3f32afd32b","sha1":"a1d6b90bc52208b78998b115c61e77b21630f358","sha256":"e29fe39a936c678fa88a1179eaa96b174a265b06a2746655ef5c36900bcd641f","sha512":"aac85a378d2ed1180849eaee8a68d0ff4fc9f41e9be09307278ea4d6a0e5007c08b3be0b7c02f63e36bac3de53421ef1513cd86535e2aff81b5b0de18a182ca3","ssdeep":"768:2iYWYHDDRTPxcSU6jilOe9bOB8cThSPOzV/MFninWVr4:2dDPRTPxcSGlO18EhS2zV/IinSr4","tlshash":"d8e2f12351a1f96bb3bbd272754f538be6cbd4d18e2c9d0056bd5f13b102940e1d8b2a","first_seen":"2026-08-11T13:06:41.51934Z","last_seen":"2026-09-29T17:13:05.952446Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/0NcMztH18pBjhkmezi.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.099Z","timestamp":1790701881099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/0NcMztH18pBjhkmezi.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axSCv82WN%2Fsed%2FNu%2BcS0JCYlYvAd%2FwZrekItyZ494CR4l%2FYBiF75H7X8sGUV5e%2F7gHxaa54%2FahjOm%2Fv7TBPnumEGNcCFsUkNqpH%2Bth%2Bue7LY52kpsf69hU8q7qUoGw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-8cd\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44ebb6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2253,"size_decoded":1988,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2252)","md5":"275df03ee927f6e306e3fa90eaa30597","sha1":"2fbb6aedd96d2e0477e03f7a462f6dae6feb063c","sha256":"319b03f36229f1ae53b25f589716d726a2a917b281f19f5b9407b3849b59642a","sha512":"9ef608896877997721263926d66fa642f68d8c7a71d27d9d49d0f2fee40c9ea917fa447ef2f960a10f5abf881598d984a1357f70fe46aef1862e74412e4c9907","ssdeep":"","tlshash":"514184a8f401dbbca6374a3888120450220c1fef9164dee0f16e1f225ad6cb4a899f38","first_seen":"2026-08-11T13:06:41.495242Z","last_seen":"2026-09-29T17:13:05.965674Z","times_seen":3,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/7aagA8uwCQB8Qlr-Pf.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.109Z","timestamp":1790701881109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/7aagA8uwCQB8Qlr-Pf.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhtfAJRjiPAHLMWUf6Lbkj5egs8lkxKWof%2FaFQTa3tDipYZ886ZBasuSwUrxheL76IbHQsRHHXDTbra%2B3dofO3IFkbQYjYpLfLIyDlmAD5HoF%2FlEB8VY79OOj%2FATPw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-b6e\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44ebbe712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2926,"size_decoded":2077,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2925)","md5":"15ff0a18f99c73420582808375a752d7","sha1":"44c45382cd2fb6123c6afcfd0d74524175f871b7","sha256":"bff5c4cc182e55deb0d92952755678ba636aeb45ff353ae3a6d66ddf43f3da74","sha512":"5daef9647670610f588021031a105568bffae1fef2e2c74493989f912f2624423e14cbf9f9b0afd0cbeabee3bb085cc4e46a6fee763a2c2c3fa6eb5f67b1c9bd","ssdeep":"","tlshash":"b651816c7cd89435c6bb59c894670812e51b0b1d82288af1e0be5e5d2a3e044e43ff38","first_seen":"2026-08-11T13:06:41.471906Z","last_seen":"2026-09-29T17:13:05.966451Z","times_seen":3,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:15.897Z","timestamp":1790701875897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Tue, 29 Sep 2026 17:11:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Sat, 03 Oct 2026 17:11:15 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-29T22:01:14.869808Z","times_seen":1398,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":11,"connect":20,"send":0,"wait":37,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/swiper.D0sOey_x.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:15.900Z","timestamp":1790701875900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/swiper.D0sOey_x.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRiTy9x5XtbqZ3kTweU%2FNkp%2B2vgNdKxeW6N1cs0La%2BNb4kXrVS%2BhVpUTlJIQ0S5oA%2FlmGfZXaiROtXaVle1Ra0zvvn37pcZe%2BY7NpzI%2Fk8Z%2FjRtG2XvdV0iWXVVbxA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-29336\"\r\nexpires: Wed, 30 Sep 2026 05:11:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b245e9e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168758,"size_decoded":64604,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"60fa4e0aee4624a135c9bbb00e0ae2d5","sha1":"27ce2ac449c95edb3262b5cc0c89464959a9e20f","sha256":"e00727f35d6587fceb81cd5fe08f181a1c2b7246703a955e80c718cb4e278f97","sha512":"fc4f1474e8a35844a7f2753ba744c0823515b05419d75c083ec487c647daf2c9fd88740e0d3d272d6e716a97f5a0cde39df57b72e5807d3981d9d63157bba7a6","ssdeep":"3072:X72Lz7VtYUf0irCIH0wEvFyPCENnRZDvPMI/2vlzoD:XafRtYUf0irH2FyPfNnRZDvPMI/2FoD","tlshash":"31f34b997250b13242fb19e742768111b37909497809d4e8b1adadeb2d3b84812ffffd","first_seen":"2026-07-01T21:54:37.967413Z","last_seen":"2026-09-29T17:13:05.963905Z","times_seen":7,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/WxxTyhdK46BZI7eXWM.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:15.902Z","timestamp":1790701875902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/WxxTyhdK46BZI7eXWM.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNEhdbxaOP%2BEMwxSJQCKRfnCyFuIxyfD4V9Gdf3ae22%2F9KQpCvNViDHbSHkic35DlnzrCIYAH46ECMOC5Huz4A5XlN6V%2BnEcuxUpBzBkUyAdrl%2FfQArKTVGbB62i%2BA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-16e429\"\r\nexpires: Wed, 30 Sep 2026 05:11:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b246ea1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500201,"size_decoded":272477,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"d2f7b184cf1a5857c755eb00fc5aacdd","sha1":"d64c3fa1bafba50310b4a16a566bead4d5a905c5","sha256":"edefda14ba16425031b4a48652df8436f221683a03b5bf8881173b8ab03b9404","sha512":"27a3e5367a4d64a1e4898e4caf7e05425520cd875ab91a6901800ab9e3e59e4c6b2746056aa85356ade68a304159b544b3c5314e722812e0b73dc67267a80db6","ssdeep":"6144:UUxsacKNSgVD6snEtJwG8wQ4a95cWWy5arpQUVsZvNQR4aucJ5RwsDjEFDWoBSC:UU1cwlp5xWU05VUYuchuP","tlshash":"4d252b747b84143dfc0bce3297a88a9c612ef253eb4249946719763483d73eb35736a8","first_seen":"2026-08-11T13:06:41.475917Z","last_seen":"2026-09-29T17:13:05.964764Z","times_seen":3,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":534,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/bVJ77t7D3CC--p6Y45.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.090Z","timestamp":1790701881090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/bVJ77t7D3CC--p6Y45.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkO0Sww6zDb0A2GzWC%2B4eyPm95vH00PbF6aEn057wYY82xEl%2Blp3rhTDdqkEsSmi8ECqRBa%2BMSV1GFH3%2BRVFjiOS6y9sYae2xHWhgM47852rgRhUKZBODiKBLOqMcw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-6bd4\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44dbb2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27604,"size_decoded":13772,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27603)","md5":"f446c79fb4bb0870a990deb5ca537bd6","sha1":"f25020633aba387ee8200046b828a094240c9194","sha256":"56e8571b8ba88396f69f35e8f2b302b7227bcad4502c0a99a6cf83bb8d9cade3","sha512":"4c50de38faf854e76b69f7ce1af3e86e13c8b5b9b27a554004c60e13ce38a753d6fa7cb2be4d1b76c222820843c4af752317039fbb6c0b012b8d8cb875d9ddb5","ssdeep":"768:oxNmhmFp351iBFmsX5acDpbdVaPpgbuHvLKDgex0x:YwmdlWWx","tlshash":"45c22b706050c729fed8b0e928945c466d884bfac59295e3f2fecd82d3c2677ed94398","first_seen":"2026-08-11T13:06:41.537658Z","last_seen":"2026-09-29T17:13:05.948921Z","times_seen":3,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/api/cus?rts=1790701881080","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.094Z","timestamp":1790701881094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"OPTIONS /api/cus?rts=1790701881080 HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://xiaomi6.vip/\r\nOrigin: https://xiaomi6.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xiaomi6.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2u%2F72rJiuVAyVc4ncTPQFRrepcuUeIvdzNO%2BeoHImMYK1JKtwYSyqNQ%2BO4p1GvtqDBmkukmy8yngBT%2BjIjDUrzcafzlpAHdNhqboYB2cmDQcKvw0XXpIEuNH6mQt5zblYAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44de81569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":776,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T03:35:24.417999Z","times_seen":18731719,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/ueD5jBWBUkCmWKitYC.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.105Z","timestamp":1790701881105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/ueD5jBWBUkCmWKitYC.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FndHTVHcd%2BeAlARuI2v%2Fz0%2BlpltrHA6bo5FdLulFhr5ffsBhrmBjgfHwlaCLt8jsrZ6dH1JMmy0Z7nwPoH6ROVTqlTsWuZndyFvHRMwZqdjkKS9jhn3mvxoXPrRskA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-4e8e5\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44ebba712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321765,"size_decoded":48296,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"536184d664e19e9c0d4ffb12a2f78092","sha1":"08cb9a64e7493192e65937115a9b1906c1081bf7","sha256":"6e9f96100cbf0e470eab0e5e48e69a7fd3495138ff40ee4f5649babd58798482","sha512":"c37b4e87e2697a1e69a14fda207352870e0b446fd2fd15763582b14583be6d6e3092445ba8b5487c2bd4a1eff4a48ad0efbbc8a0ad3b906f46c6677b7fdeec9b","ssdeep":"6144:nCIBu0i6rviJh34P2QqF3ez2Ammai2ocZukWTETRX4aMiZkekxnhl7Q2POC65KPZ:qADj","tlshash":"6c64756891ba8fb8d6735a54b487c880b2ad2fffc1114612b6fc1b361f8ace09775354","first_seen":"2026-08-11T13:06:41.512175Z","last_seen":"2026-09-29T17:13:05.955625Z","times_seen":3,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/e2TGkPPp2b0f2bHt43.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.106Z","timestamp":1790701881106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/e2TGkPPp2b0f2bHt43.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bf5PNymfGiMJ%2B4yxZPuQiJSObCRfWVR6RyjV3PdEMWlQrL7LEkgJOGtT8OSCHIGMpAnEel%2FTsC5DmcV8fLmaxS4eGTQDAQTwuGozHBT9aaMvD7EjeCEUYLr7FeuF4Q%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-54e2\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44ebbb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21730,"size_decoded":9838,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20374)","md5":"711f3fe431fd556f93cf602d60fb92bb","sha1":"37b80a4e9211f5e8e52f4bf4a6726d8d422f9fe0","sha256":"95f292f07b93de67b3f110e098c914cd401904d96578ed194b528b626c7e5030","sha512":"4aab6d0d24463e67511605c2e2d0955b5f0d7e6156931784c02a1a96663410209dff185a3068a268d4ee7a35229bb518b1d834df0c8197745d29f1c57231c562","ssdeep":"384:z8LST5a28wa8HVRtJlO3ZVv/tP3KZ6hOyLvUnkrjl5r:z8Laajwa81RflmP/tP3vOiUC","tlshash":"10a2827b00b007aafbf19320f141f8a627c91e866856a5f38dbf536259900f7b5cb65c","first_seen":"2026-08-11T13:06:41.534106Z","last_seen":"2026-09-29T17:13:05.958321Z","times_seen":3,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/sEuQ4ZmFsWCtbS1_sK.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.116Z","timestamp":1790701881116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/sEuQ4ZmFsWCtbS1_sK.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhQf6K7KMMFMMZA6Nt6QTdSY%2Bpva5QbYjGv2E1eeEmRBtV6isYfnpVf%2FLPzv48fJGByMOaxG6I0WBTIstGHuEhUnn%2BfuHeqNGa43%2FMwI%2FenJxRyPmpGQ5W%2FO0dylww%3D%3D\"}]}\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a74a9a2-317\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b44fbc6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":791,"size_decoded":1268,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"0b87d383c7eddc52e3cc6fc69c32bb38","sha1":"2cef977152a6f0fc6909d79ca496bead1085dba5","sha256":"51d7fd369d517a1ed7d91f48b1d69ea9be9effc010b626df75fafbbe1c2410ed","sha512":"8c74872cbaac6b7d2fe19041abcc297248fa60c4022b9c731b79d0b32ff5127c4623c46c2b9d2f65a322810e1d18e9cb08389078c99899faf7eaf6010d77902b","ssdeep":"","tlshash":"ec012acc48f6cbf9d49702543d5a10a5d050674c9b31d955f05cad22674fcf055dd738","first_seen":"2026-08-11T13:06:41.523944Z","last_seen":"2026-09-29T17:13:05.978532Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/bOWbisvIY0BtIitO0O.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:15.899Z","timestamp":1790701875899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/bOWbisvIY0BtIitO0O.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2Yqse6xA2yls%2BntZTmmPXN3zQnXN%2FGyDtwQWm7bd3vt1DGRLNIaHmAL5xBGYvpnMrpo6xtYIFDNwxdB%2FcoBK65yXSmD357XdKzaLrB1tuG6fvkoaUju3Bm7pvLUHg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-192ede\"\r\nexpires: Wed, 30 Sep 2026 05:11:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b245e9d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1650398,"size_decoded":278520,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6914)","md5":"290a3028ba4fe89480d9d9a7d80a0b89","sha1":"1f16103827f68b6e245185baa796679388d43d35","sha256":"b056ce60b620b8e9c17926aec5ac28c297aaf8d403c3830eff6470f79430224a","sha512":"2c30af1decd8abe688069b04c6255a464e5843680645c30d6ffa75ea00800e558b17d89da25e1b2d10bf12d53e8504cbda60a188758da6878e795633151f8fe5","ssdeep":"6144:AT3PpLfEYQY8EIlzm+Dp4pyhvZuuKjMa4pyMo2n:AzPpL7MEazm+dNvk4pVo2n","tlshash":"dd25f9281a6bf744e418c0dbfa373d84c59dd18aa44724d24f755bb31ba2793eaacd03","first_seen":"2026-08-11T13:06:41.508021Z","last_seen":"2026-09-29T17:13:05.971194Z","times_seen":3,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/i4WEQe6m5MCOG4r8EM.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.114Z","timestamp":1790701881114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/i4WEQe6m5MCOG4r8EM.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfMWTjUOUFbk2c9kLdUYsD1ENoQAqyXTInzS%2FqkOnJvsIzxzEs%2FZhhhu8sbJI34duoF5fX%2Bps7hee%2BZ5ZX7qfbpGqoxzvKI%2BDLlYuGXTTUZx1AmCUAwHVw4cmZVpXA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-a01\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44fbc4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2561,"size_decoded":1787,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2560)","md5":"7c6381e901708ab60e92eeed5239f3dd","sha1":"21165146fc00d989191abaec7f09da6096c20136","sha256":"18397e2bd6264e3f4f776866574bb9028208ee8e7551e97da069e72e21ce20c6","sha512":"c740eba395425d21c4bb62f99352d57cfc2333ea08d2595d2d0d81e6756a1eab8d821b4bd6285d67e8f4f0e29944e3e8ff2ff3c08472c25028844d99633212e3","ssdeep":"","tlshash":"11517349d8629fb7caa39259a2db1830e00823ef9a10045110f98a1a3f9cdf0573ff28","first_seen":"2026-08-11T13:06:41.51627Z","last_seen":"2026-09-29T17:13:05.951838Z","times_seen":3,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/s4edA7NpPHCnIpyPjK.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.115Z","timestamp":1790701881115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/s4edA7NpPHCnIpyPjK.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A09pFsFt%2FGRHc2DbIvXLE35UM0aVku5iSfihDagh9c2l8pPaLcW64tha5jtueglpRPqlh3HgJ2ErPTnBOXrntkb2nTepUQ4vmOJrF7BG9OVJtdcMUiTRsP867olkow%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-5bc\"\r\nexpires: Wed, 30 Sep 2026 03:29:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 6094\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44fbc5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":1243,"mime_type":"text/css","magic":"ASCII text, with very long lines (1467)","md5":"305d70c345bd55dfec63c84d19a456b4","sha1":"6c43f5f77e24d497b7120643afd44e8efb9ce793","sha256":"7f8faf3ddad50ecee476cdb37f00b3c8f62ee25c47bb753c87ad7924445441f8","sha512":"16afc8da106a3376edbc4bc16a710a830bd1bae240502200ed376618780b4b8748bd697872435100b7998acadb3ead263708f863eb82d69471873e3d10f96829","ssdeep":"","tlshash":"b8314c080d60ef1a2caaaff3e5c4da8b2c1855b35fb39d45d140612687958b53f3fe68","first_seen":"2025-04-22T04:55:21.189655Z","last_seen":"2026-09-29T17:13:05.959285Z","times_seen":37,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/Uwk2D5R1pQBBGxtG58.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.101Z","timestamp":1790701881101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/Uwk2D5R1pQBBGxtG58.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cc7xLp%2FLoFHjHDalsgaBSc5QdeSML5D9S0SikSIKwJ5UXRoCRqdH%2FrQgwhBxiti0uJShbZIvrD4VhzQ73PAUW3prHyj%2BERoVuInUbAREPom6tnXUqUzcEUqp6OQKDw%3D%3D\"}]}\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 03:29:46 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a74a9a2-77\"\r\nage: 6094\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b44ebb7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":830,"mime_type":"text/css","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-09-29T17:13:05.972448Z","times_seen":152,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/aiTUuRSJu5Bw-vXSJ1.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.103Z","timestamp":1790701881103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/aiTUuRSJu5Bw-vXSJ1.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcBzcgdj0rrMpv2MCvBop5dUueOTQK8Co%2BkM%2BlpJEf4pKLuN1wgItWn9WSA%2BRbHdMF1Hh5gChLbfZz7YY7o9LWyBZt1LigzxeYMMcF2Zb94RnrpvclcY3PsUjwcWxg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-694\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44ebb8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1684,"size_decoded":1710,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1683)","md5":"b94ccac64249db15670adc3a78f49ff7","sha1":"df66aca7f18b61fa479ecc143a2fb48e22ecc78c","sha256":"1359c9f5634c21794a75d5893208affa3efd04b1c048cb72fd5ae029fd132898","sha512":"33335b4d116cd422382286e521a8cadf5fe1eab9e1260f9f7cf64da49063f2300b50a1469d68e6d79ae1d15b4607dd3dfbc7e2ef64637c4669c2191f6b1473e1","ssdeep":"","tlshash":"61318498f81bcfbca47748395507c069910c4bdef326c70570e84a2607e7c39625ab6c","first_seen":"2026-08-11T13:06:41.460592Z","last_seen":"2026-09-29T17:13:05.957733Z","times_seen":3,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:16.982Z","timestamp":1790701876982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:22 GMT","end":"Thu, 03 Dec 2026 19:23:21 GMT"},"fingerprint":{"sha1":"4F:02:71:9A:10:A1:1B:03:0B:16:F5:66:E8:99:48:DC:83:30:E6:75","sha256":"94:3E:33:5F:A8:7E:B2:F3:CD:E5:9F:BB:9C:C7:8C:57:67:F3:9C:08:74:18:32:0F:F2:75:9B:9F:36:DB:BF:3C"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xiaomi6.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 16:57:12 GMT\r\nexpires: Sat, 25 Sep 2027 16:57:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 346445\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":35757,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-09-30T01:04:07.60969Z","times_seen":22994,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":10,"receive":9,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/api/adi?rts=1790701881080","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.085Z","timestamp":1790701881085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"OPTIONS /api/adi?rts=1790701881080 HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://xiaomi6.vip/\r\nOrigin: https://xiaomi6.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xiaomi6.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWwhOjQtM5n9G7Rrzb2HaVcdUHrC%2FmgCujZhfc%2B%2BMQSqlD9c1OfMijqHAtJI%2BvvNJD8LvTPy78spSDRYk3Gx5ICYe6wun1ivRRfJtKUdLMdqdc6Uc4GPfgnOJsMXQXjuRZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44ce63569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":776,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T03:35:24.417999Z","times_seen":18731719,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/KRRoLkjSaXDkLw1Aqf.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.089Z","timestamp":1790701881089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/KRRoLkjSaXDkLw1Aqf.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkV%2BH4IDkI6gxm%2FNO9sfe5j%2B%2BSQWK77Avirb%2F5HAAZEFzQsMl7GZgvLic9Kbf10cFr7XHZavNTL%2FoGKk9qsA5RmURKU%2F31xHEWB51Mc%2Bpt90bpbKEIVuKrpH4HUS1g%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-3ef25\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44cbb1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257829,"size_decoded":87086,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ae01f673e2f635d811992bf82b5fd9fd","sha1":"0c9245a89e542e247af420f6869ecc162801d77a","sha256":"b15896fb61b7d6c6ada629c36cfe0bcd7be9452b25e8b8b5aade74fff9406ced","sha512":"d4180c694df14dbee09132503c0ddd0d72fc349071e70b928e1a81ca2af5f41c3fe3393e7e99a760ddba82d54b178a00f287d34014970f5c5a7a7953c997c04e","ssdeep":"3072:jYV7IxqnZY5kWoH6J+2JfnXTSx86LTAXR9mSI/pJp3IVhAe4m:47pnm5AH6J+2Jfnokl","tlshash":"f2443a51640beb3ee4a3588d68491800340d4feed41c9d66f2fcb626afc6cb4573e7a8","first_seen":"2026-08-11T13:06:41.550941Z","last_seen":"2026-09-29T17:13:05.974707Z","times_seen":3,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/Ot1v9jkAsN_cLkB11J.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.096Z","timestamp":1790701881096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/Ot1v9jkAsN_cLkB11J.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmc7P%2FW0KWuCpqRStSFmIVW%2BRBG%2FtOitXF4DxmJ639Mi6TLZQI20rT2UJ51l%2Bh1Dkr%2FcZn7c%2BQm1z%2BZ%2Fq3UuRg32GtW3jkoCWAoXqTSH99WsyE99GfJvTlVJFai%2FeQ%3D%3D\"}]}\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a74a9a2-220\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b44dbb5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":544,"size_decoded":1126,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (543)","md5":"9c5329fab730ef95d7855927a6abd7de","sha1":"71f5c61ee71e7e5a7ea994818cf3fc2bedef5968","sha256":"52ef64d150496a410c5a049a47ab9ab4084d8081d92111632a8dc389956917df","sha512":"b8f94a9985c368f27acbe55346ba05c92640113e1b842c868f416df007dee83a0e03a9e6856acdb5892288555669613f489ba843c33640d7f91246abe03f08ca","ssdeep":"","tlshash":"4ff0200b9c11e3bd95bb5c143843301120483feccb2098c4e6e22270d392c3ab8aff14","first_seen":"2026-08-11T13:06:41.539919Z","last_seen":"2026-09-29T17:13:05.97756Z","times_seen":3,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T17:11:15.349Z","timestamp":1790701875349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ji%2BcQKPcp77Y0kwuUBTmO%2ByAMlXsDjxwM8sRPaav1Mz%2FRNl9gn5zvEzfnsExmyRfoLMNLwlZwi8dwLTgjteErTiGvPJ%2F7hu9u%2BYiHjp1naFK%2FkVyy7ugx02dbOawcw%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nage: 6114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a42c9b215da1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":59045,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"3c5ccca27969559f95858877a0778e3d","sha1":"bdf837c4c8bb25878c0521bf901014bfdd25a64a","sha256":"ac571a3d54ade4e79ed4e42602640a96d1a6de3bd22b5fb44740bcd70e6efee3","sha512":"1d6aaf0b2e205d02f906f7bc8684df6332f60e8a655e7eede576b11348de6c4347e8bcbe0822b0ef5928ef8d8bd7fe7ba9a843fee0cc1ffbbef11df9fedd4333","ssdeep":"1536:fSfHQ34OOb+NsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:U7","tlshash":"af2428a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-08-11T13:06:41.487129Z","last_seen":"2026-09-29T17:13:05.970311Z","times_seen":3,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":31,"connect":33,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/api/init?rts=1790701876957","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:16.960Z","timestamp":1790701876960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /api/init?rts=1790701876957 HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xiaomi6.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 17:11:20 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xiaomi6.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXNOfHfZ9Uk29v9uk0Tx%2B7xKOUABzwYPfMQMNpv70yi6Jxy4i4e2ztlrKHVcLt0FhgOUWa%2FJ%2BlrV9Z30W8gUrM7aQHSIKMBEvECnTqFG9sCchk%2Fw0%2BPiSJDNk139jkhuAVI%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b3eddfa56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46414,"size_decoded":35904,"mime_type":"application/json","magic":"ASCII text, with very long lines (46414), with no line terminators","md5":"123a8d039a951e3ad96f009a53c4fc70","sha1":"9dcbd2e0066aabf11a4fbeb946daa788fe046b33","sha256":"af4a53955129d91f7fed65187d2838c1a8d45d757e72451f768b3465ecfa9c89","sha512":"8ae72dd87d3537e8675e31a931d9f4fdfe7263d29a2449cf20006a0e7485a883a00cd1f0a9dfef017ae686ff4c32304508e56f601ba85607c359fff3ecbfca48","ssdeep":"768:A2j9ClFy7bQ2M4fsaR6ZimpzG1dDZPaqsSwJr0eF60eVl68PpPv3ta9muo1P68iI:tClsbQ2jOMmpwIqRwJrxY0UhPv31u6Pt","tlshash":"5023f22352d80f6a067d87c9087e65e289b968989ea01b7dd89df57305093ee1f0a872","first_seen":"2026-09-29T17:12:15.556591Z","last_seen":"2026-09-29T17:12:15.556591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3608,"timings":{"blocked":0,"dns":24,"connect":2,"send":0,"wait":435,"receive":0,"ssl":3147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/NkDZoSNjLSBS17_dpn.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.111Z","timestamp":1790701881111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/NkDZoSNjLSBS17_dpn.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hummRxMTEQvmje1iiLa99VbLoqaZ6Lyyrq6AD2hwPHvaiN2Bu9raNM314ERCAyaB%2FNgcGjcudkUU0kA7f5zNQm93mIFYm7gyMKRgtgny8RCZWnp6pBnLwIu8oMNe7g%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-8ed\"\r\nexpires: Wed, 30 Sep 2026 03:29:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 6094\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44fbc0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":1408,"mime_type":"text/css","magic":"ASCII text, with very long lines (2284)","md5":"1d05703cce897c29046715d007d74f1e","sha1":"53d486c3551997abe790771033ef1eb46057fa39","sha256":"e65540440b381d92458aff168ed8c0983537fca5b685f13755aa4aeb5f2b3902","sha512":"7548561c6089f474e0451bd1227ec62095e17b54287c4b544df0bc1e460744eab1615d25abfd76b778dd202e627f4bcc722e5467e858d4ee0dbcc305cd1dda54","ssdeep":"","tlshash":"7a41d467daa045faae33a5950f5585cab13ce9208e00df72b580d11c8dcf6f626136ec","first_seen":"2025-04-22T04:55:21.194396Z","last_seen":"2026-09-29T17:13:05.962298Z","times_seen":92,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/js/BL2ytyx1KGBuYLua9_.js","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.112Z","timestamp":1790701881112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /js/BL2ytyx1KGBuYLua9_.js HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMW5cAe%2F8H4Gk91p9LUEH%2BGGjzQqUoBg2GPth1rSVAt599%2FpxS1vXe4KIei5eEzqZqMxOLJtcRw84CEtktbzy9%2BXDYluOPRI32QEZd0qR2bfFRZ1UbOaZwm9GV5PuA%3D%3D\"}]}\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a74a9a2-104\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a42c9b44fbc1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":934,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"29b85e2617ea313056c911d3826cb9af","sha1":"ca6214bc1e4044a6b2c7533d90cc8dd9f491dd2a","sha256":"840882385a779f5a2a23ad7e62875928479bbe90aba9bb1c693294f07534a13d","sha512":"894454accb5a0aa1681fc0a3354fa081fb31c97151e2d61d4fc7d428841f20786d918660291515e043c1f14cdba93b691db96d8dce262ff2a29e9ec01c60e4eb","ssdeep":"","tlshash":"98d0974c8850f1b2a12d4c9cf27238238b653f2633b44e41504e45395bb58bb288ff0c","first_seen":"2026-08-11T13:06:41.482934Z","last_seen":"2026-09-29T17:13:05.973453Z","times_seen":3,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/ml11F70tlM9KkiXSOC.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.113Z","timestamp":1790701881113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/ml11F70tlM9KkiXSOC.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=2,i=?0\r\netag: \"6a74a9a2-2b\"\r\nexpires: Wed, 30 Sep 2026 03:29:46 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 6094\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo6OzQDaOXf69bLqDLzegHDnMak0YAp77%2BbBvRd46lm%2BxRP13VUoQtG2FNFrP%2FnNMQ8dLWGCUZhYuhyP0sCRLv6qdIvA7KuWQL0wain0K%2Bj6F%2F2m6cc6R5RYwdS%2FtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b44fbc3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":783,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-09-29T17:13:05.951102Z","times_seen":248,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/AepqFpCThgDnrp9dVu.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.122Z","timestamp":1790701881122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/AepqFpCThgDnrp9dVu.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHA3HcarrIZF%2FxeCzGDZj5zhLVTT%2FkVH4c817Wmckkd6xtDaJQ4C0KZo1I%2F5Tf7dl%2FI0kYFTW4gxtMysVrX24pkakoVSuO1DJ%2FYUbDY9jubvWzAa5BJxj8xJmelg7A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-4a2\"\r\nexpires: Wed, 30 Sep 2026 05:11:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b450bc9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1186,"size_decoded":1285,"mime_type":"text/css","magic":"ASCII text, with very long lines (1185)","md5":"1b256d74642ef046109e881b4488ab43","sha1":"7cdd36d6e2b1de5b6252e77bb4daec177073fb7d","sha256":"203f0947575944265c0450a03bc6f28c2c8ed2a1fb52b6f0f650cb3ebdb54c9f","sha512":"812d26d98680c1c57879ddb201c7923ae5f649f5a211bfe95351232c9f05f9a18bf0d8a39841405de29bf43b90d1cc88a9f795ab6c7b185145b723a62a4437bd","ssdeep":"","tlshash":"1421f4707124235fe07bc95359cc0def54327127e8168628a5a2a06ddd9f85b2760a74","first_seen":"2026-08-11T13:06:41.527826Z","last_seen":"2026-09-29T17:13:05.968222Z","times_seen":4,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/7GbjprkBUXCZCFR0-z.png","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.746Z","timestamp":1790701881746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/7GbjprkBUXCZCFR0-z.png HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/assets/WxxTyhdK46BZI7eXWM.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\npriority: u=4,i\r\netag: \"6a74a9a2-378d\"\r\nexpires: Thu, 29 Oct 2026 15:29:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 6094\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrnQyqiaLUDFn0Mk5xiLYH9OMCbW1JJVHOo6uzUumEO8wfJ8Any3zeXAjdcCUhzL5PTeQmbBcSIuMvm3WMqAVtHPnT18bO133va3fASKUrM4F3dZrEBJFimnM624OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b48ec62712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14221\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14221,"size_decoded":14954,"mime_type":"image/png","magic":"PNG image data, 375 x 850, 8-bit colormap, non-interlaced","md5":"728ec83c6509c03c93b25980ee4cc742","sha1":"344dde2b52de8cacdd1fd927ebda1c621f17bb3c","sha256":"363c895c3a4a413c2859dfafb871a10f57587519af9d343be49c9cba20afbcc7","sha512":"bc279d757e3bbafa0e8948973c68dfe06eeabdf1428a0d78ddbee074bad67df6aa08cc37e893cb7cd5ae535ad723c7294f215c7ee9cd6c7cf691d4a9c6eb5028","ssdeep":"384:Dbpj+jHOCqOGnwABgsKXKo7DMYgMdgh9XuZ22wUsKkcLR:DB+S/OGne7jgzuZ5hsJcLR","tlshash":"1a52b0515ae9e41d80e5263fc35022fea7b0cf27e84434074276a6520fba62adc9ec3d","first_seen":"2025-10-14T12:31:03.84216Z","last_seen":"2026-09-29T17:13:05.969585Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.760Z","timestamp":1790701881760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:22 GMT","end":"Thu, 03 Dec 2026 19:23:21 GMT"},"fingerprint":{"sha1":"4F:02:71:9A:10:A1:1B:03:0B:16:F5:66:E8:99:48:DC:83:30:E6:75","sha256":"94:3E:33:5F:A8:7E:B2:F3:CD:E5:9F:BB:9C:C7:8C:57:67:F3:9C:08:74:18:32:0F:F2:75:9B:9F:36:DB:BF:3C"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xiaomi6.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 14:53:18 GMT\r\nexpires: Sat, 25 Sep 2027 14:53:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 353883\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":30677,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-09-29T20:48:59.225668Z","times_seen":17942,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/upload/img/6a74b645d9a0.webp","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.737Z","timestamp":1790701881737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /upload/img/6a74b645d9a0.webp HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57224\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 16:28:54 GMT\r\npriority: u=5,i\r\netag: \"6a74b646-df88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9BwDGmh2yCIU2Dm288hBgdRYuEbU%2FdITH0gz%2FYIRNF0kaISGDUZgybG17qTcztOJP8z1AsE0XRqEEJaz1OFHN20vBeeYriAzDfAXUGF98fS2kztBecXrU9zBy5rgdX3x8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b48dbeb569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57224,"size_decoded":57967,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9d65de191a30229944d89635e89bbd05","sha1":"921dc7830db0da408841d62190240912cd8804c0","sha256":"b415580f79d7c0066312ad2b8bd6df94e78d34c4f2b4838e536c5eac92180745","sha512":"23fdd0dcba9086319f590a39b1731e094d4e614f7f665b7751a639fc7df5c6cfcd10e8e49a28d0da65dccc58b44a175380ccee45ac9290983726e9948385c42d","ssdeep":"1536:yQ8FeI5LF4LL47dWTJuPxXanS/+O4IfyDJftNP:y5Ffn4Ls7dWTJuPxXQa4RpHP","tlshash":"4b430194d05246ac8b3fad3dbe8f78099321697ec35d16fa421b6bb2401247faf156c3","first_seen":"2026-08-11T13:06:41.530283Z","last_seen":"2026-09-29T17:13:05.962892Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.xiaomi6.vip/upload/img/6a75a7bba7e7.webp","fqdn":"api.xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:21.793Z","timestamp":1790701881793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /upload/img/6a75a7bba7e7.webp HTTP/1.1\r\nHost: api.xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 29 Sep 2026 17:11:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 354638\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Aug 2026 09:39:09 GMT\r\npriority: u=5,i\r\netag: \"6a75a7bd-5694e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 6093\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2PA5z068GbE0wX93MJBCFqMek13UddMEadZCc3WYV1tX0fD282l9hgqapL0RQHzM05iaIYOOGRR1czzf0c23b0z2QhBT4H777GtYyrgRNDkIhBI4K5EBhBXl6DpfWWL9G4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b493c69569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354638,"size_decoded":355379,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b740eafb5aed95667e3b8cad5d436115","sha1":"e43c21be155129124c9604613405ad02aac95030","sha256":"f380059fd6f0af040e9a0dd95c506935c569101748ffa970ce85d7484532bcc5","sha512":"278ce31ccda032685d42ae3a218ea0bc50cbbd8b88003cd97c8e2c2163168ae7a9112b6503f272d3a22757bc9f291646c465d7c48e53fd15d6bf985f5690b36a","ssdeep":"6144:AFRBAqqAYHo6+usKB9u5U/ssYgGm2XwBsZ/AGdyAxM3FlCdYaSh6TJRV6w0qXFIb:ANAqqAYHo6Hst5N4Gzwi/X3ViiLsqU","tlshash":"62742334138f9165a3a4c1b766d209dee203d1bf388dcd95054cb10eadb18a4eae65f7","first_seen":"2026-08-11T13:06:41.542894Z","last_seen":"2026-09-29T17:13:05.960189Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaomi6.vip/assets/tuNHAuMHDVBe9b3THL.css","fqdn":"xiaomi6.vip","domain":"xiaomi6.vip","tld":"vip"},"ip":{"addr":"172.67.148.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xiaomi6.vip/","date":"2026-09-29T17:11:15.901Z","timestamp":1790701875901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xiaomi6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 14:57:28 GMT","end":"Wed, 04 Nov 2026 15:56:06 GMT"},"fingerprint":{"sha1":"95:F1:2B:61:1D:45:F0:96:41:BB:1F:82:4B:3A:47:F5:13:0A:A0:20","sha256":"1A:B3:63:EC:DC:F7:4A:5F:95:49:6F:26:E4:04:01:C7:88:E9:7B:1C:24:C1:95:F7:D8:3A:24:AB:90:F9:28:C4"}}},"request":{"raw":"GET /assets/tuNHAuMHDVBe9b3THL.css HTTP/1.1\r\nHost: xiaomi6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xiaomi6.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:11:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 15:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEcN2%2FGQr%2Bpnj5LOtHvI8CIHfZJs2E%2F7ub1C0dVCNomnnlscuKoPzO%2FPylT6Py24aF6Ni9aXaFHElblhcd7voQtQ6GQikHGkoI%2BdedlcnhODwaMAwTUDJ4WiRexzfw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a74a9a2-18f7\"\r\nexpires: Wed, 30 Sep 2026 05:11:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c9b246e9f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":3689,"mime_type":"text/css","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-09-30T02:56:52.48913Z","times_seen":554,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"xiaomi6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}