{"report_id":"90d53436-69bc-4ec6-b5a7-3a52fa9aec3c","version":0,"status":"done","tags":[],"date":"2026-09-20T10:22:45Z","url":{"schema":"http","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"title":"AbeBooks | Shop for Books, Art \u0026 Collectibles","dom":{"size":351770,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7063)","md5":"9d30d11bbb948253a3e3567d59ddb6c2","sha1":"2eecf74702cb07bfb35f18facec7a376d9a29727","sha256":"944f8958d361002ad731b48e256caaaf2f3e264601dbc07a1bbf8a898b939be7","sha512":"166a9d8f5004ff3ed17f8ecffad46ab9efbd91f816dadecfd2678b4e5b575c4eee8561ed8f3090698c8a9eb5276b219d4dbd2e388fdb37955ab235fcb9fdc323","ssdeep":"3072:lYoVHj1I6KZk2k8Df6oPZhiyV7GFTuxSIvuZlEzT5wCXlHuDtNIvil3wq707YCr2:CoVHjOwCRXG","tlshash":"a07419a6f8f0142ba25300bbeed6339d6b75ea0be70bc1d475ad83109f51dd56066b0c","dom_hash":"domhash75195db9aa8bb35c7655c167de6c5f39","first_seen":"2026-09-20T10:23:03.747727Z","last_seen":"2026-09-20T10:23:03.747727Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T10:22:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"assets.prod.abebookscdn.com","ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-03-04","domain_rank":610842,"first_seen":"2021-10-14T06:23:38Z","last_seen":"2026-09-19T22:15:54.418137Z","alert_count":0,"request_count":6,"received_data":61098,"sent_data":3169,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"xxddwsss.com","ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-09-20T10:13:52.013408Z","last_seen":"2026-09-20T10:13:52.013408Z","alert_count":165,"request_count":33,"received_data":1998809,"sent_data":17601,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:b164d16592","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"www.abebooks.com","ip":{"addr":"65.9.46.14","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1995-12-24","domain_rank":70311,"first_seen":"2012-09-05T19:12:50Z","last_seen":"2026-09-14T18:39:46.176148Z","alert_count":0,"request_count":1,"received_data":1513,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unagi.amazon.com","ip":{"addr":"44.215.133.78","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1994-11-01","domain_rank":7064,"first_seen":"2020-03-21T21:26:34Z","last_seen":"2026-09-15T04:54:54.108333Z","alert_count":0,"request_count":1,"received_data":368,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47ec171fdba9b8286941597fd9bf638c","sha1":"422236f2b35412b1a9d904debc6c66573a03e416","sha256":"306f364577ef3501d835c17088dcae60a69243a554bdd5efa4a92b91e5f08911","sha512":"29345ae8ced32ce3d02eb3d9ea264225e134c4798600480b4aa377808c84458f992d18c7969ae448b0bed08e140589b89112e138b23d57bbacfd5d8fd95f0991","ssdeep":"","tlshash":"f7e086f887e18007c9b349b6f7137b21a1d35c3aad93a07d5e814100b772117e4c4cd8","size":329,"data":"","first_seen":"2026-06-09T11:59:11.588699Z","last_seen":"2026-09-20T10:23:03.78655Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99b4f158a4b8d5ed391f66aaf1d8cc97","sha1":"57f31735e77b6753a8612e9aa9856e8e505104c6","sha256":"6825a2e7e3c7f4fbeaef05382f27f87571fdecd24a8747ab9fee4d8a22076281","sha512":"8bccaa2c7bc64e9ddc0fe5320c747bb85e47ba0165e30e17fcf9eab2746bf375df0fe63ea6fa16a613d907160ee8cc8d555666a258b33a41220a40469b08c60c","ssdeep":"","tlshash":"25e0c62d883a0146ce1f2c2df8eb8002ddb00c3c21098495c09ecc2cd5b0deaaa7ec88","size":358,"data":"","first_seen":"2026-06-09T11:59:11.589825Z","last_seen":"2026-09-20T10:23:03.787305Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"380bd5d1e6e528aaf51d0d7a1848be9b","sha1":"98fa47e4a22f8c0cb3c0b6937f64e76ae382c800","sha256":"32e7c53b5301fc3e33ea50b6caa6eee20de0f1831dba2a39505830f4addaa8fa","sha512":"a59f1fd8b85eaef181d57e3d24718a1fb5cc88b19b864a9bb309e48074b4261a2d68f12fefc9732ba918d7021e2ae6c00ec0d0b8bb307c542c6f23c328c424af","ssdeep":"","tlshash":"5ef05ce7a43590aa8eaa911da9337e960a3c709ef680a7f684946e0817c82801162239","size":459,"data":"","first_seen":"2026-06-09T11:59:11.59108Z","last_seen":"2026-09-20T10:23:03.788004Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73b8d17af736925977f3b34fd2699e0","sha1":"0a0f11d06e1531b9456e81c3c5eab8a32f5d5eee","sha256":"aff01a1649bc7f06130366dcf7844bcc787d904a4692c4466819d86b3fbb3f68","sha512":"8cfcd81407e4e52c4a46dd6ff204f55389ce616e1363274c112609281cb0c51853dcfdb755dd277aaca9ea38b7914108020114e9cc747b3f70f9a5e6dcf9b79f","ssdeep":"","tlshash":"ecb01248c15416201fb42c3ee0864d9045d02d1b7d5ec05d1068400072b5cc325c892e","size":103,"data":"","first_seen":"2026-05-17T18:03:30.364881Z","last_seen":"2026-09-20T10:23:03.788583Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c303321a417e73449a31ba4abcac01b9","sha1":"35a674bc1e453ac4e78c98516213761669ad8644","sha256":"bd3de279305a4b267678663de5ce47288a0197ab6527c0e0fb55fa8d5bafe53e","sha512":"e97b9a096f8ffafc04e70aea4a2ca242c2dd2f3f2252cc3408a5760bc5383bfb2635d4a08e0deccb8120a05da20f953e0198eb3e2573bb3238366712c8bec173","ssdeep":"","tlshash":"17e0abe664a281371d0632acf9067f6e1ef0a104608342e880e5cfa9710e15a12b8938","size":417,"data":"","first_seen":"2026-06-09T11:59:11.593335Z","last_seen":"2026-09-20T10:23:03.789139Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe5a4119252735550f0f165ec5866853","sha1":"82b5fd8c15e5bf12d43b568bd289b2b3d6b0facf","sha256":"62ad415a8feddd24ed101bc1bed5a2dc5a8a5aa0136cddfa5a76bbabe4f6023a","sha512":"377a38afd80198ee883944269996d7f724e878688d3c7586859ce72fa8fed94f9794a1fbed14ab981e245fe967289c1ebbb2efbfa0021028b27fef169d2a6394","ssdeep":"","tlshash":"6e01b89f5deae3b09a4310a7af36e906b71221a70040d109b80dc51a6f60fd6881cdc4","size":816,"data":"","first_seen":"2026-06-09T11:59:11.594431Z","last_seen":"2026-09-20T10:23:03.790135Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66cf396ee649b8a6704dd272d9e95365","sha1":"8846359bae5a43deb57d63fec3d79a75e29b3ef2","sha256":"144d28b0a713d5e0f3563f0d2a1372ca5df80d0636a6b58822e52923514a0e1b","sha512":"2d1df661f299cc65aa87ca967bd15f1d11ab26c96b5e8320351ebc2f1bc13bbc2c89b14268d18b20a45005c9b514b007d600086acb86a2d3315f9d4fcd713802","ssdeep":"","tlshash":"46b012cf05911170d1b602538f03b3e40286415869a5c1bcd020500024f13470041c84","size":87,"data":"","first_seen":"2026-06-09T11:59:11.595894Z","last_seen":"2026-09-20T10:23:03.790802Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8d7895bee8edcca83ea394328169068","sha1":"42955b8c0d67f6a8af6a8df3ab734172e5f1df80","sha256":"9daa4f9e0f1fc84528fdf4f0d7cfbddf6520b9f5e0b4713117a4112e1b3f1f23","sha512":"0f6c721041e41b5dcabad844c8349c0d368f3af1825a59e2974111ac8c20395672a248babf16206c1a10296851d2977eb5d9fa2fc6bfe07673b67ac2be118fde","ssdeep":"","tlshash":"83d0231d40671471247730d56f9b22157336005308c199867e4d53641f1096ec2576cc","size":260,"data":"","first_seen":"2026-06-09T11:59:11.597754Z","last_seen":"2026-09-20T10:23:03.791376Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ab8eb9f564ca326e038ced9c20d62b","sha1":"3dc7d1451d6cd84e42406235299552f75068d11b","sha256":"0e897628b61b58fc28c66c96ce17b63b640524389094d25e357e37ba77d17c44","sha512":"d006295a5975c9deaa51c82128533b7f071263a7e56c82cf2312ee4e99dee4a3c8398240f50d6af156d07dd0a3e103d79f054a14bed0b5e4db612d97e98c2282","ssdeep":"","tlshash":"4df02e866c43b86f16d1f76bde596f4738e14539204ce0741245f03c7458b9b9c547dd","size":509,"data":"","first_seen":"2026-06-09T11:59:11.598916Z","last_seen":"2026-09-20T10:23:03.791978Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"645de7f99ddfeed3a34b9f57ec43571b","sha1":"731e3a90266a941b61ae2348fab494801958d219","sha256":"a3efc2f724754098b7c93c6b8ad8d5d3e88686c0baa48f5304d4f6e63f4d67ab","sha512":"1153965ea79adf2fe1bdb95372494d20039cc3605f7559e59bd0655e9cc9957ddfc41725cd2da2337e74cdb33c7a96a4432f7d078a360774a49aaee6bf827566","ssdeep":"","tlshash":"87d05e2fe812f07b50cee4968eaca9882e3502743088c844ac1cb8524a9c55f2995adc","size":260,"data":"","first_seen":"2026-06-09T11:59:11.600112Z","last_seen":"2026-09-20T10:23:03.792539Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5019bc2df342a6f0670497b42f20e91c","sha1":"fecd7fe01d55ac8d6f472ccbc74d81a2104b9c05","sha256":"71fc1008abdcadd8d58250addd8679de8b3ee03360cd6ba7895690f538902d23","sha512":"0098d6f495064e56986aff1954960c4695604e5f72b01ea9c5187242bf223a530c4883294f46eaf468d3cd4d2b6021e2be0c39703436485a16f8fca54275fa2f","ssdeep":"","tlshash":"d4d0223f0802f02b10cc39db9e9c0d0a3b3d123830ca08602808f290acad41f2826fec","size":213,"data":"","first_seen":"2026-06-09T11:59:11.601196Z","last_seen":"2026-09-20T10:23:03.793127Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9381e8d06e091007ca21e43c9d3e90d","sha1":"ea94c4118f589e920ca935019bfc464e27ddfb31","sha256":"ff14cd343836d78b98f659cc1622db0e8bc500defd6870644142f406dd2a623a","sha512":"4be53d8a33aab52aad92b433ec0d29938ecfb218b5171e8962454df239677a736b466205671b8bf323aafdcf45854e1016266ab3e4083c3899bc7799caded9e2","ssdeep":"","tlshash":"2d11c07fa80814329ab73121f5cfa3686c7741ca65014881089594b078bec6e573befe","size":883,"data":"","first_seen":"2026-06-09T11:59:11.60213Z","last_seen":"2026-09-20T10:23:03.793775Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"332f11fa4132a24c479f8d10b2018073","sha1":"33ae7d6828016d2c58bfbc91472f2242184f80b4","sha256":"dc19735b64710270d87d7ec9b2a8b68134896e6b7abc2480c936b4b06a6a9ad6","sha512":"ef71236239a0800e9f0b435e8bb8836aeb113edfa97d251cfe48ecb20d6f105d06d7341aea5ff1dfd73cc6e9b923bda94f1fbf63f441b9b9bedf38fb049f8029","ssdeep":"","tlshash":"6ac080fe34a66517d02a0273ce4fa24d5fb47a5fd7d2f1b5613081045e7475310d5c54","size":180,"data":"","first_seen":"2025-08-31T04:44:53.950334Z","last_seen":"2026-09-20T10:23:03.794684Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dbdbaa17c0320923abcdfd6811086fa","sha1":"af7b9aab57804e37206f5e13ce8a4f9799af98f8","sha256":"ac357ca0c5f8933f5fb94f21bcbc6a7078c61c8cf8f39429e93e1aef8a6fb325","sha512":"aa604ffba2672bf31b94457918b9b67b6d7836f626cf63f5d308e9de06f913fbef6a9b47a7c8cddf47e43fb3dadbd4ab3a7ae92096105ae7821e0af48ee6c1e6","ssdeep":"","tlshash":"a051595e85b60db101b3b02aef8f6719303100ab34468b143e6c5f957fa911e87a5bdd","size":2670,"data":"","first_seen":"2026-06-09T11:59:11.603613Z","last_seen":"2026-09-20T10:23:03.795239Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/eventbus-e0d54b1290.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0d54b12906320feded4cd310ab06890","sha1":"2a64c6addac3c6b10e968b9d6ab129954dccb216","sha256":"eebdb074ff3f5b4854b7f146cbd18d94853a2a95f467d8d50fb4e3a10fcfef25","sha512":"ef15af58a5b3b0dc63be35c467b970937f93e5bb965691fe084775df23f6c23666773e4086b5c786fbfe536231b2188a52a69f88ef9e5d230e5d53f30859f2e5","ssdeep":"","tlshash":"d311a39c19f0927501da967f7a4d3e5f2192cf9e2015200c729cdecab788d4fe5976b0","size":881,"data":"","first_seen":"2026-04-19T02:47:52.70353Z","last_seen":"2026-09-20T10:23:03.76934Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/productwidget_merch-8ae3fc5eaa.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ae3fc5eaaf82e4d2a300c4880286f34","sha1":"210bbb0882f4dddb1e0889782ab7a03604cb49f8","sha256":"aca27bc2826407419bafb8b46bc1656002132f5130864affc462602f16e35641","sha512":"1f6f894f907e657b6cc04af45e56f23a2d45414f7483ad5ad5009bb23e60a016d446ac87e4d82f811e94c2fd1594022d2da8e4f302cbd22cc519b39708637a38","ssdeep":"","tlshash":"3c81c9e63658b0711b5775e0c42b348af07106345c9d4a20baa7c0bbf82279f9577b65","size":4064,"data":"","first_seen":"2026-05-10T14:16:13.152471Z","last_seen":"2026-09-20T10:23:03.773174Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/All.min.7e6ab57976631cf2500d4b94dc6618e4.gz.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4eb2ddb43d32012f665d3eedfa6da1d","sha1":"8af1fb62ac3b20b04b9fd06eddf3919bbefa8fce","sha256":"b863869b47b5fae7517fc5da9ce95b8c4bfe2be51a458f6176359970c81dca45","sha512":"3e14d400ef1d3c400b0b1740dc26ee3fdb3d552eccba3a460e9e55b0786678d2f594cc55571aec1b4bb5756c2d40d226ffd2ec83aa9a999e8677510d04788e03","ssdeep":"3072:KKF7lW2wrkpDgjot8nWLKnTgVoUmcN1o5vNKCB+OEPsRO:KKnW2wrkpcje8nWKTg7Av4CBc","tlshash":"d5443a973346b63242dfa1ebb0664245b236569d6401812cf83cecdf5c68d4a32bbfb5","size":255283,"data":"","first_seen":"2026-03-04T17:00:45.409259Z","last_seen":"2026-09-20T10:23:03.764277Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/react18.bundle-8d00f21452.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d00f214526b2f83cd11b5cb4dbeae1c","sha1":"2d991e0e79862e2cf2938358aaad0677373903b0","sha256":"f5d719aa39dd57fb86f559cf2e209603eb61a64ea88dc641436c90e5f8252336","sha512":"40f6efcb1e7bae687e75e5e35fa7292c78ef10bac9af98e46cb4536aa3330c72fea815b39089b14686f9a4de6cb61d529217704ef84c3458fc434576a857223f","ssdeep":"1536:Uhf51/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:KU55qZpAZxA61iz6Phkm","tlshash":"a2d339e87992f6425ab212ab10ef1047737c9a27784c4cb1e540fedd64b806da17bf8d","size":142587,"data":"","first_seen":"2026-03-04T17:00:45.485449Z","last_seen":"2026-09-20T10:23:03.770909Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/productwidget_core-78b1a058d2.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78b1a058d23b26528a17168f7cbde761","sha1":"c57dbafd4377eff8fd02e68bf73f683247eb9128","sha256":"25583f5b80440ec75971919bbf4f4c18b7dede21840ea9a33e0e356766ea5671","sha512":"834178bbf5cbc7bc22c0d864066a9562556ac209636550da034920c96db5c8df26ace997727e8d768ec82e8f9b4323899550e5d3e1a1d583dc83ac2eae760bff","ssdeep":"768:AJK+E3ftapjvCSuVqFDb40LTBbQulByxreBZbVCpc3t/9hdaO7ui3ORS:AA+IQjvC4N8uryAZbVCpc99hdz","tlshash":"ad43ea84f6b6367de11b4ca8d02fe649743a3604da8e0875b8aaf46255161ec7333fdc","size":59746,"data":"","first_seen":"2026-05-17T18:03:30.339072Z","last_seen":"2026-09-20T10:23:03.752329Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/webcomponents-loader.2938a610ca02c611209b1a5ba2884385.gz.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7d9f55830713ddc982a9a67c539f51f","sha1":"b6a8ef12730c4236d93f61bece158480be5d3f13","sha256":"e524d44843e7d1c9ec644402f6d3c2b74655676f373b5c1338807c11afc2325e","sha512":"ed54711a446c5f005b2cb38a37dbd106e38cb35bc5c926918b23ec7e91b8fa23469e19e421d4e89ecfefe4f03ecb16dcd8a15bbbadd213d626f420787f62d218","ssdeep":"","tlshash":"9b514438663597b102a8646e33bff74b36f79565d85a4041440adac87fb0f4be21bcc6","size":2440,"data":"","first_seen":"2023-03-07T22:27:43Z","last_seen":"2026-09-20T10:23:03.783235Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/csa-d403f7adf4.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d403f7adf45f72a4c120a930c3db5212","sha1":"9b3b66db2e0dcdd9b54aefc2c5f7ff4b972cadec","sha256":"5da646816f30346e2a7c0fa94b644891ce2584254e2fa9803704764a39109fd3","sha512":"43ed74488b6e34f71eba9a3850f8138b667cb6df56cc105933267c3ae978021277219019be90d994c86d3a3365b90abbbd816e357bec2cfb9bee7af5bc56c028","ssdeep":"384:MaoqEt6VPBhJNXKiX5qzBwrycSQ0lt7Xbs9CxPiK2Q7V9LNIzZpB9s1576YmJdxI:MDLONx+k0rrxPl2Bi1t6RY","tlshash":"63e22ad9b5d678331267313aa0af610bb33a23a7344d88519415b9e42dbd7ed8323f5c","size":31766,"data":"","first_seen":"2026-04-19T02:47:52.719676Z","last_seen":"2026-09-20T10:23:03.751248Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/global-base.v2-629127c516.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"629127c5161d253d081ece39bc1b4b76","sha1":"e606054d81ff27aa6cc1edb05c8949b99eb8ea19","sha256":"e87e9ed402e0c24f03fa4ad338ebea207b075c2e7da4a77bd9b55b9f7dc66b41","sha512":"8bc641abaef1d55691c424756ab05534cc44f5703b80eb7a611a1d67fa285d998f686a88196b0c25d8030a6810ef45692132fce50f50450524a6cca9e868453b","ssdeep":"","tlshash":"6881846fb071a6b44093829f743bbb0c742192189819d510b56adcd47c6cf4b89e6ffb","size":4051,"data":"","first_seen":"2026-04-19T02:47:52.743901Z","last_seen":"2026-09-20T10:23:03.755124Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/AbeCookie-8954a5518b.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8954a5518bad8520734539f1393f0acb","sha1":"a181f6c623b3cd0965acdc39deb634da28acd79e","sha256":"e6c3c3304252464645e7d6a5870225cd294e5d72ba05a6a3834c3a9ca232f315","sha512":"9fca92e83911100a0a7cddb84cb8b2efa7a595a3af6d5631c1344649f306a7dd7ce99d3041839af590047f436acd4123851a2fbe9f7d1984639b6b37e6239043","ssdeep":"","tlshash":"b311e2d87da0747cc1050191acac9bf979384d5e58d059049a20b8b079b4c1b9fe7cff","size":1085,"data":"","first_seen":"2024-10-26T08:53:13.549431Z","last_seen":"2026-09-20T10:23:03.750282Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/searchautosuggest-ec885890ce.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","size":21212,"data":"","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-20T10:23:03.768606Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/sitenavtoggle-e7be457d87.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7be457d87e080b399097e44b8936e8b","sha1":"daaea1eef487b7a052df752a06b1ab5c95fb28ad","sha256":"98e0b7c1127f88b442022832d82128cf4de1dc369833f8b371c2da1ef3bf5578","sha512":"61d0c5a60b62b1992e8fab2182849c42dac8ad39e7d2abb464236e276e2ad545b63fc779a7d00c8a9acd87ae9030460ac3abbdf9b30b27a6e2e9a9541d4816bf","ssdeep":"","tlshash":"3611dfbbb61b2c3342d8e4faaa45a6c0a6a08148cad100753d7ea85e00c7ed145f66f6","size":1091,"data":"","first_seen":"2026-04-19T02:47:52.782745Z","last_seen":"2026-09-20T10:23:03.761919Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/productwidget_recommendations_home-78267ef0b8.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78267ef0b89855bb2721fa5c51a18775","sha1":"b304965996799dd9bc11f736f075ea5e71020140","sha256":"080b2a57b646ed1b2d2f9ab4df5a6eca898d0b58ab51f86e5e91959e4817f0f1","sha512":"4373a9f09d89f47937e55cf34333838312f70f957890e879c86a0ac9815952360fb2201a1666f72b40b7b6903124ecee68ebb896355548ffbe3c9b256fabd72f","ssdeep":"","tlshash":"bc4165d831c0a48c0253f0a4047fa196936b68915a6ef895c653d0f7bcb83cd8163f5a","size":1944,"data":"","first_seen":"2026-05-10T14:16:13.176621Z","last_seen":"2026-09-20T10:23:03.754344Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/components/searchautosuggest-ec885890ce.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","size":21212,"data":"","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-20T10:23:03.768606Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/global-utils-e3e4047e25.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e4047e25afa3c7825558c04e3ca2b5","sha1":"143849b1b5447a462baf1862aa74c8dc83d4aeaa","sha256":"0b73e4f32ddf3620fa1c74debe67f7807870d2412e542daf646290c8e02ac805","sha512":"2fdd12caf8014d23a3c7f8de2a4872a13eeeedfd4e3e12d1f6cd1f74765d5eb72735457fef55c4a6007d199839996f132ffb4837cc79326b813e8f9ab71cdbf3","ssdeep":"384:HiJvpPyJU94xpLu493xeiZ23xx9Ay2HM/q3y9ezpJ53u/jWDvQaX:uhfUlI/9VOLy9eajWDvQq","tlshash":"92a229cd7481f02a476720b1802f6b0e71f5551a7889c4a0f260e8f6acb591f9b7be7d","size":22388,"data":"","first_seen":"2026-05-10T11:59:58.021609Z","last_seen":"2026-09-20T10:23:03.753477Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/bootstrap.native-b164d16592.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b164d1659295b01e378040e8db9b58cc","sha1":"5af99a75d6178b600399c642c2204efef8a46f26","sha256":"2983f595bf116c7580299d8bc3e8e5df660c300b249910cd2e2d466b9b5d2a68","sha512":"c60554a6c6797ba9b95aa0a9f35e5bbe3423190d822f63b9dde992e779dd831bc89e7acf6963958fd3a123db7e372aaeaa832e6cf84d011a0f640bfb4bd14626","ssdeep":"96:huvx7Sh+yHN8s8sHYXG+oQ8DPQS5grQBwDJyg2Qsk6vlp045cKlFzpM8xn:Gx7SEytWs3+oLDPIr4wDaxkklp04BlFJ","tlshash":"d1c164b823243d7405df48fb71feab883a7564b0d8071968a53ddc5a1979d860223fe8","size":5609,"data":"","first_seen":"2026-04-19T02:47:52.760678Z","last_seen":"2026-09-20T10:23:03.781589Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/cwrumclient-3c0c7d1c41.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c0c7d1c410640a98d53b3e800db9109","sha1":"d6a0fa99a6246af255c15c6c1fef9429b7b94ed1","sha256":"58211190bada881571ae6d5674f3c72966d03f667d5fdc3eb90568d8968a329b","sha512":"15123b10d77a2331cb0900ed8e6cd56bb9dd8552e071998b10590fe8dc35e891ab117d087bc85d3b15b2768f3bfe334c03485363049cdeb9e34280fccf0b063f","ssdeep":"1536:1YrHLQlQr21Pz9v/fN9J2JTFrRyrjMr61tTXtTNr7OBbGUrncrcPrOyrasUuJVhr:X9pX1Pp7VUrn1UYVhBlr","tlshash":"45e33bddb2d5b0364397a6b5d13f1206b33b1998a88c407cb525e5d67cb988e8327f38","size":145495,"data":"","first_seen":"2026-05-17T18:03:30.290126Z","last_seen":"2026-09-20T10:23:03.763656Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/cookie-consent-util-40a661b2df.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40a661b2df71bbd63a063997c7f87b12","sha1":"47fe5ada624b168bdce13e6036a6efd120100278","sha256":"755801314e8ba786f740db1a3514a535293d64fe993554d4c2d3b48b9f4465e0","sha512":"badb7ef8a6723f4e929491a2f7dff122c87b271ceb3eafdaecf97e817a75c535bafb675032dffe1f5e58daf7a661b2ccf8b1d043b45de4340253f1022cc8160c","ssdeep":"","tlshash":"0a112180b3c2690882211d3a50a9716f738883372b1cc8096a5240e360a421765fb93e","size":970,"data":"","first_seen":"2026-04-19T02:47:52.714201Z","last_seen":"2026-09-20T10:23:03.784352Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/PixelRenderer-7a12163030.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a12163030ce987109ab0ebf327ffffe","sha1":"2bc2de6ff7bf940d277e5e8734b6e2feae5a74a3","sha256":"c19fdad23036544d558941f0a3323975ba97730ddfdacd042a7b9bb0ab780e44","sha512":"94102269edb2ea83f9170bc4aa8f1ad8b9f52b65a8af16cfb53572c5b335cc297b473140f9dea90f267a9950bddd29607beda34aeb64fee017526247b8b2d6f4","ssdeep":"192:+WpTHi5Y2TfqjgwSVSwGzxCar1tQJMg6lY5F2aCq+HZIP:dpwTX5aRqF/P+WP","tlshash":"d4e1b92a30d2a51f49c270612d7f375aa17b12b8344e501c79168ed3bd38d4e12afbf4","size":6999,"data":"","first_seen":"2025-05-30T17:32:39.537281Z","last_seen":"2026-09-20T10:23:03.780191Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/AbeCookie-8954a5518b.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.902Z","timestamp":1789899734902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/utilities/global/AbeCookie-8954a5518b.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Wed, 02 Sep 2026 20:06:50 GMT\r\nserver: AmazonS3\r\nlast-modified: Wed, 02 Sep 2026 17:42:30 GMT\r\netag: W/\"8954a5518bad8520734539f1393f0acb\"\r\nx-amz-version-id: D2vvwUZtf7OOfwreeBr4APHjeBNnRo_w\r\ncache-control: max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nvia: 1.1 3edeb493aa0b4547b903cfd306c07f70.cloudfront.net (CloudFront)\r\nage: 1520125\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: IT-pSFXhqGXg3Jitov9Zw4JVMoEp-9ksa-fD3hR-LBNrfpypAXjtbQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1085,"size_decoded":1031,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1085), with no line terminators","md5":"8954a5518bad8520734539f1393f0acb","sha1":"a181f6c623b3cd0965acdc39deb634da28acd79e","sha256":"e6c3c3304252464645e7d6a5870225cd294e5d72ba05a6a3834c3a9ca232f315","sha512":"9fca92e83911100a0a7cddb84cb8b2efa7a595a3af6d5631c1344649f306a7dd7ce99d3041839af590047f436acd4123851a2fbe9f7d1984639b6b37e6239043","ssdeep":"","tlshash":"b311e2d87da0747cc1050191acac9bf979384d5e58d059049a20b8b079b4c1b9fe7cff","first_seen":"2024-10-26T08:53:13.549431Z","last_seen":"2026-09-20T10:23:03.750282Z","times_seen":35,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":40,"connect":10,"send":0,"wait":11,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/csa-d403f7adf4.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.667Z","timestamp":1789899734667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/csa-d403f7adf4.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M1h8SIg8q%2FfU2ETMjBWc1f94vDN5HW1zJYt7YzcQ3i4F%2BhWNuEtlsUbOSD8gerrwWeygFP9qUMqg7gnjxTEm%2BjuN3TneaVmeXXYv75RbCNLx%2FZ0H8XiZTsAWjXrN66E%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-7c16\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dac9e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31766,"size_decoded":13644,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31766), with no line terminators","md5":"d403f7adf45f72a4c120a930c3db5212","sha1":"9b3b66db2e0dcdd9b54aefc2c5f7ff4b972cadec","sha256":"5da646816f30346e2a7c0fa94b644891ce2584254e2fa9803704764a39109fd3","sha512":"43ed74488b6e34f71eba9a3850f8138b667cb6df56cc105933267c3ae978021277219019be90d994c86d3a3365b90abbbd816e357bec2cfb9bee7af5bc56c028","ssdeep":"384:MaoqEt6VPBhJNXKiX5qzBwrycSQ0lt7Xbs9CxPiK2Q7V9LNIzZpB9s1576YmJdxI:MDLONx+k0rrxPl2Bi1t6RY","tlshash":"63e22ad9b5d678331267313aa0af610bb33a23a7344d88519415b9e42dbd7ed8323f5c","first_seen":"2026-04-19T02:47:52.719676Z","last_seen":"2026-09-20T10:23:03.751248Z","times_seen":23,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/productwidget_core-78b1a058d2.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.674Z","timestamp":1789899734674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/productwidget_core-78b1a058d2.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuSs%2FNoHlC8qtcTddFHS2dwaZuxprlncKu5u9QT3kmSswgBp4eGR4DSmL34ZJjKrrf1OJmtlHWEyr1unR5oDopehrFcgz4Wf4iFohIth9uHHUOXlu%2F7gcIUKtpWQ1Mo%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-e962\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dbca476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59746,"size_decoded":16992,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59744), with no line terminators","md5":"78b1a058d23b26528a17168f7cbde761","sha1":"c57dbafd4377eff8fd02e68bf73f683247eb9128","sha256":"25583f5b80440ec75971919bbf4f4c18b7dede21840ea9a33e0e356766ea5671","sha512":"834178bbf5cbc7bc22c0d864066a9562556ac209636550da034920c96db5c8df26ace997727e8d768ec82e8f9b4323899550e5d3e1a1d583dc83ac2eae760bff","ssdeep":"768:AJK+E3ftapjvCSuVqFDb40LTBbQulByxreBZbVCpc3t/9hdaO7ui3ORS:AA+IQjvC4N8uryAZbVCpc99hdz","tlshash":"ad43ea84f6b6367de11b4ca8d02fe649743a3604da8e0875b8aaf46255161ec7333fdc","first_seen":"2026-05-17T18:03:30.339072Z","last_seen":"2026-09-20T10:23:03.752329Z","times_seen":20,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/global-utils-e3e4047e25.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.666Z","timestamp":1789899734666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/global-utils-e3e4047e25.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GWYh0gHAG4Vrth6BGWO1kUxjTSUOfJ0HFnNBw9ai%2BxgmgAKSIMf9PFnUp%2F1W1xF4nzcxEoONz9kZKWU36N1HBQKmWkhb5KCFzbvsc5hfQ4PB64WzLTZY1WMK18h1wrw%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-5774\"\r\nexpires: Wed, 30 Sep 2026 10:05:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 988\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dac9d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22388,"size_decoded":9099,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22388), with no line terminators","md5":"e3e4047e25afa3c7825558c04e3ca2b5","sha1":"143849b1b5447a462baf1862aa74c8dc83d4aeaa","sha256":"0b73e4f32ddf3620fa1c74debe67f7807870d2412e542daf646290c8e02ac805","sha512":"2fdd12caf8014d23a3c7f8de2a4872a13eeeedfd4e3e12d1f6cd1f74765d5eb72735457fef55c4a6007d199839996f132ffb4837cc79326b813e8f9ab71cdbf3","ssdeep":"384:HiJvpPyJU94xpLu493xeiZ23xx9Ay2HM/q3y9ezpJ53u/jWDvQaX:uhfUlI/9VOLy9eajWDvQq","tlshash":"92a229cd7481f02a476720b1802f6b0e71f5551a7889c4a0f260e8f6acb591f9b7be7d","first_seen":"2026-05-10T11:59:58.021609Z","last_seen":"2026-09-20T10:23:03.753477Z","times_seen":23,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/productwidget_recommendations_home-78267ef0b8.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.680Z","timestamp":1789899734680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/productwidget_recommendations_home-78267ef0b8.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ru0B6PRI2CxHW2YTPFe%2FinszjRVqjZG43vCMzW1DghIBvZHTGXqYbn%2FMePAqcl0aNPxPImxtDWpHMTVedVHVeXmuh%2FlZDTmgcqDzpLRKPDQ8uRo3y0XhGfHe7Xaf1Z0%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-798\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dcca676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1944,"size_decoded":1872,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1944), with no line terminators","md5":"78267ef0b89855bb2721fa5c51a18775","sha1":"b304965996799dd9bc11f736f075ea5e71020140","sha256":"080b2a57b646ed1b2d2f9ab4df5a6eca898d0b58ab51f86e5e91959e4817f0f1","sha512":"4373a9f09d89f47937e55cf34333838312f70f957890e879c86a0ac9815952360fb2201a1666f72b40b7b6903124ecee68ebb896355548ffbe3c9b256fabd72f","ssdeep":"","tlshash":"bc4165d831c0a48c0253f0a4047fa196936b68915a6ef895c653d0f7bcb83cd8163f5a","first_seen":"2026-05-10T14:16:13.176621Z","last_seen":"2026-09-20T10:23:03.754344Z","times_seen":24,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/global-base.v2-629127c516.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.668Z","timestamp":1789899734668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/global-base.v2-629127c516.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykeIQ3CAWFmxl0OpH7PXghwNva%2FC8eSLNTjgwVFSebOb0o3LO5hj%2FRsefAnP958WcWtClF8uMC%2By55nUVlIv1xJLPhwcuu1IHm6j%2FkIOc6Fdr3GWoAcf2fReC4rC1Vo%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-fd3\"\r\nage: 988\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dbca076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4051,"size_decoded":2473,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4051), with no line terminators","md5":"629127c5161d253d081ece39bc1b4b76","sha1":"e606054d81ff27aa6cc1edb05c8949b99eb8ea19","sha256":"e87e9ed402e0c24f03fa4ad338ebea207b075c2e7da4a77bd9b55b9f7dc66b41","sha512":"8bc641abaef1d55691c424756ab05534cc44f5703b80eb7a611a1d67fa285d998f686a88196b0c25d8030a6810ef45692132fce50f50450524a6cca9e868453b","ssdeep":"","tlshash":"6881846fb071a6b44093829f743bbb0c742192189819d510b56adcd47c6cf4b89e6ffb","first_seen":"2026-04-19T02:47:52.743901Z","last_seen":"2026-09-20T10:23:03.755124Z","times_seen":24,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.691Z","timestamp":1789899734691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vmsF5P3%2BnZ253Bs5UYlWiIWTrEZwEnQsyVxiZug3REFklQv%2FRTw6fSe2ryucW6BQZrWL8rkOdGMJv6Y7ksf5%2F%2Bq3SyE4DgY91Vf%2FkPVh1qb3KvfJ9FOM%2FV0NPpMncE%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048390-b87be\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9ddcac76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":755646,"size_decoded":78677,"mime_type":"text/css","magic":"ASCII text, with very long lines (62528)","md5":"48a486910b3e4b300f2e20ccf22d848e","sha1":"6e79522acfdbd27c44ed3d2b84e0f028fbac8837","sha256":"905307ac20f9d0bb5d45e092630a709cc5d48a08814fe21a5f9c7751b639b8a6","sha512":"d6359cf17595a6eed06f1ee63688cb7ab3562d81ab32a9527f69f640f80ccd13fc202e831a7faec8f68def1065e77736f4b5007ab522ac533843672839c9eef9","ssdeep":"6144:0EJSZhQ2DgOlpX2k2ugEhSLD5/5++RhcPKdo7G5oYgrZ6sSY6rYNE3fpE3Slqh5L:0iSh2kjgEhSqRp","tlshash":"e9f4b79c796e223ed8772f5feac81844b27c7702d7812e55fce9424640cdbea7634286","first_seen":"2026-05-17T18:03:30.299239Z","last_seen":"2026-09-20T10:23:03.756532Z","times_seen":20,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/abebooks-footer-logo.png","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.721Z","timestamp":1789899734721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/abebooks-footer-logo.png HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\netag: \"6a048390-1d75\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 989\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2JXwBJEwxqmELNPKhI%2FgWYGZzNC6uZqNbQ16AM4jTqPOAjQeWQdGPbpFvFtGbBcqfP3Czb%2BYAzXk%2Bkocl8Lz9cEQr0R8AghURqWR4AvDj8%2FuOOvc9TF7smzfSA0vnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9e0cc576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7541,"size_decoded":8309,"mime_type":"image/png","magic":"PNG image data, 150 x 75, 8-bit/color RGBA, non-interlaced","md5":"78d97c44ce90eaf9bd478b31b186df3e","sha1":"74fc52a74e74ef45bc40fb534f81bac54def1acb","sha256":"5e12b50e1359eeecfa6111d0672738338f396f8c7466f36feda2f1abf7d67031","sha512":"6b04e7f768204dd2f88a0a9b7c7935a15157057beae1e18ee0129adeec359a504610368653f5b08ab256e980d5a716b6a7c7839d7bf4a9ac27e52ad6b7bda362","ssdeep":"192:lBSo7HPRw10veMRYV0ht8Nrch9h36tPnpXdVyBtA4s:loKHPKK5a89h3ePnpXfysr","tlshash":"2ff18bfb5e3520cae3c1e7b671f82ba3cca66911570d689430cdb6106b80bc81a9e44c","first_seen":"2024-10-26T08:53:13.437903Z","last_seen":"2026-09-20T10:23:03.757469Z","times_seen":40,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/spinner.svg","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.722Z","timestamp":1789899734722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/spinner.svg HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BFFSL8mG%2BXXFQJ6N8oOi5kmSiCibayynSfIqVAOkRmaxvKOMPZwxdHC0chJuiahZE2EJqmWMNUTmqO4%2FKcFYLfs7mlFFnM1ksqWKz5Dn30W7IhmlueqqcbaENxH0rc%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-20a\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9e0cc676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":1076,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03471414be176d6067d674b29141b7df","sha1":"e0b28621b2f5dcd7c018f527797fcaa28f2a95c2","sha256":"50adb77e1690edc25de00e641e68c943a1b069d6700f0b0e8376aad610e8876a","sha512":"afaac3e50cf004a54bb748a0856d4a75f8a6775c4b2a2e057b16a01b697815e3ef154034fdf87f552ad5cf8a506d26f79ca060cc20eee28e35bf36e7c4e55770","ssdeep":"","tlshash":"44f0d46444b9d905011c857ce3dd3d403c6da153824d01c9b65c2536ef048ab7c7f34f","first_seen":"2025-09-07T20:58:24.787157Z","last_seen":"2026-09-20T10:23:03.758265Z","times_seen":36,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/fonts/d26713d7962516a8e8bc.1e10a9c699a3c6370777fdcd729573dd.woff2","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.889Z","timestamp":1789899734889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/d26713d7962516a8e8bc.1e10a9c699a3c6370777fdcd729573dd.woff2 HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css\r\nCookie: abe_vc=1; session-id=000-0496228-4944890\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-6c1c\"\r\nexpires: Wed, 30 Sep 2026 10:13:04 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 550\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TfmilyjlHe2WZupXs4XExDZgIsshYwSrJUM3jxmy6BehixE94eR40TeyNplo%2FSwRk%2FeuJB%2FdQY01QWHlSng1IUmsNq%2Fav3crfFDew8XXx6lnCzD8vFpQ3QX4Kwj0W4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9f1d0d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27676,"size_decoded":28449,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27676, version 1.0","md5":"98a6e0018b815621cbb0bb8684c7e131","sha1":"a17dd4c4be49b28640d6e2d7ef347c1fe818aa39","sha256":"1ed1c7da7f60660db3ba608dda15b8e1a3ee7726b8e2800c064e86397f24e36d","sha512":"b7f511908e723958c9a92311181dc0d5df4b1fcb73341d295e125c560cffb0401375820ca3f3a80afb42b14a8d4fab73e6f7c151ae312f98b733b6d4f32efb79","ssdeep":"768:IHxoOBedIEASuYbslVSTyzQlqEU7ogB1+V8psd2Cxi:2uyEDnbsleySIeaaxi","tlshash":"fdc2d14936f1b705a002bc72877e9bfccdb46e85e36be5a1a854adc28f4f85787d1024","first_seen":"2024-10-26T08:53:13.459231Z","last_seen":"2026-09-20T10:23:03.760303Z","times_seen":40,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/sitenavtoggle-e7be457d87.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.670Z","timestamp":1789899734670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/sitenavtoggle-e7be457d87.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyT19VDaNQZaqW1zzulmeAU5TClxgpipU%2BI8t4WNeTSc2qtHh9VTHaeOdseMTV60xaJZyRDjKd%2BUD%2FAcMLNbqqdpmiOrD%2Fl9VAZOh6W%2BCQmFQC164%2FtjqF5HUBWcOts%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-443\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dbca176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1091,"size_decoded":1198,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1091), with no line terminators","md5":"e7be457d87e080b399097e44b8936e8b","sha1":"daaea1eef487b7a052df752a06b1ab5c95fb28ad","sha256":"98e0b7c1127f88b442022832d82128cf4de1dc369833f8b371c2da1ef3bf5578","sha512":"61d0c5a60b62b1992e8fab2182849c42dac8ad39e7d2abb464236e276e2ad545b63fc779a7d00c8a9acd87ae9030460ac3abbdf9b30b27a6e2e9a9541d4816bf","ssdeep":"","tlshash":"3611dfbbb61b2c3342d8e4faaa45a6c0a6a08148cad100753d7ea85e00c7ed145f66f6","first_seen":"2026-04-19T02:47:52.782745Z","last_seen":"2026-09-20T10:23:03.761919Z","times_seen":26,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/cwrumclient-3c0c7d1c41.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.683Z","timestamp":1789899734683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/cwrumclient-3c0c7d1c41.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAhip0aN0oCWntN89Qnuo7D0qaLa4aWrg6%2B1XRMVtf3J8DJydjWwc8ABCb96y8iOJGAQZMT2fA6SYw4RE8D%2FztVmPJ%2FsmsBgSMUO8ZwNBCowN5YXHGh%2F6kiRdPRaMHQ%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-23857\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dcca876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145495,"size_decoded":42527,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c0c7d1c410640a98d53b3e800db9109","sha1":"d6a0fa99a6246af255c15c6c1fef9429b7b94ed1","sha256":"58211190bada881571ae6d5674f3c72966d03f667d5fdc3eb90568d8968a329b","sha512":"15123b10d77a2331cb0900ed8e6cd56bb9dd8552e071998b10590fe8dc35e891ab117d087bc85d3b15b2768f3bfe334c03485363049cdeb9e34280fccf0b063f","ssdeep":"1536:1YrHLQlQr21Pz9v/fN9J2JTFrRyrjMr61tTXtTNr7OBbGUrncrcPrOyrasUuJVhr:X9pX1Pp7VUrn1UYVhBlr","tlshash":"45e33bddb2d5b0364397a6b5d13f1206b33b1998a88c407cb525e5d67cb988e8327f38","first_seen":"2026-05-17T18:03:30.290126Z","last_seen":"2026-09-20T10:23:03.763656Z","times_seen":23,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/All.min.7e6ab57976631cf2500d4b94dc6618e4.gz.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.686Z","timestamp":1789899734686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/All.min.7e6ab57976631cf2500d4b94dc6618e4.gz.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wn%2BVIBnmO8pg%2BSdI%2F7j%2Fg0LyD%2BNhBUnxMm597b9iWxnp7WBBprEW3ETnmVUpv2LTADSJjNXv8fllNOjMjznEvrY8vDIrlgg1bVmiwowra2vTHSN2gP4xAnnspMEqVW8%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-3e533\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dccaa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255283,"size_decoded":70440,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"a4eb2ddb43d32012f665d3eedfa6da1d","sha1":"8af1fb62ac3b20b04b9fd06eddf3919bbefa8fce","sha256":"b863869b47b5fae7517fc5da9ce95b8c4bfe2be51a458f6176359970c81dca45","sha512":"3e14d400ef1d3c400b0b1740dc26ee3fdb3d552eccba3a460e9e55b0786678d2f594cc55571aec1b4bb5756c2d40d226ffd2ec83aa9a999e8677510d04788e03","ssdeep":"3072:KKF7lW2wrkpDgjot8nWLKnTgVoUmcN1o5vNKCB+OEPsRO:KKnW2wrkpcje8nWKTg7Av4CBc","tlshash":"d5443a973346b63242dfa1ebb0664245b236569d6401812cf83cecdf5c68d4a32bbfb5","first_seen":"2026-03-04T17:00:45.409259Z","last_seen":"2026-09-20T10:23:03.764277Z","times_seen":29,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.abebooks.com/servlet/ShoppingBasketApi","fqdn":"www.abebooks.com","domain":"abebooks.com","tld":"com"},"ip":{"addr":"65.9.46.14","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.910Z","timestamp":1789899734910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.abebooks.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2D:57:D8:64:39:2C:6D:AD:72:16:A9:FD:FD:AB:AC:35:32:B2:C9:0E","sha256":"8A:28:8C:C8:1D:0F:C1:C1:A4:D3:F7:8D:AF:AD:36:4D:C4:AC:50:FC:EB:F3:A3:59:5F:D9:86:2C:E6:41:9E:05"}}},"request":{"raw":"POST /servlet/ShoppingBasketApi HTTP/1.1\r\nHost: www.abebooks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 4\r\nOrigin: https://xxddwsss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4,"data":"ac=z"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=iso-8859-1\r\nserver: Server\r\ndate: Sun, 20 Sep 2026 10:22:15 GMT\r\ncache-control: private\r\nedge-cache-control: no-store,no-cache,stale-if-error=0,stale-while-revalidate=0\r\nx-amz-rid: MG9TMZW440CFK3SP6BW1\r\nset-cookie: session-id=000-4565015-5183007; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Domain=www.abebooks.com; Secure\nql-session-id=000-4565015-5183007; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Secure\nql-session-id=; Max-Age=0; Expires=Sun, 20 Sep 2026 10:22:15 GMT; Path=/; Domain=.www.abebooks.com; Secure\nabe_prefs=%7B%22modified%22%3Afalse%2C%22curr%22%3A%22USD%22%2C%22shipdest%22%3A%22NOR%22%7D; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Secure\nAbeShipTo=NOR; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=47474747\r\nabe-subrequestid: 6faaa157-2a27-4d43-bb36-dcb541e18b43\r\nabe-requestid: MG9TMZW440CFK3SP6BW1\r\nservice-request-id: MG9TMZW440CFK3SP6BW1\r\nabe-stage: P99 1.0.705\r\nvary: accept-encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\npermissions-policy: interest-cohort=()\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 45dd809f59d41e37e5154e0bcf279646.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: jO_t2bghs_Y1j-FyoMkY6ejNY0hmVu1CZNGJ6HClUXclcm2D7e6DdQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"session-id","value":"000-4565015-5183007","quoted":false,"path":"/","domain":"www.abebooks.com","expires":"2027-10-20T10:22:15Z","raw_expires":"Wed, 20 Oct 2027 10:22:15 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"session-id=000-4565015-5183007; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Domain=www.abebooks.com; Secure"},{"name":"ql-session-id","value":"000-4565015-5183007","quoted":false,"path":"/","expires":"2027-10-20T10:22:15Z","raw_expires":"Wed, 20 Oct 2027 10:22:15 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"ql-session-id=000-4565015-5183007; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Secure"},{"name":"ql-session-id","value":"","quoted":false,"path":"/","domain":".www.abebooks.com","expires":"2026-09-20T10:22:15Z","raw_expires":"Sun, 20 Sep 2026 10:22:15 GMT","max_age":-1,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"ql-session-id=; Max-Age=0; Expires=Sun, 20 Sep 2026 10:22:15 GMT; Path=/; Domain=.www.abebooks.com; Secure"},{"name":"abe_prefs","value":"%7B%22modified%22%3Afalse%2C%22curr%22%3A%22USD%22%2C%22shipdest%22%3A%22NOR%22%7D","quoted":false,"path":"/","expires":"2027-10-20T10:22:15Z","raw_expires":"Wed, 20 Oct 2027 10:22:15 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"abe_prefs=%7B%22modified%22%3Afalse%2C%22curr%22%3A%22USD%22%2C%22shipdest%22%3A%22NOR%22%7D; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Secure"},{"name":"AbeShipTo","value":"NOR","quoted":false,"path":"/","expires":"2027-10-20T10:22:15Z","raw_expires":"Wed, 20 Oct 2027 10:22:15 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"AbeShipTo=NOR; Max-Age=34128000; Expires=Wed, 20 Oct 2027 10:22:15 GMT; Path=/; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33,"size_decoded":1539,"mime_type":"application/json; charset=iso-8859-1","magic":"JSON text data","md5":"6aa5d8551ff25754c760768ff1b8e08e","sha1":"54961e85fbbd657a89812761f5b878bd103d1e42","sha256":"2fde71631dc5ac6368728d185395cbf00d90029bdd162764a0ade670346ce791","sha512":"d4c64d93481e8980b06b1a0c7458f21b9f10bb3fbfaeb8e907656eec7b2b38fe9740c2ff1c53094b31196b9f544535c4ef150934e284dfa7785e920915e40c8b","ssdeep":"","tlshash":"e68004015c0451413757c40153074431c57337011401010010dcc53001405504504544","first_seen":"2025-05-30T17:32:39.535187Z","last_seen":"2026-09-20T10:23:03.76487Z","times_seen":41,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":57,"connect":11,"send":0,"wait":149,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/favicon.ico","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:15.185Z","timestamp":1789899735185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/favicon.ico HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nCookie: abe_vc=1; session-id=000-0496228-4944890; atfloaded=loaded\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:15 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3a9Gymm8oel5n5%2FZsFM33vLlVGKnp3qjDLXTTccBL4mqZ7FRb8FeldumPbXkvrEIjgNfEGZwqRadJG%2FNyMrk09v0NiwrPt1fXVec0%2F19rLNSLg81nbyqQYshp9sM%2FVM%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:49 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-37e\"\r\nage: 986\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01ba0ed8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":894,"size_decoded":1254,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"3d6b629327503dee67c43bbd1214bd30","sha1":"0bd1ea9f3e31f6936e51c4966a7197f1538a2d93","sha256":"423b64894d81f8eb804ca0666208eb629366979f38c048f9a05518f566b2bd69","sha512":"19f3ac1e4872960db8e409eb55e225fe5a83507b025ddd770ef7f3ee77dbacb94ae0e8289d8183878b44331db1193333b43bde1dec540d29b68ec8f9a8218c73","ssdeep":"","tlshash":"0a1184c2e51ee49bd02785f35885665082df1d9ba890290e6880342eebb268b0c2c713","first_seen":"2024-10-26T08:53:13.539877Z","last_seen":"2026-09-20T10:23:03.766983Z","times_seen":39,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/alert-success.svg","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.723Z","timestamp":1789899734723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/alert-success.svg HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NCO2pHCHpRsnsJujSLjX35bXjQJWV84JpxnyX6ZI4y5VeiMteINEKy4LAY9n6eywHJlwuBhLpupz3SKCx%2BkVhO0lRBSFUxAKgl5OCdGdJlFy8P62kd6xjPcWmVOBf0%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-1f8\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9e0cc976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1065,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31063111481cde55dd6fd4f7355adaa6","sha1":"794cca32c4ab8473df5635d76777fa6ba41f5e36","sha256":"0bf8e25e95600ae2cde86d60a61ec70501bec46d94806f1435002f54d9bcae33","sha512":"0b1aa2791352248f502e61de1b7424d9d4585d73e446e10cc3e34ec7028106cfda0e15e630f58012a0947566806358c19fba4e4c82c104c09546a59af235946c","ssdeep":"","tlshash":"aaf09e93223dd037656b4350f675b5362048b97f50a80dd8d28019223cf59e17d4b728","first_seen":"2025-09-07T20:58:24.766118Z","last_seen":"2026-09-20T10:23:03.767798Z","times_seen":36,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/components/searchautosuggest-ec885890ce.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:15.100Z","timestamp":1789899735100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/components/searchautosuggest-ec885890ce.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Wed, 02 Sep 2026 20:16:20 GMT\r\nserver: AmazonS3\r\nlast-modified: Tue, 23 Jun 2026 19:57:34 GMT\r\netag: W/\"ec885890cea39249a67abc7d22adf41a\"\r\nx-amz-version-id: wvy1Trcva2hM0mEqfhM8PSb5uEqQUo4H\r\ncache-control: max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nvia: 1.1 3edeb493aa0b4547b903cfd306c07f70.cloudfront.net (CloudFront)\r\nage: 1519555\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: SG_aHPVLhi8CGNUTv-XunoPV7qh-bo9ARYtCKQ9BvKdELinD_Pev5w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21212,"size_decoded":8019,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21191), with no line terminators","md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-20T10:23:03.768606Z","times_seen":25,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/eventbus-e0d54b1290.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.671Z","timestamp":1789899734671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/eventbus-e0d54b1290.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKbDhRBEi853vPT8k7DiY%2BNArsPj1yMHIRzNTE2UQVnUmE0fVNfFiyagc7BHTW15NNQyXeNTkzKGwkWrN4CRXb2l%2Be9XpGWoR91GcqpS72leteKUXWnkp5n6Ig5NMkM%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-371\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dbca276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":1156,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (881), with no line terminators","md5":"e0d54b12906320feded4cd310ab06890","sha1":"2a64c6addac3c6b10e968b9d6ab129954dccb216","sha256":"eebdb074ff3f5b4854b7f146cbd18d94853a2a95f467d8d50fb4e3a10fcfef25","sha512":"ef15af58a5b3b0dc63be35c467b970937f93e5bb965691fe084775df23f6c23666773e4086b5c786fbfe536231b2188a52a69f88ef9e5d230e5d53f30859f2e5","ssdeep":"","tlshash":"d311a39c19f0927501da967f7a4d3e5f2192cf9e2015200c729cdecab788d4fe5976b0","first_seen":"2026-04-19T02:47:52.70353Z","last_seen":"2026-09-20T10:23:03.76934Z","times_seen":26,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unagi.amazon.com/1/events/com.amazon.csm.csa.prod","fqdn":"unagi.amazon.com","domain":"amazon.com","tld":"com"},"ip":{"addr":"44.215.133.78","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:15.222Z","timestamp":1789899735222,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"POST /1/events/com.amazon.csm.csa.prod HTTP/1.1\r\nHost: unagi.amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 22419\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://xxddwsss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":22419,"data":"{\"events\":[{\"data\":{\"messageId\":\"u3yln0-emdimy-mbg5ar-4y3wwi\",\"schemaId\":\"csa_other.Metric.4\",\"metrics\":{\"jsError\":1},\"dimensions\":{\"message\":\"Attribute is not of type string: subPageType\"},\"timestamp\":\"2026-09-20T10:22:15.060Z\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"t7x9mq-mwi7lh-63kwln-59e37g\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"}}}},{\"data\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"producerId\":\"csa\",\"schemaId\":\"csa_other.PageEntity.2\",\"version\":1,\"attributes\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"meaningful\":\"interactive\",\"pageType\":\"Home\",\"pageTypeId\":\"HOME PAGE\",\"url\":\"https://xxddwsss.com/\",\"server\":\"xxddwsss.com\",\"path\":\"/\",\"referrer\":\"\",\"title\":\"AbeBooks | Shop for Books, Art \u0026 Collectibles\",\"transitionType\":\"hard\"},\"timestamp\":\"2026-09-20T10:22:14.840Z\",\"messageId\":\"lztgm2-gjhen7-es61uq-feju9c\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\"}},{\"data\":{\"messageId\":\"r3mo9s-e9ehzc-ia8dc5-ew9z9b\",\"markers\":{\"pageVisible\":0,\"navigationStart\":0,\"fetchStart\":19,\"domainLookupStart\":30,\"domainLookupEnd\":45,\"connectStart\":47,\"connectEnd\":64,\"secureConnectionStart\":47,\"requestStart\":65,\"responseStart\":163,\"responseEnd\":170,\"domLoading\":276,\"domInteractive\":766,\"domContentLoadedEventStart\":903,\"domContentLoadedEventEnd\":911,\"domComplete\":1157,\"loadEventStart\":1157},\"markerTimestamps\":{\"pageVisible\":1789899734059,\"navigationStart\":1789899734059,\"fetchStart\":1789899734078,\"domainLookupStart\":1789899734089,\"domainLookupEnd\":1789899734104,\"connectStart\":1789899734106,\"connectEnd\":1789899734123,\"secureConnectionStart\":1789899734106,\"requestStart\":1789899734124,\"responseStart\":1789899734222,\"responseEnd\":1789899734229,\"domLoading\":1789899734335,\"domInteractive\":1789899734825,\"domContentLoadedEventStart\":1789899734962,\"domContentLoadedEventEnd\":1789899734970,\"domComplete\":1789899735216,\"loadEventStart\":1789899735216},\"navigationStartTimestamp\":\"2026-09-20T10:22:14.059Z\",\"schemaId\":\"csa_other.PageLatency.6\",\"timestamp\":\"2026-09-20T10:22:14.840Z\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"}}}},{\"data\":{\"messageId\":\"e9q48g-9j3mel-dvsnka-jf9lo9\",\"schemaId\":\"csa_other.Metric.4\",\"metrics\":{\"baselineMetricEvent\":1},\"dimensions\":{},\"timestamp\":\"2026-09-20T10:22:14.840Z\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"}}}},{\"data\":{\"transitionType\":\"hard\",\"schemaId\":\"csa_other.PageRender.4\",\"timestamp\":\"2026-09-20T10:22:14.840Z\",\"messageId\":\"67bdz-8c2dk5-70yxtl-bylds5\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"meaningful\":\"interactive\",\"pageType\":\"Home\",\"pageTypeId\":\"HOME PAGE\",\"url\":\"https://xxddwsss.com/\",\"server\":\"xxddwsss.com\",\"path\":\"/\",\"referrer\":\"\",\"title\":\"AbeBooks | Shop for Books, Art \u0026 Collectibles\",\"transitionType\":\"hard\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\",\"deviceType\":\"DESKTOP\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"}}}},{\"data\":{\"navigation\":{\"type\":\"new-tab\",\"toTabId\":\"bewwu6-ecnqh0-54b6-5maru4\",\"toPageId\":\"bewwu6-ecnqh0-54b6-5maru4\",\"transitTime\":null},\"schemaId\":\"csa_other.TabbedBrowsing.4\",\"timestamp\":\"2026-09-20T10:22:14.840Z\",\"messageId\":\"uuyom1-8the5q-a149lh-ik9ahe\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"76ar1a-4siiri-iid327-um29bx\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"hlo01r-1z4aci-6knbxi-4atbkt\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-homepage\",\"href\":\"/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"4zdv03-wsojx4-cy74g2-f8k366\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"gp6gkz-gtlp35-j5c7jr-nurb1m\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"preference-modal\",\"class\":\"loaded\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"jizy9i-wvsbvg-tfgltp-9xffqt\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"hsju94-6t589v-74w1ke-rm5fu9\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-login\",\"href\":\"/servlet/LoginDirector\",\"class\":\"\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"edxw44-rvh8b1-vfcgqx-rejffm\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"v0cnjl-x87y99-s3792-4h5i8q\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-my-account\",\"class\":\"hidden-xs\",\"href\":\"/servlet/MembersMainMenu\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"eyl7zy-a6fc9g-dyd8t2-pxhhv8\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"dz1o9o-2a2uu6-fy59je-4uxeft\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-basket\",\"href\":\"/checkout/basket\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"ypc9v1-iepf1s-el9nzg-ic17jg\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"7y3ypq-w1hnkq-5mwbqk-5q2v0s\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-help\",\"class\":\"hidden-xs\",\"href\":\"https://support.abebooks.com/s/?language=en_US\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"fjrvyx-gf2hbf-acxbxz-ptjv98\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"f9vgf2-s2w0dc-h0qf9o-7cmqfq\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-advanced-search\",\"href\":\"/servlet/SearchEntry\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"x0lxoo-cdrvhy-uqc2j6-x29w0p\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"z2g26h-uqdsqt-dnql6k-xumwmo\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-browse-collections\",\"href\":\"/collections/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"c77cf-nmmafy-8oc0f5-8r8rhn\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"3vskju-aphyvj-d7zzre-ik879c\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-rare-books\",\"href\":\"/books/rarebooks/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"dfgu26-slxo33-txgutt-dwmtmz\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"nrad58-fen81s-f64o6n-dk96j1\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-art-and-collectibles\",\"href\":\"/collectibles/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"27zbau-qaw6tc-6lfhfc-kaohlv\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"hlldn5-sv9465-2qhtb-tf75vp\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-textbooks\",\"href\":\"/books/textbooks/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"7p5g6s-5qzgwx-b9aspd-5kw3sg\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"hibc3d-5xcf9v-dkslwd-ddo7gn\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-sellers\",\"href\":\"/servlet/BookstoreSearch\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"4rfhna-sqryy5-xy21hr-nd4ro5\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"vpmf8n-8ol0yr-nzmwi1-jqdzzz\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-start-selling\",\"href\":\"/books/sell/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"g3k1hu-ycf9hc-orj8c0-3pg6d5\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"syhuha-hn8tr9-5737p5-p6zqy4\",\"type\":\"slot\",\"slotId\":\"homepagesearchmodule\",\"iSlotId\":\"homepagesearchmodule\",\"class\":\"HomepageSearchModule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"ifq3dc-4m6c8e-xrez9x-nsnsgd\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"inlm2t-jcftt5-tkrwx8-8vdk1m\",\"type\":\"search-field\",\"searchFieldId\":\"an\",\"parentId\":\"syhuha-hn8tr9-5737p5-p6zqy4\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"v98mxe-573cg4-erg8mn-xdjems\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"gxj1o7-k3xs8v-q7vaea-1oivta\",\"type\":\"search-field\",\"searchFieldId\":\"tn\",\"parentId\":\"syhuha-hn8tr9-5737p5-p6zqy4\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"35c94s-xxqg0d-vba93h-51x28y\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"620jrf-nfmn6d-dhc7co-vmgmuq\",\"type\":\"search-field\",\"searchFieldId\":\"kn\",\"parentId\":\"syhuha-hn8tr9-5737p5-p6zqy4\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"ooabzk-2izpw8-32ap3p-bzkcof\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"k2we4w-wn3ngx-wlwq8j-pzydzj\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"srp\",\"class\":\"button-primary\",\"parentId\":\"syhuha-hn8tr9-5737p5-p6zqy4\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"s41kns-fcrgq7-ycjsly-ukdld5\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"bgo3vd-win4e4-s8nqkz-6q08w7\",\"type\":\"slot\",\"slotId\":\"listcarouselg\",\"iSlotId\":\"listcarouselg\",\"class\":\"TwoColumnContainer3070-column\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"h5zj15-tpl2h4-9ywed6-nwqhuk\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"l8z49v-ko5c6n-f87v7j-5hdrlg\",\"type\":\"item\",\"itemType\":\"listcarouselg-gallery-item\",\"pos\":\"1\",\"class\":\"ListCarouselG-gallery-item\",\"parentId\":\"bgo3vd-win4e4-s8nqkz-6q08w7\",\"relatedSlotId\":\"listcarouselg\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"9bx3qg-jh6i3s-d9lh5e-eve8sm\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"99kct6-b54tdr-sns3f9-4fzsqh\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"books/luxury-coffee-table-books\",\"class\":\"Link LinkWithArrow\",\"href\":\"https://www.abebooks.com/books/luxury-coffee-table-books\",\"parentId\":\"bgo3vd-win4e4-s8nqkz-6q08w7\",\"relatedSlotId\":\"listcarouselg\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"e2b0uz-c1fxtn-7t0svu-j3hk5k\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"73f6f8-fzh07k-390764-yoc43g\",\"type\":\"slot\",\"slotId\":\"promod5050\",\"iSlotId\":\"promod5050\",\"class\":\"PromoD5050\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"dbxi1w-a67ov2-83ugxm-v21x0v\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"6wu8pm-ih6u8r-npvej2-u67zds\",\"type\":\"uxelement\",\"elementId\":\"promod5050-media-most-expensive-sales-from-january-to-march-2026\",\"elementType\":\"promod5050-media\",\"action\":\"navigate\",\"navigate\":\"books/rarebooks/most-expensive-sales-january-february-march-2026\",\"class\":\"Link \",\"href\":\"https://www.abebooks.com/books/rarebooks/most-expensive-sales-january-february-march-2026\",\"parentId\":\"73f6f8-fzh07k-390764-yoc43g\",\"relatedSlotId\":\"promod5050\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":137,\"pageFirstPaintToElementViewed\":918,\"timestamp\":\"2026-09-20T10:22:14.977Z\",\"messageId\":\"o02yrc-3kos7l-y74vni-5y20i5\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"},\"element\":{\"id\":\"m8bbmq-l7laz8-eguw47-xd6he7\",\"type\":\"uxelement\",\"elementId\":\"promod5050-media-most-expensive-sales-from-january-to-march-2026\",\"elementType\":\"promod5050-media\",\"action\":\"navigate\",\"navigate\":\"books/rarebooks/most-expensive-sales-january-february-march-2026\",\"parentId\":\"6wu8pm-ih6u8r-npvej2-u67zds\",\"relatedSlotId\":\"promod5050\"}}}},{\"data\":{\"renderedToMeaningful\":377,\"renderedToViewed\":377,\"schemaId\":\"csa_other.PageView.5\",\"timestamp\":\"2026-09-20T10:22:15.217Z\",\"messageId\":\"idfn6u-36ib8j-drk9uc-ay999a\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"bewwu6-ecnqh0-54b6-5maru4\",\"requestId\":\"2378594-3447793-1843493\",\"meaningful\":\"interactive\",\"pageType\":\"Home\",\"pageTypeId\":\"HOME PAGE\",\"url\":\"https://xxddwsss.com/\",\"server\":\"xxddwsss.com\",\"path\":\"/\",\"referrer\":\"\",\"title\":\"AbeBooks | Shop for Books, Art \u0026 Collectibles\",\"transitionType\":\"hard\"},\"session\":{\"id\":\"000-0496228-4944890\"},\"surfaceInfo\":{\"id\":\"lpi8tv-fr35is-uj1kax-7pa31e\",\"deviceType\":\"DESKTOP\"},\"user\":{\"id\":\"cgnv1f-ck58z-rc1u4o-nwiv6x\"}}}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Sun, 20 Sep 2026 10:22:16 GMT\r\nContent-Type: application/json\r\nContent-Length: 22\r\nConnection: keep-alive\r\nx-amz-rid: QDCYGAVD0KXGTQ64NNAA\r\nx-amzn-RequestId: 02512050-4a58-4cae-abf2-d96fe6bd60a5\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=47474747; includeSubDomains; preload\r\nVary: User-Agent,Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/react18.bundle-8d00f21452.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.664Z","timestamp":1789899734664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/react18.bundle-8d00f21452.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UijVAT47MgOQqcJ4AfElt7ES9AGmEW8KZeKbm44gO8B2eryUgJdYb1vI0RR1r3S98VuyMZ%2FXtNpcQ0DQvPHiO7dzzl40pSWzb0iWxpVzioKqluk3wtHjM6JekEL7Cc8%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-22cfb\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dac9b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142587,"size_decoded":47479,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"8d00f214526b2f83cd11b5cb4dbeae1c","sha1":"2d991e0e79862e2cf2938358aaad0677373903b0","sha256":"f5d719aa39dd57fb86f559cf2e209603eb61a64ea88dc641436c90e5f8252336","sha512":"40f6efcb1e7bae687e75e5e35fa7292c78ef10bac9af98e46cb4536aa3330c72fea815b39089b14686f9a4de6cb61d529217704ef84c3458fc434576a857223f","ssdeep":"1536:Uhf51/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:KU55qZpAZxA61iz6Phkm","tlshash":"a2d339e87992f6425ab212ab10ef1047737c9a27784c4cb1e540fedd64b806da17bf8d","first_seen":"2026-03-04T17:00:45.485449Z","last_seen":"2026-09-20T10:23:03.770909Z","times_seen":33,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/abebooks-logo-com.png","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.706Z","timestamp":1789899734706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/abebooks-logo-com.png HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\netag: \"6a048390-111b\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 989\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwn6aFxrUWq1zElWSTzEEPESBmEe%2BffDlcj8uFLGbxT3aMyh3rxikdeKXxCG7wNpO0YRWeDl7wZgYEO28FzaMEf3FE6IVwW5tkmKDjrnrb2v8vwRcRMQcrntSh65LEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9decb576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4379,"size_decoded":5141,"mime_type":"image/png","magic":"PNG image data, 230 x 40, 8-bit colormap, non-interlaced","md5":"0f1d509ed62aaf250a5d8f3357f7fb45","sha1":"49fe45677040f481a092506ae013ccf746a3c355","sha256":"6f10b3994352fcfd36d94a6711f0efdd91f6a563a8cd56927a2b3f48e4c92283","sha512":"1bfa9b4a4fabde10c622672c6005c2dc37d00b63853dcff04f9f9e6db78a94dffb87d8331c8c957a8e662eef0f621d7b3f7c2ec6a1b829a7d01c3d249ee88203","ssdeep":"96:/nX2zVEyD6PbSrqknmWNzPHysQMiHyKBzb+rtyAd6xRou18YBwy6gecuO:/X2vezSmknGtBzb+rt5kxRoK88wy6FS","tlshash":"36915c4cf5756c011349fe82adf5812f2aa35a45d6d0a5769dce8d07a1700f80f2e7c7","first_seen":"2024-10-26T08:53:13.504014Z","last_seen":"2026-09-20T10:23:03.771604Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Bd-latin1.woff2","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.791Z","timestamp":1789899734791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Bd-latin1.woff2 HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-3b8c\"\r\nexpires: Wed, 30 Sep 2026 10:22:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FT2cx6SPIs2u2uI1OB6iB1JPYkgx%2BpJ6wnvSN8n54RwbMuVjmd4gKhhYrKbUMpAc41fEA21i3wZ%2BhnqT1qZ9QbPSr%2Ff8wqvr4cSXrmtW6GEVbNM17DH1VW5mM%2FA8NX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9e7cda76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15244,"size_decoded":16008,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15244, version 1.19661","md5":"b67e8f4344a2a7eb293a4e478fbc88c2","sha1":"961a364b31f69946bce9959a46b1ab4d80347cfe","sha256":"4efb9b046e8152c831775326063ace77b65a1ee6af4b78f02660cc65df565e48","sha512":"2c2d7f59d54e9b79daed7f45a15e4025f94aa1a22fb1d484afcde53ca46a9af18fdd8fd3453da93d8a3c177ebd075111126020abecb8cef8e4cf6a09a223e58f","ssdeep":"384:ZQlW8/fKscJ81kzs/u4R+O9KNvwOO1fUlNuh:Z+/Pceh/IOOK","tlshash":"db62e1f14c82563d94c2d2a2360bd47487e07ae2ebf8d3f349a2561d877121fab82660","first_seen":"2026-05-17T18:03:30.337513Z","last_seen":"2026-09-20T10:23:03.772296Z","times_seen":19,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/productwidget_merch-8ae3fc5eaa.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.677Z","timestamp":1789899734677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/productwidget_merch-8ae3fc5eaa.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVY4yedU0F%2FoYQFEqBXkhqURUxs%2Bp8ee%2BoAG7pJRZRWTF4i1G8DeIduk4Fr0dQIXfflFroar%2BoIH2AvvfUJfOZo5DZFFBaCNtZcOSik8b2l5WfZx0SKBzBUMqDxVsOg%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-fe0\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dbca576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4064,"size_decoded":2787,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4064), with no line terminators","md5":"8ae3fc5eaaf82e4d2a300c4880286f34","sha1":"210bbb0882f4dddb1e0889782ab7a03604cb49f8","sha256":"aca27bc2826407419bafb8b46bc1656002132f5130864affc462602f16e35641","sha512":"1f6f894f907e657b6cc04af45e56f23a2d45414f7483ad5ad5009bb23e60a016d446ac87e4d82f811e94c2fd1594022d2da8e4f302cbd22cc519b39708637a38","ssdeep":"","tlshash":"3c81c9e63658b0711b5775e0c42b348af07106345c9d4a20baa7c0bbf82279f9577b65","first_seen":"2026-05-10T14:16:13.152471Z","last_seen":"2026-09-20T10:23:03.773174Z","times_seen":22,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/x-twitter.svg","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.712Z","timestamp":1789899734712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/x-twitter.svg HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zztroef2Tj3pPmBO697w4VVOkglA6AqgN8QBLrE6Ir4S1ZX7a55RjXxmQNeU00NNDw7n%2BP6lxnNXRcNhgxTW9EgV0nfB8F2TPRUY83wwFyKJFd%2B%2FmPskE79IWuMnJDA%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-194\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dfcbb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1044,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1212da6d50b0211349c0ec41c76a96f","sha1":"a4c557c84108c2a37ddbc1072a4d11da0a8e3616","sha256":"d8f35a67f2129d433d9a690160ea7f637686033f5055199a7788f1bb500fe0e6","sha512":"e3f76302165e37d459235e2a2346cdb8835f61294edc8ddd1e376dbdf41e728a22e7a31e6f3cbcf2e2de7787c126964b82691bb8a79456ce80ceb8a9ea45b9fd","ssdeep":"","tlshash":"38e0617e4a5848290a5255f13e18510cec5f24e635dc034dd441825b7194a666474f7d","first_seen":"2023-10-27T15:42:08Z","last_seen":"2026-09-20T10:23:03.77387Z","times_seen":322,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/fonts/106ba4225232873f12c0.4664da3866680953e1d59d76b27885c4.woff2","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.888Z","timestamp":1789899734888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/106ba4225232873f12c0.4664da3866680953e1d59d76b27885c4.woff2 HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css\r\nCookie: abe_vc=1; session-id=000-0496228-4944890\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-52cc\"\r\nexpires: Wed, 30 Sep 2026 10:13:04 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 550\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92LqqtdwU317gQZPqEK5D9odStk1yc0hH%2BsCa76O%2FIEmZnJZfiCaWD4Hzkxw8Jlt0Nty67EprJGGUYduHEqT%2Bk%2BPQ5oxDuOE5xVdpgb1jknngSn4U%2FM0SsLiAWtbLvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9f1d0c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21196,"size_decoded":21971,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21196, version 1.0","md5":"8c4d69f0963af4a733718cad6575fae1","sha1":"a8f61b72b7593501b79a026dd601a462e9d02e18","sha256":"9d0d22b4f2a5c902e609ca9281e1c59707f6ad37bef00deb7b1176dd51bbdc1e","sha512":"c51481c2c2e450a77cf1171efbfb7a32b96750d030341965e4ad4604da888defb8c7f9603a57c37b1cc22ff074b6a942558a4094468380da088e20b7ea3c3915","ssdeep":"384:xuVpL7ocYpzRXlU0PEdNb3jYmwzY0nfaH1PJYnKgfmrXh6QVSpNh:MVpL79YpdlUMEdNrjYLssfaVPJYLC6QO","tlshash":"1b92d06c9229dee3c88ed318bbe61543efa89847a6fc0994c5c3464a44f434d9b7ed60","first_seen":"2024-10-26T08:53:13.566792Z","last_seen":"2026-09-20T10:23:03.774636Z","times_seen":40,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/abe-sprite.png","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.796Z","timestamp":1789899734796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/abe-sprite.png HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=4,i\r\netag: \"6a048390-30b6\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 989\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=539iYkmwEVWZFW%2FuC42RVJjdjPy6V6uIkGc0FRXbi7%2BAQytr0qiCDXxLVikXGcY1nQJD9UItMjim8sv%2FLMI3DfpRTU1ZenbPqGsMpQn%2FjYmidggJsa5kELL2RuOGA9I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9e7cde76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12470,"size_decoded":13239,"mime_type":"image/png","magic":"PNG image data, 82 x 459, 8-bit/color RGBA, non-interlaced","md5":"8a6cd75ee8560bf7ff59264f488c6db6","sha1":"35a9ce67ef85a183b6e2a21e81bbba0d16191e6e","sha256":"07330745561382c48bd0aa5ef738d29ca4967578f6eff94830dcb5af10e13dbb","sha512":"236534ca6605f85a0ab0f6274d98ca7684053cbbd5c7e1e4c79e63b2ba7f67b05408b988c5267bb6777bf4026aabbda67dfba8e6e9c6d2075369e676f2da92f8","ssdeep":"384:fDJ0Kwe+Co79tLVi+T0DQBLeALaRa27oVISN:bJ0fIo79tLVicKQBYJlSN","tlshash":"5842cfd7436f19b611c892a785c53866f0ac271e01ebc497b95f16b038d2ac1b93e71a","first_seen":"2024-10-26T08:53:13.509404Z","last_seen":"2026-09-20T10:23:03.775392Z","times_seen":41,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/to-top-arrow_1.png","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.872Z","timestamp":1789899734872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/to-top-arrow_1.png HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nCookie: abe_vc=1; session-id=000-0496228-4944890\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=4,i\r\netag: \"6a048390-af\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 989\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhxsnHQOERg3gs%2FBxO44%2BgCxH5K6mG8z17%2FxHqcIIIWLG4dN9bjhjhPNIJwv5M3MFYcNZtEj2xKVP8Fh4k%2BvjQLBy3G0Qh%2B%2BR4Tfk52GdBghtPwDTQuh7LNuG%2ByQEgY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9efd0776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":946,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced","md5":"81d034f6f2f68e83bf4034e63d3bc9f7","sha1":"ed75ba34eab3c0b1b1d7b667f97a8c23db29e4e9","sha256":"3ee623f872edc89a761692967641b9d2aeb55958f2bc07ca640a21d354c874a1","sha512":"63ea9f009db31eaad33259ab13c400e0676fa373190047f2e33561f1f1c9a129831a5346e468e3be75cdf13af42e66f954ae180dfaeaef03948e0b15eb7e2a15","ssdeep":"","tlshash":"97c080fa72515d3bfb558a23c5355261dc23c4048e1f3d11059ac6220e11d841554e57","first_seen":"2024-10-26T08:53:13.469643Z","last_seen":"2026-09-20T10:23:03.776644Z","times_seen":43,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/servlet/RecommendationsApi?pageId=home","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.925Z","timestamp":1789899734925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /servlet/RecommendationsApi?pageId=home HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xxddwsss.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: abe_vc=1; session-id=000-0496228-4944890\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sun, 20 Sep 2026 10:22:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SeZMbuPVUqOmu%2Fhpt0Q9r1zwdDiWPNNMzmyUGoPT7Jerpqo68Z3PAtXTRT2bjdZl63u4kGLpOgTYFNWLrykzePByfY9a%2BBTAYiRz7WBiqxuG0JmOA83%2BgpQy8wacIPE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9f4d1e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":807,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"749849fa5a933662d8a09b832e991f58","sha1":"1b15e42e31c4dcb0fc36badca8916c83dcd3078c","sha256":"ecf14b9ebe7061cddc7e2097a66c90692cc9c1d70d96b5f7ebdd14a0dbb61f54","sha512":"2e15fe713225c0c16c82cc564ab19044466003616b1ce79e82cd15b65088f154955e4e7ba1d8bd14d9942dbbdd5bb3313238a3b3d5403f57f01da0075eaa6dc7","ssdeep":"","tlshash":"7dc02b0d3403ba448503005033c321c0c0c7833f64de80114843c083b0ce16ac0ce3ed","first_seen":"2023-11-17T17:11:57Z","last_seen":"2026-09-20T10:23:03.777837Z","times_seen":15614,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/searchautosuggest-ec885890ce.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.687Z","timestamp":1789899734687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/searchautosuggest-ec885890ce.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxNw1A8vZj7KudC3PkUfGylrtxGGAkM8NJXzPvvNVZI157FLmVqPv7n%2BTbZxgL6f8ADhoiZCcCf50IhWm0lcNiNHCmTEVmYel8DtphV2%2BegGilXKlI%2FrxLUGkaMe1E8%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048390-52dc\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dccab76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21212,"size_decoded":8581,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21191), with no line terminators","md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-20T10:23:03.768606Z","times_seen":25,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/search.png","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.793Z","timestamp":1789899734793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/search.png HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=4,i\r\netag: \"6a048390-10a\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 989\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5MLF9CtSiK%2FTuYj6SDL1eNMzLhSCfCz0ldICIXG3jJDY9J%2BLbTGcJg1Nt9JwVc9LegQ87kNpay5BH%2FyxmMTm%2F1aWuNQQDOviUwWnDlraztH%2FS7xEEPnjLOIkUUCTVc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9e7cdb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":1034,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"8e58298e4102fa95eb02fcd37fde38c4","sha1":"aca01f38c473f424a511516d5caea00c71f9443a","sha256":"2d7a4d483e6df59b5e41016d35bb2c6f2ab51706f314af558c3d424d0f0a17a6","sha512":"2d63c7a13a2027fb318a072a338a0d7d0983dded093529877a2e288617fa76f77cf2f9fc5f3278764869f66b7a72cfdb9d8d6924a76811c35266078aebcbe933","ssdeep":"","tlshash":"9cd02bd0f2807574d26d1e2a1a064169e7615d0ac113150e035346e95127a5894e5687","first_seen":"2024-10-26T08:53:13.468196Z","last_seen":"2026-09-20T10:23:03.778902Z","times_seen":41,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/fonts/468fcbeda4f4dddfff2e.3af5b8c30a74380709837f8a9d09f0cd.woff2","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.869Z","timestamp":1789899734869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/468fcbeda4f4dddfff2e.3af5b8c30a74380709837f8a9d09f0cd.woff2 HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css\r\nCookie: abe_vc=1; session-id=000-0496228-4944890\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-527c\"\r\nexpires: Wed, 30 Sep 2026 10:13:04 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 550\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qdg9JgXtlb%2F3GnOOt2rhZFjhUdc1VoHWwux3PhIrtUeyHX1hvFoiyL%2BVd0yskZdBsEmOvRYZ4zLwre1R%2BeyMW3P4gqIPK2yocOeeqqfhLvh4emmyDZb8wLvv7plmvOk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9efd0676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21116,"size_decoded":21887,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21116, version 1.0","md5":"52695d4ecff02bfdf19e9058ac0b22be","sha1":"92d368759fc904c92acf61b2e083d1cefd78afe0","sha256":"3fd7c6cb70e82ab5f72e76f614e6daf21cae5e00501a44cc2c90ab6f7849b8c0","sha512":"f2a76dabe03cd6e77b6d2f7a1e7f9587dde1478140f34ef81f32d75015af9159d598461b229638d6adb03066094784f3901037e5c8b5d3d3e24b3c4b3e9f82ec","ssdeep":"384:2kVMn7XtCL/UojdB4zNjkHTf6+61JuXc7jFfGvX9RkamQZrsVxgp:uLoz41kzfgnuX4F+Vq/QSrgp","tlshash":"7e92e113d18e4f7aaa1f24ec2a178533ebc757205677607f484f50a9143be49bab068f","first_seen":"2024-10-26T08:53:13.456502Z","last_seen":"2026-09-20T10:23:03.779583Z","times_seen":40,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/PixelRenderer-7a12163030.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.906Z","timestamp":1789899734906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/utilities/PixelRenderer-7a12163030.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Wed, 02 Sep 2026 20:22:14 GMT\r\nlast-modified: Tue, 18 Aug 2026 21:26:37 GMT\r\netag: W/\"7a12163030ce987109ab0ebf327ffffe\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: ajKeHsdngT2rChLzIEIYq5UY.cAtIgJc\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 3edeb493aa0b4547b903cfd306c07f70.cloudfront.net (CloudFront)\r\nage: 1519202\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 5gJu8utvmKhi17C31gopuEbAqAXI34-mvLwtL-XLIB9N-agTKwtTXw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6999,"size_decoded":3000,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6999), with no line terminators","md5":"7a12163030ce987109ab0ebf327ffffe","sha1":"2bc2de6ff7bf940d277e5e8734b6e2feae5a74a3","sha256":"c19fdad23036544d558941f0a3323975ba97730ddfdacd042a7b9bb0ab780e44","sha512":"94102269edb2ea83f9170bc4aa8f1ad8b9f52b65a8af16cfb53572c5b335cc297b473140f9dea90f267a9950bddd29607beda34aeb64fee017526247b8b2d6f4","ssdeep":"192:+WpTHi5Y2TfqjgwSVSwGzxCar1tQJMg6lY5F2aCq+HZIP:dpwTX5aRqF/P+WP","tlshash":"d4e1b92a30d2a51f49c270612d7f375aa17b12b8344e501c79168ed3bd38d4e12afbf4","first_seen":"2025-05-30T17:32:39.537281Z","last_seen":"2026-09-20T10:23:03.780191Z","times_seen":32,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":36,"connect":10,"send":0,"wait":11,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T10:22:14.086Z","timestamp":1789899734086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoaPkWbcJzjiepBzDfRKw0AjVl1g1kH%2FDor9zJqC7sJuF60z1rkpp9AgUEsSObSOmtQGPuaAhuJa5OlHfvVJUiN5TB1wm%2F3352gz6ZLlvFBu8qYeIOAnysqvjpg1zQY%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 20 Sep 2026 10:22:14 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9a4b7f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:b164d16592","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":389663,"size_decoded":48826,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1945)","md5":"0d3f8a4742306ae538a36157da9acfbd","sha1":"e50ae9f92ab85e8281d9d01e83e584405c43ada1","sha256":"62bd365ea4d0c5280c8f76022df8d78076c14f205e3b2743369c2dedf4ebfb54","sha512":"b9f0a7c9480174046fbca4a27ac4b8e8ac6b17e2418aacb04130b073385bfd54bc0fb91ccc717622a05728ec0fd195dda87b1ad2d8645451dbf9b5374d61b20f","ssdeep":"3072:1ayVHjdQEmvBqdUeaveeCGgJuDKExbG2ys1mInmwCR2bsvoCk/odXjcScSPA42WP:AyVHjZwCrp","tlshash":"e28407d5fce0041ba25b00f7eeea325e5b76e81bf70bc1c975ad82409f51d92a096b1c","first_seen":"2026-05-17T18:03:30.296553Z","last_seen":"2026-09-20T10:23:03.780826Z","times_seen":20,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":15,"connect":18,"send":0,"wait":99,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/bootstrap.native-b164d16592.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.673Z","timestamp":1789899734673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/bootstrap.native-b164d16592.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwXRoPkrQyWeiI6reWVif6px2zRzTUkkNfbuBJcwqI12VscpqkBHp2uMV5ORX%2FqA6Sdem7j0nQA8bTgUueRVMBuVRB4PLHf2iNamB3c1nBNi9H2yDfton7Odhfhh%2FTo%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-15e9\"\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9dbca376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5609,"size_decoded":2734,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5609), with no line terminators","md5":"b164d1659295b01e378040e8db9b58cc","sha1":"5af99a75d6178b600399c642c2204efef8a46f26","sha256":"2983f595bf116c7580299d8bc3e8e5df660c300b249910cd2e2d466b9b5d2a68","sha512":"c60554a6c6797ba9b95aa0a9f35e5bbe3423190d822f63b9dde992e779dd831bc89e7acf6963958fd3a123db7e372aaeaa832e6cf84d011a0f640bfb4bd14626","ssdeep":"96:huvx7Sh+yHN8s8sHYXG+oQ8DPQS5grQBwDJyg2Qsk6vlp045cKlFzpM8xn:Gx7SEytWs3+oLDPIr4wDaxkklp04BlFJ","tlshash":"d1c164b823243d7405df48fb71feab883a7564b0d8071968a53ddc5a1979d860223fe8","first_seen":"2026-04-19T02:47:52.760678Z","last_seen":"2026-09-20T10:23:03.781589Z","times_seen":26,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Rg-latin1.woff2","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.795Z","timestamp":1789899734795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Rg-latin1.woff2 HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-3c5c\"\r\nexpires: Wed, 30 Sep 2026 10:22:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TeiFHPNxJyvj9wILkI8gXoiHHhKoLu3twqMUpU3XZ48ZHCnnQnE47uk1kL7odyH6G9Hw0gdNARkY9MoefBTYCnbZjndkmaFWOISJysvamaBDB2TQaQjwwnkWG03n72g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01b9e7cdd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15452,"size_decoded":16208,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15452, version 1.19661","md5":"230b6132f4b9dfcca3fab70748ce872a","sha1":"b38e48cd6f2faa258093c16b58df5e3ad3cee51d","sha256":"872bf22cb948198d2bbfd1cdf7f977349389ef6d35b55ad4063f82cbcbc5370f","sha512":"e270fb131094e028c4d151f3aab4527528382e3326f21dbefc26225c27093115a1573b2044b64653c54642e8f7c9fb621348e4144203e5b1c752119228812bef","ssdeep":"384:iJoQYm5NHYRcU9MAR7748ePAPLfG+OkHHMTpwHX0Y:iJoQYmDyn9MS7RwkfG+9HHsg3","tlshash":"7662d121364cea614b5382e0c69468f0f6668f90833ccbe16109dbd97166f1777c1dc9","first_seen":"2026-05-17T18:03:30.342298Z","last_seen":"2026-09-20T10:23:03.782174Z","times_seen":19,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/docs/CSS/global/base-font-7862cd6d30.css","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.915Z","timestamp":1789899734915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/docs/CSS/global/base-font-7862cd6d30.css HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ndate: Mon, 14 Sep 2026 01:10:08 GMT\r\nlast-modified: Tue, 12 May 2026 20:17:29 GMT\r\netag: W/\"7862cd6d3036ac0b22f6e4d2d6808f9e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: l9qybudvuVZsR7c5qOUGeS3y30f5hw8S\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 3edeb493aa0b4547b903cfd306c07f70.cloudfront.net (CloudFront)\r\nage: 551527\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: T4bIqiImq3TNaNCcIvN3JHAgHYiRo9iioj_Sd6kC2eglHLbpG-vjpQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":26379,"size_decoded":6118,"mime_type":"text/css","magic":"ASCII text, with very long lines (26379), with no line terminators","md5":"7862cd6d3036ac0b22f6e4d2d6808f9e","sha1":"cd83f076f7cf4fd7b4087e6668c7ffb64a073c12","sha256":"e06f997de9ff9fb616d6692d9e17dbf037f1693efa163756a583252bada9c4d4","sha512":"309a23be5de50a9c547464756c6be21af09ea7858f24b77fc739fb353bb7b67b2cf45dccbd8caa3e8ad906280c6002618b95d84de908c9e35c1a12827c7e5a20","ssdeep":"384:pAZqHw2asEaMa39Q06HOBE/33zPepC79hjDxtSDqZfDVoPR4qluip4LmM0P9eCZx:pLuRmE/HzPHimu52LmM0R2O","tlshash":"65c2c72391610028f0378a2efddfb39d323c9012e6174aeff505a968dad6dda2177e54","first_seen":"2026-05-17T18:03:30.302609Z","last_seen":"2026-09-20T10:23:03.782655Z","times_seen":20,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":27,"connect":8,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/js/webcomponents-loader.2938a610ca02c611209b1a5ba2884385.gz.js","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.685Z","timestamp":1789899734685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/webcomponents-loader.2938a610ca02c611209b1a5ba2884385.gz.js HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRwhPjRd9DjFJEL9ngANjZ%2BvA1Un%2Bm35ZVGroal2%2F8sf7ReM%2BhmOC3RCMcWnfVDLfe0tSU9OGula%2FjUlWuHDZ1sk9AuM81Rp5IjqA5RRpPgu6830iTUdrE8z9v3R%2FYs%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-988\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dcca976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2440,"size_decoded":1820,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2362)","md5":"c7d9f55830713ddc982a9a67c539f51f","sha1":"b6a8ef12730c4236d93f61bece158480be5d3f13","sha256":"e524d44843e7d1c9ec644402f6d3c2b74655676f373b5c1338807c11afc2325e","sha512":"ed54711a446c5f005b2cb38a37dbd106e38cb35bc5c926918b23ec7e91b8fa23469e19e421d4e89ecfefe4f03ecb16dcd8a15bbbadd213d626f420787f62d218","ssdeep":"","tlshash":"9b514438663597b102a8646e33bff74b36f79565d85a4041440adac87fb0f4be21bcc6","first_seen":"2023-03-07T22:27:43Z","last_seen":"2026-09-20T10:23:03.783235Z","times_seen":235,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/instagram.svg","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.719Z","timestamp":1789899734719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/instagram.svg HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqhgXYgAlg3aiS187I8hu7ntiWCDP9Wemy8dNBbn5anJSTTv%2FdrAhbXi6xgvjw01mBqkEK1ZodwlSitucsKOOJyUsaxFmIFVfwuIx5Lf9udBwAVnSgZNZExOcDuoil0%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-492\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9e0cc476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1170,"size_decoded":1345,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9df55ddea035c2dced531aa0ce32e38","sha1":"1b2c72c3fe7d977f7e63e4cc7e8e3cfebfa0de5a","sha256":"544f45ef277797fbfd606b6793db6826dc8bf61612aedf3dfc0f5320d2c18be4","sha512":"0daf566abe28e051fd31302bd98b8e991f3dc75d5c2feebe157d75412dcd74b41b7754ba1c72e971e6353b07329821d35cfdf42450e58f7c47222ba4b9a905fe","ssdeep":"","tlshash":"5221c73ed3c9c23c0a169bf1dd28c124ac05209f9068939e4e1244f730311dda2bd5df","first_seen":"2023-09-09T22:15:17Z","last_seen":"2026-09-20T10:23:03.783766Z","times_seen":148,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/cookie-consent-util-40a661b2df.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.904Z","timestamp":1789899734904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/utilities/global/cookie-consent-util-40a661b2df.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 970\r\ndate: Wed, 02 Sep 2026 20:06:51 GMT\r\nlast-modified: Wed, 02 Sep 2026 17:42:30 GMT\r\netag: \"40a661b2df71bbd63a063997c7f87b12\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: .9lWdaHL152zymHNWRsZLRE_tZir21Pa\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 3edeb493aa0b4547b903cfd306c07f70.cloudfront.net (CloudFront)\r\nage: 1520125\r\nvary: Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 12cdP_Ya95nsF7XleDv9qbIhhk8i56F8OFeEvQE7Dhw-KKp5Ri-vvA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":970,"size_decoded":1609,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (970), with no line terminators","md5":"40a661b2df71bbd63a063997c7f87b12","sha1":"47fe5ada624b168bdce13e6036a6efd120100278","sha256":"755801314e8ba786f740db1a3514a535293d64fe993554d4c2d3b48b9f4465e0","sha512":"badb7ef8a6723f4e929491a2f7dff122c87b271ceb3eafdaecf97e817a75c535bafb675032dffe1f5e58daf7a661b2ccf8b1d043b45de4340253f1022cc8160c","ssdeep":"","tlshash":"0a112180b3c2690882211d3a50a9716f738883372b1cc8096a5240e360a421765fb93e","first_seen":"2026-04-19T02:47:52.714201Z","last_seen":"2026-09-20T10:23:03.784352Z","times_seen":25,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":37,"connect":8,"send":0,"wait":11,"receive":0,"ssl":240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/shared/images/common/icons/times-light.svg","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:15.129Z","timestamp":1789899735129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/shared/images/common/icons/times-light.svg HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 637\r\naccept-ranges: bytes\r\ndate: Wed, 02 Sep 2026 20:06:51 GMT\r\nserver: AmazonS3\r\nlast-modified: Wed, 02 Sep 2026 17:44:14 GMT\r\netag: \"4ac3a6303c72a360054ae8243d218e36\"\r\nx-amz-version-id: Z4.CkR7QRCzZPaI5KfV0Wo8N1eqSj6yZ\r\ncache-control: max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nvia: 1.1 3edeb493aa0b4547b903cfd306c07f70.cloudfront.net (CloudFront)\r\nage: 1520124\r\nvary: Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: xTm4n-EhF41fjUoAfGd5DpbT8gkKsKe-Okiyi1WpEH1JOouapNbLNQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":637,"size_decoded":1274,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ac3a6303c72a360054ae8243d218e36","sha1":"b98f4361d02a0738490aec692d66b4c29326dc52","sha256":"6c0522cb43501282a9d32a9cb195546e6026ea433b97418354bb1dfa5688d72a","sha512":"92fb504e7a325f2d84d83c94ad0eadc943895dc58fadfa3639984da04b376106111e5185a28b584f412c72121fe32b965fe1f47ba9db0ab25f7a55237e6bd2bb","ssdeep":"","tlshash":"acf028b0e3292d3d306d82e13b1323207fc9869fef58d2cdb52f0460281eb94b007148","first_seen":"2024-02-27T21:22:23Z","last_seen":"2026-09-20T10:23:03.785189Z","times_seen":53,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxddwsss.com/lander/king_crown_throne_castle_guard/images/facebook.svg","fqdn":"xxddwsss.com","domain":"xxddwsss.com","tld":"com"},"ip":{"addr":"172.67.207.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxddwsss.com/","date":"2026-09-20T10:22:14.710Z","timestamp":1789899734710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxddwsss.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 07:24:44 GMT","end":"Mon, 07 Dec 2026 07:24:43 GMT"},"fingerprint":{"sha1":"F7:06:02:FC:97:0C:08:47:9C:10:37:B6:55:82:4E:3C:F4:F7:5D:FD","sha256":"C6:19:BB:88:F3:55:67:D6:DD:55:21:76:16:95:EF:89:35:F0:5B:68:C0:4C:F7:85:D4:40:07:0B:70:FB:26:EE"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/facebook.svg HTTP/1.1\r\nHost: xxddwsss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xxddwsss.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:22:14 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlzDl7YlegdRhHSDhvKMmEgdab9ZYs1zPbkSGL9tDK8Qosm7Id3fppci8s5R2H6exXjyQhlJFGykhn0xfS7kBC5H1wOqRg7dKQzHqNV0%2BWXHid2%2F1DcwUw9wMngX3gc%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 10:05:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-200\"\r\nage: 989\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e01b9dfcb776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":512,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bf72df5fcac3710e621d88d9f8a8959","sha1":"9e4d0931359aed5ba4660dcee763251535583c54","sha256":"ad3f6a7546902b413908a7a4601703a4f9fa87a2798a7c8c1a1731c0d9b520d3","sha512":"e1f295222aaee31ab3454e165fe96b69662a74e775dca451ca7bbe30682c8793baf92c7a7cd6e95aa636afe1646d0323650e6feb260810ed594bcb84c528d147","ssdeep":"","tlshash":"3ef00eeb0d9442a503c813da1f3c6318bc9bbc8d7c94832ef44146b190a5aa6b074268","first_seen":"2024-10-26T08:53:13.43621Z","last_seen":"2026-09-20T10:23:03.785845Z","times_seen":81,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"xxddwsss.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xxddwsss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}