{"report_id":"934131be-e5c7-4c31-9cd1-2f2d86db1476","version":6,"status":"done","tags":[],"date":"2026-04-01T00:19:22Z","url":{"schema":"http","addr":"x114j.xyz","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"45.196.247.27","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"x114j.xyz/","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"title":"WAF Security System","dom":{"size":14851,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4599)","md5":"a0cae8360035413f72c6633a1f356704","sha1":"edcdd3a1499cf7d009e3697fb711127359230186","sha256":"8f882647fdd3997ff8e237b9a946db98d425b9195a9e71d68250d4239b82334f","sha512":"69771a03ca2304355f2a7e152dae786a8aa0c6f8a41abd4a07dffb0b8990e8b39738c1deff5c48ba2b1b1cca424d3225b8b9a0d0c37213fe0db30ca8635b8b93","ssdeep":"192:fiT5leejsA5gxHPQGyJnOh10unhBzhYDs0unhBzWhZXfTDNQtu62dKTJyMHR2EK/:fivAQcBzhUcBzWhZrDNefiwQB+7Rw","tlshash":"1f62d66a65f32929102390bd3fe7f60575348403ea0bdd1d7f9c63418fcaa6895f2798","dom_hash":"domhash4a4947bb03a4cb6daf95f52dc9a6e47c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"x114j.xyz","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"45.196.247.27","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-06T00:19:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-01","alert":"Phishing Block","trigger":"x114j.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"x114j.xyz","ip":{"addr":"103.233.249.125","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-26","domain_rank":0,"first_seen":"2026-03-31T08:59:19.810195Z","last_seen":"2026-03-31T08:59:19.810195Z","alert_count":16,"request_count":4,"received_data":55513,"sent_data":1581,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"x114j.xyz/","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"103.233.249.125","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4a4a176a896184d924eea5be8672b4","sha1":"c5af33bd2201808e8dd19d15878b1321befaa01b","sha256":"12e4b7e4ef4cae40df5ba72d3ed6b75324c6f2cbfccbe37fb21932bb43a5b695","sha512":"6ad30e29f45586373d46d38077faac4df5480a105939e82262cd16b3abfc8c32dbf94618af1c81939f8f5ef7514eee12742cd10de25593b11780db02a2ecbc84","ssdeep":"96:gwBu8u60/R4D26n0A+KTJyMYC8O2xCKIMPhK3mVheMk93yggeqxD8HTd4tcJ:dtu62dKTJyMHR2EKIMPhK3mVheMk93rd","tlshash":"72b10dba34e72432567760be2b8ff644b03804036545fd09bf9d9b405fc6978a9f2a98","size":5304,"data":"","first_seen":"2026-02-02T09:00:31.660533Z","last_seen":"2026-04-09T16:10:42.694044Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"x114j.xyz/_waf/_ebdfce843b400c7a4bce4bead089337f.sjs?id=1775002752","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"103.233.249.125","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a9a7dd7dbdad261951d908d6485d3b","sha1":"1d63c73f37e289a139e5be9e66e43ac019028f8f","sha256":"765501d38fea86deae721c670f4fdbe6158021077bb2fb0032780cb6cc2c4a27","sha512":"57e559e7e0124cfb2e69a41d0585131533623a2245c0d920a5683401cf80a505205a1349e2b91f541184d18704ca50ffd60018505e807512118d9a5a764a91e8","ssdeep":"384:1tRpJgxNimMiWrYcl9/aoCTv8zwfEUdAAQcBzhUcBzWhZrDx1uaSuSen:1tJZmYrYI9SdkzwcaX30DxHn","tlshash":"b7a2198c705a74240393b16b197fd20bf576a866680d4064f1b8d8f9eef8a6c9036f7c","size":23160,"data":"","first_seen":"2026-04-01T00:19:23.902799Z","last_seen":"2026-04-01T01:45:06.25683Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"x114j.xyz/","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"103.233.249.125","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-01T00:19:00.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b256x.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 07:15:04 GMT","end":"Sat, 27 Jun 2026 07:15:03 GMT"},"fingerprint":{"sha1":"DA:A9:67:D3:74:CB:F2:1E:36:9D:3D:B7:95:23:B7:D3:BC:11:C0:34","sha256":"86:CA:C9:C5:EB:FC:43:33:DE:0F:6B:95:78:74:6B:59:39:5D:55:11:40:27:51:B7:88:8D:32:79:7C:1F:C4:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: x114j.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 418 \r\nDate: Wed, 01 Apr 2026 00:19:11 GMT\r\nContent-Type: text/html;charset=utf8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-BLOCK: BrowserVerify\r\nCache-Control: no-cache\r\nServer: Nginx\r\nX-Safe: 1775002751=wOVNRS+Ewk/3yVnjqP0wn7Iw96EPCwFRUZWHqlyVdnYPT/gnb7k7l3YJq4ObbWUvhTSgkwdiT/T4rsaVt5r6+GMKWFM+ZvfhMf9qN9w4BrjOMX5SUzzTx0vhPJdVtusECmP59eDu0j2ymRyjlgDLGzgX2JkuU2cXnY4S+twfNjVRw9d91JkiR7/ZGDakf/BY\r\nX-VIA: l1=AbDAcMIRmKmFSHs5\r\nX-VERSION: 1774772015\r\nX-Request-Id: B8AF8D77-D549-4FFD-800E-5A1EE4A512E5\r\n\r\n","headers":null,"cookies":null,"status_code":"418","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10080,"size_decoded":0,"mime_type":"text/html; charset=utf8","magic":"HTML document, Unicode text, UTF-8 text","md5":"35986755ee0c9c242008c7c5d5c4f86e","sha1":"5f3019864249961e2180c7faa4baa3dc9d6c3900","sha256":"c57b8aaaba331ba43fc0bcd263d82431eddae9c87e4c5bbfef9a1b0ebf3fab92","sha512":"3bb19c1b5ed7d2a25477c5f611cc3d6c9d6457febf8818efe17c9df257c75087b4fe01a56bb3c479410b11609ed64abcf3dddce4e6ff7fadc67ff6d904dae32f","ssdeep":"192:diT5leejsA5gxHPQGyJ9tu62dKTJyMHR2EKIMPhK3mVheMk93rgeuD44tcCg:divpfiwQB+7R8g","tlshash":"f92273aa65f315222523a0bd3bdbf70572244403e64aed197f8c93408fc7978d9b3b98","first_seen":"2026-04-01T00:19:23.89741Z","last_seen":"2026-04-01T00:19:23.89741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4611,"timings":{"blocked":2038,"dns":388,"connect":266,"send":0,"wait":534,"receive":1,"ssl":1382},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-01","alert":"Phishing Block","trigger":"x114j.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"x114j.xyz/","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"103.233.249.125","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-01T00:19:03.543Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: x114j.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 418 \r\nDate: Wed, 01 Apr 2026 00:19:12 GMT\r\nContent-Type: text/html;charset=utf8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-BLOCK: BrowserVerify\r\nCache-Control: no-cache\r\nServer: Nginx\r\nX-Safe: 1775002752=ILgc1Vjdxh8K8f96tqXAUyTvkLIna5AQ/+YP8nnwAV6b4cjx33QPnL0ueX6lUqWbKUxlDJGtaV/2rOBYpMe58yUxFqdQ24Q5dsO+smct3eA7Yk/Tvf5h1fKXFKbfYuTu81zIJefO8LpMAbWQA0kixUtpxKkAL9hVJ6B6fweSM2izHuBYu8k0hcEbcvY87Kc4\r\nX-VIA: l1=AbDAcMIRmKmFSHs5\r\nX-VERSION: 1774772015\r\nX-Request-Id: 4F911A2B-94F7-40FD-9F47-7964B4EEAAC6\r\n\r\n","headers":null,"cookies":null,"status_code":"418","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10080,"size_decoded":0,"mime_type":"text/html; charset=utf8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ce54ad84efc68deb3f6252f461ec243c","sha1":"c54d5447e6f6dcf69c2283d9c3c482aa67e69e7a","sha256":"240d12698c11ee0e899bafee887ca72252f88f728b56e6caaea5cfd3f60d14a2","sha512":"68616c528e285021c4b57e18638584b3e873a21ac21bca78ce64b5fe827f9371f656f7684bb2c1d4e0d1c4e39d43b9ebead49ad44aff891fab5cf746dacbf0ee","ssdeep":"192:diT5leejsA5gxHPQGyJ9tu62dKTJyMHR2EKIMPhK3mVheMk93rgeuD44tcBg:divpfiwQB+7RPg","tlshash":"992273aa65f315222523a0bd3bdbf70572244403e64aed197f8c93408fc7978d9b3b98","first_seen":"2026-04-01T00:19:23.90014Z","last_seen":"2026-04-01T00:19:23.90014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":240,"dns":1,"connect":242,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-01","alert":"Phishing Block","trigger":"x114j.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"x114j.xyz/_waf/_ebdfce843b400c7a4bce4bead089337f.sjs?id=1775002752","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"103.233.249.125","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://x114j.xyz/","date":"2026-04-01T00:19:04.100Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_waf/_ebdfce843b400c7a4bce4bead089337f.sjs?id=1775002752 HTTP/1.1\r\nHost: x114j.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://x114j.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 01 Apr 2026 00:19:12 GMT\r\nContent-Type: application/x-javascript;charset=utf8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-BLOCK: BrowserVerify\r\nCache-Control: no-cache\r\nServer: Nginx\r\nX-Safe: 1775002752=ILgc1Vjdxh8K8f96tqXAUyTvkLIna5AQ/+YP8nnwAV6b4cjx33QPnL0ueX6lUqWbKUxlDJGtaV/2rOBYpMe58yUxFqdQ24Q5dsO+smct3eA7Yk/Tvf5h1fKXFKbfYuTu81zIJefO8LpMAbWQA0kixUtpxKkAL9hVJ6B6fweSM2izHuBYu8k0hcEbcvY87Kc4\r\nX-VIA: l1=AbDAcMIRmKmFSHs5\r\nX-VERSION: 1774772015\r\nX-Request-Id: 79429BB4-24F6-4F7D-BD8F-BD9394A89E93\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23160,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23139)","md5":"76a9a7dd7dbdad261951d908d6485d3b","sha1":"1d63c73f37e289a139e5be9e66e43ac019028f8f","sha256":"765501d38fea86deae721c670f4fdbe6158021077bb2fb0032780cb6cc2c4a27","sha512":"57e559e7e0124cfb2e69a41d0585131533623a2245c0d920a5683401cf80a505205a1349e2b91f541184d18704ca50ffd60018505e807512118d9a5a764a91e8","ssdeep":"384:1tRpJgxNimMiWrYcl9/aoCTv8zwfEUdAAQcBzhUcBzWhZrDx1uaSuSen:1tJZmYrYI9SdkzwcaX30DxHn","tlshash":"b7a2198c705a74240393b16b197fd20bf576a866680d4064f1b8d8f9eef8a6c9036f7c","first_seen":"2026-04-01T00:19:23.902799Z","last_seen":"2026-04-01T01:45:06.25683Z","times_seen":2,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-01","alert":"Phishing Block","trigger":"x114j.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"x114j.xyz/favicon.ico","fqdn":"x114j.xyz","domain":"x114j.xyz","tld":"xyz"},"ip":{"addr":"103.233.249.125","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://x114j.xyz/","date":"2026-04-01T00:19:04.593Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: x114j.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://x114j.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 418 \r\nDate: Wed, 01 Apr 2026 00:19:12 GMT\r\nContent-Type: text/html;charset=utf8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-BLOCK: BrowserVerify\r\nCache-Control: no-cache\r\nServer: Nginx\r\nX-Safe: 1775002752=ILgc1Vjdxh8K8f96tqXAUyTvkLIna5AQ/+YP8nnwAV6b4cjx33QPnL0ueX6lUqWbKUxlDJGtaV/2rOBYpMe58yUxFqdQ24Q5dsO+smct3eA7Yk/Tvf5h1fKXFKbfYuTu81zIJefO8LpMAbWQA0kixUtpxKkAL9hVJ6B6fweSM2izHuBYu8k0hcEbcvY87Kc4\r\nX-VIA: l1=AbDAcMIRmKmFSHs5\r\nX-VERSION: 1774772015\r\nX-Request-Id: 4D70F6A4-3D3F-4F77-9C16-C9F7E77DB888\r\n\r\n","headers":null,"cookies":null,"status_code":"418","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10080,"size_decoded":0,"mime_type":"text/html; charset=utf8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ce54ad84efc68deb3f6252f461ec243c","sha1":"c54d5447e6f6dcf69c2283d9c3c482aa67e69e7a","sha256":"240d12698c11ee0e899bafee887ca72252f88f728b56e6caaea5cfd3f60d14a2","sha512":"68616c528e285021c4b57e18638584b3e873a21ac21bca78ce64b5fe827f9371f656f7684bb2c1d4e0d1c4e39d43b9ebead49ad44aff891fab5cf746dacbf0ee","ssdeep":"192:diT5leejsA5gxHPQGyJ9tu62dKTJyMHR2EKIMPhK3mVheMk93rgeuD44tcBg:divpfiwQB+7RPg","tlshash":"992273aa65f315222523a0bd3bdbf70572244403e64aed197f8c93408fc7978d9b3b98","first_seen":"2026-04-01T00:19:23.90014Z","last_seen":"2026-04-01T00:19:23.90014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"x114j.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-01","alert":"Phishing Block","trigger":"x114j.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}