{"report_id":"9366c440-29a1-4982-a240-389972b7df36","version":0,"status":"done","tags":[],"date":"2026-07-28T16:30:46Z","url":{"schema":"http","addr":"xam6d.cc","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"final":{"url":{"schema":"https","addr":"xam6d.cc/","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"title":"xam6d.cc/","dom":{"size":620,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (620), with no line terminators","md5":"a58d9a5d48af8794cd06bdfb88c1ec55","sha1":"a2a06a01e34c77ad10d2310f9f62cf1f68b6104c","sha256":"91210b727a72ab795d990e51440ca45b1caf68db51371fc870946af1a64fc45e","sha512":"64f7e012a7b30b5c5ce100807519848f159caae7ef4b86dd72610e14eb330391b6824d45e33c6a1ff017daeb6ecabb838f7adf76c56da8ba20485b2da7eacbe9","ssdeep":"","tlshash":"66f078534c15c84c3300979ae8a1f01cc006ac1efea9ec20fce392aaadf8f9904615d6","dom_hash":"domhashf5eb086b4f525e78fc5d842d1d900f33","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xam6d.cc","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T16:30:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cstaticdun.126.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1998-02-28","domain_rank":474446,"first_seen":"2017-06-21T07:31:41Z","last_seen":"2026-07-25T03:01:29.434967Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":483,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xam6d.cc","ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"domain_registered":"2026-07-19","domain_rank":0,"first_seen":"2026-07-28T11:16:04.72234Z","last_seen":"2026-07-28T11:16:04.72234Z","alert_count":28,"request_count":7,"received_data":1959529,"sent_data":3276,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tencent Waterproof Wall","description":"","website":"https://007.qq.com/","common_platform_enumeration":"","icon":"TencentWaterproofWall.png","categories":["Hosting panels","Security"]}]},{"fqdn":"ssl.captcha.qq.com","ip":{"addr":"157.255.220.168","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"1995-05-04","domain_rank":744414,"first_seen":"2012-11-03T19:41:33Z","last_seen":"2026-07-24T15:00:55.634605Z","alert_count":0,"request_count":1,"received_data":104726,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ssl.captcha.qq.com/TCaptcha.js","fqdn":"ssl.captcha.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"157.255.220.168","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"704fb0fe92f11bdd46b1f9cc50d2fdb6","sha1":"4ad068ac995cee12c70da3626cf2556071063748","sha256":"c9cd8c5b7b1ec7ca67564ba50cb81dafe02d256f64167e0e1da604641eff07ed","sha512":"b55d12260ccf0b6570232740510e0a83d2fa870376f93996c810a3fe8c839530e287f76c918951dea5c6f02fe09f16bd8b518112fbc79dc83715cd9bc51d22ae","ssdeep":"3072:/IxTYeu24ozqA9/hISgSGD/exErmPQ0DlXj:izqA9pIlnD/eajylXj","tlshash":"8ca318deb3f1762d06ab6194cc3b9d4e68374c508018f175cfb9c687ba28589921bf39","size":104479,"data":"","first_seen":"2026-07-28T11:12:25.979356Z","last_seen":"2026-07-28T17:26:46.889383Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cstaticdun.126.net/load.min.js?t=202007291602","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:11.391Z","timestamp":1785256211391,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /load.min.js?t=202007291602 HTTP/1.1\r\nHost: cstaticdun.126.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T03:56:29.318919Z","times_seen":17591548,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xam6d.cc/static/js/manifest.b1a2efb4.js?1779776775600","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:11.394Z","timestamp":1785256211394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xam6d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 01:37:58 GMT","end":"Sat, 24 Oct 2026 01:37:57 GMT"},"fingerprint":{"sha1":"74:CA:04:0E:FE:DC:BD:58:56:74:71:8B:29:9D:4B:13:AF:76:78:84","sha256":"B1:83:D8:2E:81:36:9A:62:EB:86:E3:08:3D:8B:BF:77:CF:72:C5:AC:F9:40:F5:06:1F:9D:45:42:0D:4D:2B:4F"}}},"request":{"raw":"GET /static/js/manifest.b1a2efb4.js?1779776775600 HTTP/1.1\r\nHost: xam6d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: delmare-df91\r\nx-country: NO\r\ndate: Tue, 28 Jul 2026 16:04:25 GMT\r\netag: W/\"6a14ccb8-7cf\"\r\nx-cache-status: HIT\r\nx-cache-key: xam6d.cc/static/js/manifest.b1a2efb4.js~GET4697438c8dfec57543ba0443490247bf~D\r\nlast-modified: Mon, 25 May 2026 22:27:04 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1165\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1999,"size_decoded":1578,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1999), with no line terminators","md5":"d44ab133fcd8ce86253e887803b5a2f7","sha1":"1167162eb134f9ad33dd7c8852891b23c8020593","sha256":"55b86ea4b1697cf1a26fe53845f547f34f38e49b4af23c901c30b59c577e34cc","sha512":"df4cfbb7ef1f415dcacff7a74edfc31f5ce53ed6ade08a6eda4e3300571a160d300a654fc49e46a5f6f80820e959a56ebaf88eaaf92a473cd11fae15aae8adf3","ssdeep":"","tlshash":"cc41b8de7a54f4da43ea147d592b6114f17c2e222d1cc840d3ccd06a7d35d449213af3","first_seen":"2026-07-28T11:12:25.978491Z","last_seen":"2026-07-28T17:26:46.892289Z","times_seen":7,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xam6d.cc/static/js/main.2c40e282.js?1779776775600","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:11.397Z","timestamp":1785256211397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xam6d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 01:37:58 GMT","end":"Sat, 24 Oct 2026 01:37:57 GMT"},"fingerprint":{"sha1":"74:CA:04:0E:FE:DC:BD:58:56:74:71:8B:29:9D:4B:13:AF:76:78:84","sha256":"B1:83:D8:2E:81:36:9A:62:EB:86:E3:08:3D:8B:BF:77:CF:72:C5:AC:F9:40:F5:06:1F:9D:45:42:0D:4D:2B:4F"}}},"request":{"raw":"GET /static/js/main.2c40e282.js?1779776775600 HTTP/1.1\r\nHost: xam6d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: delmare-df91\r\nx-country: NO\r\ndate: Tue, 28 Jul 2026 16:04:25 GMT\r\netag: W/\"6a14ccb8-7383c\"\r\nx-cache-status: HIT\r\nx-cache-key: xam6d.cc/static/js/main.2c40e282.js~GET4697438c8dfec57543ba0443490247bf~D\r\nlast-modified: Mon, 25 May 2026 22:27:04 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 84263\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":473148,"size_decoded":84675,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"509d2870ab8d771816af9e1212ea9245","sha1":"c10cfa4d45ec38e9fedabf5ff318c3b3466a73fb","sha256":"3d3ed51b8a1f60df6e0387fd510cb15aa5d209e977b81d83f9e9bc0f3fc249ac","sha512":"0e332cea2f4e89ac8aa4e108e9de7d1735b062aba228c1b3d7383aedfeb0fa56e13716692acaae50e2792c119db9e5fab278808d7ea694535b74db7aa1d485f7","ssdeep":"3072:TNF+rNGirsfAutrgjA0TFFYQqujmP40FwSEnnVsDSQSw+DFD7:+FYujv0Snh97","tlshash":"31a4f849b141b8ab03f3a17a802f1559f2b52895a54c8c50f368cde7f9f6558a32ff38","first_seen":"2026-07-28T11:12:25.981486Z","last_seen":"2026-07-28T17:26:46.89505Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":530,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xam6d.cc/favicon-1779776775600.ico","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:14.399Z","timestamp":1785256214399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xam6d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 01:37:58 GMT","end":"Sat, 24 Oct 2026 01:37:57 GMT"},"fingerprint":{"sha1":"74:CA:04:0E:FE:DC:BD:58:56:74:71:8B:29:9D:4B:13:AF:76:78:84","sha256":"B1:83:D8:2E:81:36:9A:62:EB:86:E3:08:3D:8B:BF:77:CF:72:C5:AC:F9:40:F5:06:1F:9D:45:42:0D:4D:2B:4F"}}},"request":{"raw":"GET /favicon-1779776775600.ico HTTP/1.1\r\nHost: xam6d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\nx-via: delmare-df91\r\nx-country: NO\r\ndate: Tue, 28 Jul 2026 14:51:05 GMT\r\netag: W/\"6a14ccb8-4203e\"\r\nx-cache-status: HIT\r\nx-cache-key: xam6d.cc/favicon-1779776775600.ico~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Mon, 25 May 2026 22:27:04 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 19656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":270398,"size_decoded":20042,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256, 32 bits/pixel","md5":"653b3bd117cebbc214866664d24fcee8","sha1":"eeebdac1508894b4415810ba091ac3e0776d33a4","sha256":"fb1503b9ba199e7d0f22231c9f590128fa7590ecf90c77636cf2bc6b68cd9f35","sha512":"5e421b0c85775b28dd63891b84074baebd30233063c4225d4b1adb3f0205aeaa6a5e34d53cec022f36bf37a3f04b5e1a8ce13c024504917459176db017531f94","ssdeep":"384:gtA0AlRy79d7SySEL/bPoEZFmSNwKpZ4ztvyvgpWOlWRe1kHsCbvB:galk/7SyxL0EjK3QGkNvB","tlshash":"974492d8429c5c4edd442e32f5be6c4112e38cda8da945b37b81bfad3509db3aa70c16","first_seen":"2025-04-05T11:33:17.210097Z","last_seen":"2026-07-28T17:26:46.892864Z","times_seen":30,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xam6d.cc/","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T16:30:09.967Z","timestamp":1785256209967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xam6d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 01:37:58 GMT","end":"Sat, 24 Oct 2026 01:37:57 GMT"},"fingerprint":{"sha1":"74:CA:04:0E:FE:DC:BD:58:56:74:71:8B:29:9D:4B:13:AF:76:78:84","sha256":"B1:83:D8:2E:81:36:9A:62:EB:86:E3:08:3D:8B:BF:77:CF:72:C5:AC:F9:40:F5:06:1F:9D:45:42:0D:4D:2B:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xam6d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nx-via: delmare-df91\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:30:10 GMT\r\nlast-modified: Mon, 25 May 2026 22:27:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14ccb8-47f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tencent Waterproof Wall","description":"","website":"https://007.qq.com/","common_platform_enumeration":"","icon":"TencentWaterproofWall.png","categories":["Hosting panels","Security"]}],"data":{"size":1151,"size_decoded":829,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1151), with no line terminators","md5":"ab7bf68f37a91fdb7435d7f5d1ca2fe7","sha1":"8ed9a46820cc8773a65bb28faeaeaa2601ab7b71","sha256":"b4cadfb944fc93026be27689abda4f64d3d6809f30f68c503120401a17c6f505","sha512":"a5e82845bc953e48119c017751ab1f9c4b7ee93321fff89fd74122dfe8cddc0db73238c98d45c0e03949d5cf3aab63afa9ff6cba2cb65f9d363f4cf9aa6faae9","ssdeep":"","tlshash":"5a21ee534c19c488632047d6f9b1e01dc00ed42effa5dc60ede644ea9ea8b9e0c255d5","first_seen":"2026-07-28T11:12:25.983233Z","last_seen":"2026-07-28T17:26:46.893561Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":350,"connect":230,"send":0,"wait":251,"receive":0,"ssl":240},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.captcha.qq.com/TCaptcha.js","fqdn":"ssl.captcha.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"157.255.220.168","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:11.388Z","timestamp":1785256211388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.captcha.qq.com","organization":""},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:F5:EA:26:0F:C2:28:21:1C:74:6C:B2:E3:19:6D:7C:66:D5:E0:70","sha256":"35:62:9E:32:B6:A9:94:F6:C5:7C:C5:62:00:F1:5C:C3:F5:D4:69:07:BA:0B:E7:72:F9:6C:6C:CE:26:BA:6D:68"}}},"request":{"raw":"GET /TCaptcha.js HTTP/1.1\r\nHost: ssl.captcha.qq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 28 Jul 2026 16:30:19 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 104479\r\nConnection: keep-alive\r\nP3P: CP=CAO PSA OUR\r\nServer: Trpc httpd, tencent http server\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":104479,"size_decoded":104726,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"704fb0fe92f11bdd46b1f9cc50d2fdb6","sha1":"4ad068ac995cee12c70da3626cf2556071063748","sha256":"c9cd8c5b7b1ec7ca67564ba50cb81dafe02d256f64167e0e1da604641eff07ed","sha512":"b55d12260ccf0b6570232740510e0a83d2fa870376f93996c810a3fe8c839530e287f76c918951dea5c6f02fe09f16bd8b518112fbc79dc83715cd9bc51d22ae","ssdeep":"3072:/IxTYeu24ozqA9/hISgSGD/exErmPQ0DlXj:izqA9pIlnD/eajylXj","tlshash":"8ca318deb3f1762d06ab6194cc3b9d4e68374c508018f175cfb9c687ba28589921bf39","first_seen":"2026-07-28T11:12:25.979356Z","last_seen":"2026-07-28T17:26:46.889383Z","times_seen":8,"resource_available":true,"data":null}},"time_used":10203,"timings":{"blocked":-1,"dns":2,"connect":265,"send":0,"wait":269,"receive":2393,"ssl":7273},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xam6d.cc/static/css/main.d072bfbf.css","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:11.392Z","timestamp":1785256211392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xam6d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 01:37:58 GMT","end":"Sat, 24 Oct 2026 01:37:57 GMT"},"fingerprint":{"sha1":"74:CA:04:0E:FE:DC:BD:58:56:74:71:8B:29:9D:4B:13:AF:76:78:84","sha256":"B1:83:D8:2E:81:36:9A:62:EB:86:E3:08:3D:8B:BF:77:CF:72:C5:AC:F9:40:F5:06:1F:9D:45:42:0D:4D:2B:4F"}}},"request":{"raw":"GET /static/css/main.d072bfbf.css HTTP/1.1\r\nHost: xam6d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nx-via: delmare-df91\r\nx-country: NO\r\ndate: Tue, 28 Jul 2026 16:04:25 GMT\r\netag: W/\"6a14ccb8-3706f\"\r\nx-cache-status: HIT\r\nx-cache-key: xam6d.cc/static/css/main.d072bfbf.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Mon, 25 May 2026 22:27:04 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 30698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":225391,"size_decoded":31083,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d072bfbf2109fe8bbbc1be991bc5cd22","sha1":"7f834a729fc5094f21272c103d9ba0021ceb48e5","sha256":"561cc95bbba99b55c98e74f5557a55cb78f179e7d9daa416d822a0e025cadea5","sha512":"e7773e606e84e7576efdfc613da8ad662f0d9067a15b92eede6a33dcf14e15130c88515edd923ef6fe4ad6cd9558ebe9aa2de545acd606843302f304c60b8671","ssdeep":"1536:gpsji0pUJyV2X9cTiAyyOaGjg4anUnbJJ2GgjrrjrR:TiaV2X9cTiAyHg4aUnNgZ","tlshash":"2024b532c485241eb137c9ad52e4faca615cd08bd5161fbcba3679a9ebc20d917b7303","first_seen":"2026-07-28T11:12:25.984196Z","last_seen":"2026-07-28T17:26:46.891506Z","times_seen":7,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xam6d.cc/static/js/vendor.70b2f1fd.js?1779776775600","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:11.395Z","timestamp":1785256211395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xam6d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 01:37:58 GMT","end":"Sat, 24 Oct 2026 01:37:57 GMT"},"fingerprint":{"sha1":"74:CA:04:0E:FE:DC:BD:58:56:74:71:8B:29:9D:4B:13:AF:76:78:84","sha256":"B1:83:D8:2E:81:36:9A:62:EB:86:E3:08:3D:8B:BF:77:CF:72:C5:AC:F9:40:F5:06:1F:9D:45:42:0D:4D:2B:4F"}}},"request":{"raw":"GET /static/js/vendor.70b2f1fd.js?1779776775600 HTTP/1.1\r\nHost: xam6d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: delmare-df91\r\nx-country: NO\r\ndate: Tue, 28 Jul 2026 16:04:25 GMT\r\netag: W/\"6a14ccb8-ae667\"\r\nx-cache-status: HIT\r\nx-cache-key: xam6d.cc/static/js/vendor.70b2f1fd.js~GET4697438c8dfec57543ba0443490247bf~D\r\nlast-modified: Mon, 25 May 2026 22:27:04 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 224627\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":714343,"size_decoded":225042,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c81ad31811ec0419331a48a9a906d4ea","sha1":"1c2328ed784c2167909d06d7ed3df52dc1f42ef8","sha256":"d2fedefab7f4312cbba04ff1f96dd3aa1c30fd9757d0d98579ae45768af12ead","sha512":"130536bbdbbac1d7dd7942cc482d12c6dcb5b84f3bfd68908e4d6fbb6132f10cb06ec9020320c9d3423cf72e2870fe2d4207a8a9302929b66038f4b3ed1838da","ssdeep":"6144:gPn72NnKnxIM3BEZO0WlcfMkFEAuRCONEgHfPOdFvRX+m09JgsQDu81fbX0aNUSV:q+nKnxIZKcfaAGx6xhRsQDZd0a5nP9","tlshash":"90e4f7cd7692f0a243f321b6402f640bb37a6959680d8550f251e8e5bcbd95e923bf3c","first_seen":"2026-05-27T09:23:12.823523Z","last_seen":"2026-07-28T17:26:46.894561Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xam6d.cc/favicon-1779776775600.ico","fqdn":"xam6d.cc","domain":"xam6d.cc","tld":"cc"},"ip":{"addr":"35.201.151.162","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xam6d.cc/","date":"2026-07-28T16:30:14.400Z","timestamp":1785256214400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xam6d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 01:37:58 GMT","end":"Sat, 24 Oct 2026 01:37:57 GMT"},"fingerprint":{"sha1":"74:CA:04:0E:FE:DC:BD:58:56:74:71:8B:29:9D:4B:13:AF:76:78:84","sha256":"B1:83:D8:2E:81:36:9A:62:EB:86:E3:08:3D:8B:BF:77:CF:72:C5:AC:F9:40:F5:06:1F:9D:45:42:0D:4D:2B:4F"}}},"request":{"raw":"GET /favicon-1779776775600.ico HTTP/1.1\r\nHost: xam6d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xam6d.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\nx-via: delmare-df91\r\nx-country: NO\r\ndate: Tue, 28 Jul 2026 14:51:05 GMT\r\netag: W/\"6a14ccb8-4203e\"\r\nx-cache-status: HIT\r\nx-cache-key: xam6d.cc/favicon-1779776775600.ico~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Mon, 25 May 2026 22:27:04 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 19656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":270398,"size_decoded":20042,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256, 32 bits/pixel","md5":"653b3bd117cebbc214866664d24fcee8","sha1":"eeebdac1508894b4415810ba091ac3e0776d33a4","sha256":"fb1503b9ba199e7d0f22231c9f590128fa7590ecf90c77636cf2bc6b68cd9f35","sha512":"5e421b0c85775b28dd63891b84074baebd30233063c4225d4b1adb3f0205aeaa6a5e34d53cec022f36bf37a3f04b5e1a8ce13c024504917459176db017531f94","ssdeep":"384:gtA0AlRy79d7SySEL/bPoEZFmSNwKpZ4ztvyvgpWOlWRe1kHsCbvB:galk/7SyxL0EjK3QGkNvB","tlshash":"974492d8429c5c4edd442e32f5be6c4112e38cda8da945b37b81bfad3509db3aa70c16","first_seen":"2025-04-05T11:33:17.210097Z","last_seen":"2026-07-28T17:26:46.892864Z","times_seen":30,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"xam6d.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"xam6d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}