{"report_id":"b1ad19d8-5a34-4398-a89c-2cb2e4ac837f","version":0,"status":"done","tags":[],"date":"2026-08-10T01:14:10Z","url":{"schema":"http","addr":"x39p.top/m","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":0,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"x39p.top/m/home","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"title":"welcome-BET365","dom":{"size":486306,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48963)","md5":"001fb6e17be5fbce99a7e4844db5acf6","sha1":"f081ddf375013ab8835091af6fb92183cec304ee","sha256":"82d403b4f6c5844ee06f6de79ad6aacf43048c2045f20978888132fa8dd399f9","sha512":"6c9fad68ea1c9fd59013fef7c8db141dd84ee67aefa4204dd64dcbdf82c444546435d27669d74107d68938748328afcbd257c0617813d35972bb9eaf1a2a17b1","ssdeep":"1536:8NJkS1rxz0DcYJPPtpbATZH6Ybib9ihwiQDFb0oRbYhfbO1lT7URT89VYO2eiVOI:ttfihwiQDoTO1lQT9plCYVke28","tlshash":"17a418f4039c43f4f40b879dec763c6122a634fb7fc44648f3ad4aa1a77268aa45d865","dom_hash":"domhash08acd524cbdc0a3782806d774f564c21","first_seen":"2026-08-10T01:14:22.846252Z","last_seen":"2026-08-10T01:14:22.846252Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"x39p.top/m","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":0,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T01:14:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"x39p.top","ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-07-28","domain_rank":0,"first_seen":"2026-08-09T10:13:58.390696Z","last_seen":"2026-08-09T10:13:58.390696Z","alert_count":292,"request_count":146,"received_data":12445072,"sent_data":81866,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x39p.top/js/hls.1781011881923.e2564250.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbc8180c513457c408ac636f0520bd80","sha1":"75e0852addcf99be60c5f9c21fd5a6ece00310e4","sha256":"2671321388c721720b1957e436d203ef5a4f61d2a0a10baea60333526fc422c7","sha512":"2334e2099976fe885e3f2b9a7c54b5759800b7ce45562aa09d2226b1011ad2aeb2be89f8cce7d16991278d78e66af32763af58ae06c43c2c304968bf50ca0a53","ssdeep":"6144:UckAO+G0MgADb9d+yGzAHFVtMcNAsIK2uOiYEqB424cRjvyIGCcbHmVf0gBhL3HQ:afBnlNT","tlshash":"1394f955fb5072bc5f6ba256a42f1126933e1892204c9c74f27afda19ef0984f03d9bc","size":447348,"data":"","first_seen":"2026-06-01T22:17:32.419527Z","last_seen":"2026-08-10T03:56:53.614007Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/home","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T02:09:46.25295Z","times_seen":237556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/home","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T02:54:32.824608Z","times_seen":741534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/home","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T02:10:29.731878Z","times_seen":91707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/config/gd.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","size":17440,"data":"","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-08-10T17:58:48.244953Z","times_seen":1245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bbd69200a3d758f89e8076a123ed982","sha1":"dfe2d66f2d85ddc2008401ed15dcba3515392f37","sha256":"b79cd0c532adb639e6139c9394527b217982efdbff4969494986edacd943e2b7","sha512":"ffb7e75ea86b911ed842f7525c08ad5cd4ef5085736e757c47f3b4e09b3c9497dad089fae69953dd819f57b3ac1cb3a54ba037f9a8ad3fa37d7aeac9ac36bcb3","ssdeep":"","tlshash":"07c0c0770f2c7f14110310230174f3ac5431c028fc15b302331f40018b50b0d0c30e40","size":178,"data":"","first_seen":"2026-05-25T23:43:55.293244Z","last_seen":"2026-08-10T17:58:48.598314Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7d6cf21ba9b37cce394593785671f7","sha1":"aabeaf8e874da29cee7e1645707577446b8de63b","sha256":"6912a38811267077bd6dd2630bccd25ba04b653b4967a636d75a6ec97c5bd2fd","sha512":"9739d97867822d248e0083a78d8657485d85e70bbb7a75e0fccd283c2bdb980ded0ea78b1a4fb0540c529e602ba88286021df0553bb23e45fc91281f64a4db49","ssdeep":"","tlshash":"de31ce286eb29531a413612a1f6ff2843235d62f3148ef003f0cc7651f24d6ba6356d5","size":1686,"data":"","first_seen":"2026-06-12T10:00:06.928319Z","last_seen":"2026-08-10T17:58:48.599126Z","times_seen":1174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a15b4803f5b926cf35dd50ad665005e3","sha1":"0dd0dd998736dc9db4ab3c7ee8f7cabc8e1e341b","sha256":"201c5550359d1e530619f58a4f77bfbe382200e2b0c85d4136df96523aee625b","sha512":"e21d282a7abbc3b8aba31153d7969b54c647e3c2bc2f1c786a6f3894ee0322540fc37d99351e5d8998991198a98b26c470c16fef19e5627cff75e0a6157f6e2d","ssdeep":"","tlshash":"b7700000be08a0a80000a0202828080c280238a0803b03080802c8023aa8c80288a802","size":24,"data":"","first_seen":"2026-05-25T23:43:55.294961Z","last_seen":"2026-08-10T17:58:48.599995Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f54a6c689ae3fb37bcded37e79fea08","sha1":"0861325faf70167325da7dfd6b4059a6991136aa","sha256":"c9a960988ba6d8cfea2c7e709385252a139280898d9b4010703981ce03184a1c","sha512":"08111d473c9567e7da677c4a5e61e232f670b58e2bac4f1a1d96005b83214368e6bdcf36efa1b99aa4708beb8a11bb3378270d70d1a8faa3b2fbea3abb10b4e6","ssdeep":"","tlshash":"82700008ec0088ab0000a00028000cc8380a00208a3b838f8a00008a2ea28b0000ac00","size":24,"data":"","first_seen":"2026-05-25T23:43:55.29586Z","last_seen":"2026-08-10T17:58:48.60079Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c45b02b1f350ecba8716f39faa1d6dd9","sha1":"323d186c69f92adfbf21ac33010643886a3ada59","sha256":"81d9bb79dfb8f66568da929cceb338198f5fb8ef0d422c9bc19a97944981d729","sha512":"6cb26d6b01335a5779cf876ebce242b675745c80857fe191e0f42b927c5b8c40ff0896f64e6c28640c9bc1d9380344c6282790f6a7341d5ab74eba28fe93f4d2","ssdeep":"","tlshash":"eb017d9e483788107b2225bd537f5089f1a2516f8e8bcc103c1e5b00eff48ab25a2bd9","size":738,"data":"","first_seen":"2026-05-25T23:43:55.296647Z","last_seen":"2026-08-10T17:58:48.601641Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"077d4be9ad272f7d475481152daff715","sha1":"2f46a2943ac225687c445e0416015d1f97b7f0a1","sha256":"8d289c243d18cc7608ad59bd1b5d4c5edc5a26521213972903495b5ce1f78ff7","sha512":"310f88318435a5cee999868c4f24f906af4f7ba99540a2a5bf79b68f1cc1dc5fcd84b3c45051e8bc2e8ad3e36873f746fbd95aa84b6b92a27a76c5c84fec37d3","ssdeep":"","tlshash":"ac41027d826245a51973346a1f9e730836f340b31149e9113e5c8a802fa9a5f82b7bfa","size":2321,"data":"","first_seen":"2026-05-25T23:43:55.297422Z","last_seen":"2026-08-10T17:58:48.60243Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2d3475f1cf5b92ebde88c18cfb52625","sha1":"b178b44e61169b2fc5f25b0120206d3812b19cc1","sha256":"3a448e6329733e72eb2a1d80d1897a5ddf20226acbafb032eecdf71d83fe307a","sha512":"802939763c96de22534a93d89f00066ef7cd4cf58814954ebaa18ad6e77aaf19e99745c8a677625be818d3f378e5fe285ec537561be58e12504a1f3eaa23f363","ssdeep":"","tlshash":"00f0a00e0ee548131963706a4c0f9201203b2513414eea08bffe9bb24f92a6886174cc","size":538,"data":"","first_seen":"2026-05-25T23:43:55.298337Z","last_seen":"2026-08-10T17:58:48.603215Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"196e0f8d81dba38fb58a2eef3490451c","sha1":"4c70fb540d5f49bd92603d0cccd3005fea9b4c4f","sha256":"eabeb94d65d8704477ca411952b078a4fde998d61c9b3cb12b6940389dadfd90","sha512":"17596a9ca2ed22c2f13f6ec692ae8c32bc6aa1a1a4c7a888639c8ea5f2596a16efb37dcbd14bbc8b514c8bce98bc3f7ace246f5fdfe4070417cd670834883566","ssdeep":"192:q2wqx5Cvtib5XOQRzlaECoXZTAoV51nsPhwzvBa/id3+36a/E/97g6I52MdobsIS:q2VwiYwJvSoVXsp+pa/iZcVk97g6nMuQ","tlshash":"78322b69a5b71bba25673036277f301889b080630319fd947c0ff61e4fa54366297be7","size":11902,"data":"","first_seen":"2026-05-25T23:43:55.299247Z","last_seen":"2026-08-10T17:58:48.604055Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4429af1150d1fa3b53d1df1756276b64","sha1":"1921726e78a10af853be137ddf92f3d86deda32a","sha256":"2f7789347336fe8f5baaeba0f2285060e84c161bd59ee0aa3c7d8c47cf27d580","sha512":"416f1e1d8ee3a03067609ca187a88c5e3a77cb751e8769f902a12c6115e6394121254e4d60e469c50ade2b044dff176c0f7ef93912c563c510279de31d61823e","ssdeep":"","tlshash":"0c11cc5a99e28132aa5b303735bd43887728a023d184df413dcc99456fa8da5cabf6c4","size":930,"data":"","first_seen":"2026-05-25T23:43:55.300055Z","last_seen":"2026-08-10T17:58:48.604831Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T02:54:32.824608Z","times_seen":741534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/32542.1781011881923.e967ca7e.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6632464b5db99b7cf6b8ce495440c13","sha1":"1e9152c90f0af648525dd5d361ed45686a6da85d","sha256":"1bc2b74ad2dbf29c416aad5462702cec6a6bbc276e5b312d16d64c3218f2b426","sha512":"6857cc1e3cd9ea0bf4fe283637a2147840d68d3ad9817c05e11cb107bb42ffc80defa35872f3b231555a15dd653a63a051aac7719235e9c2a0d253a5b0c7c3f7","ssdeep":"384:IZqxG7HnUen7QA/O65KjWYUAoT/9KcIWHOgpOTfISdk:BxGb9KjW/","tlshash":"bfb2d50ecb8cc2d9be211fac421d90610650e8f7e58759ec95f6ad09f93c60e325fa6c","size":24502,"data":"","first_seen":"2026-05-02T01:47:15.946252Z","last_seen":"2026-08-10T03:56:53.623394Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/configPage.js?v=6/9/2026,%2021:37:10","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","size":949,"data":"","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-08-10T17:58:48.47216Z","times_seen":2885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/chunk-common.1781011881923.b470d60e.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"08afa88982cffd7b96a2190cdafe1c42","sha1":"abb87563ff4cd658f4436118c54f3f39c08f74a4","sha256":"8673d3fc3524eb9d8b4020b3da3109aa5ab5e569ed8d0074f2b72b8643f813ae","sha512":"70c9df3dd7b3e3d41a607627c6a2750f43673649dbd55c7a56606a7d3e67382cb2991f146f7ad2359cc5ff1615f9db484b54642917150351017d0fa4385c3d2f","ssdeep":"1536:jBY8bgGcdWUa2UTY6eryXHuLmbErF/G7D1dMI59H64likx/vocGAClVbGD3tFk7u:jBYCRTY6wjFetH64liC/vocGAcgD3t","tlshash":"65f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","size":161286,"data":"","first_seen":"2026-06-12T19:29:57.317434Z","last_seen":"2026-08-10T17:58:48.410425Z","times_seen":1102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/theme.config.ef94991b.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d279a2980268d2835cec593c23d286","sha1":"4374bf6da5cbdf8f025434137487bda68077cddf","sha256":"1679f19badc24dea0edab376edfb8583714645e18f705fb849037af6cf0b3ff8","sha512":"362ec1b73cebe1ad224a5b745c9ceebf2b86301deab27e35d6517d499499328b34c24d76a72e5b348d623e64a4d17bfa0ab08d2aa012f02af23c6a72df51817f","ssdeep":"1536:D2JREobVmtlIRM4Sb2mcTa2mnzyJog9CcHWHA:qEtlGu1Jnz45HT","tlshash":"c0b3bb7ae20c963a6177a8bfb46ce111d12f9c0c9b1d5fdef03e60a25710669c831de9","size":108079,"data":"","first_seen":"2026-06-12T19:29:57.324936Z","last_seen":"2026-08-10T17:58:48.222981Z","times_seen":1111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T02:09:46.25295Z","times_seen":237556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T02:10:29.731878Z","times_seen":91707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/34683.1781011881923.ffb73e4b.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8638a4a1d03e84802b6628538bdb8ab6","sha1":"3363f78ac45a6df0103483a4b2c5bf23e13ac5ca","sha256":"fc4609af11785458bbc690c9efe0ca9c652ee5cf7f2b42e5d3df98ca7d61a6b2","sha512":"46f12783ced7b2726d4912395925792671d106897cbedb29ff0ccd6cb17969960c9ce603206ff04163c4b8bed0f7209bc96fa18ba72cd75bde714a1145be559a","ssdeep":"384:BZ6POG/HnUen7QCMOp7Qe5O/b3reqRw9KXGOVSOMkgzIk:SPOG+s9KE","tlshash":"84c2a20ecb8cc6cabe211fac431d91a10250e8f7e58659dc95e6ad4ef93c50e364fa5c","size":28249,"data":"","first_seen":"2026-03-29T15:00:38.365713Z","last_seen":"2026-08-10T03:56:53.676388Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/18096.1781011881923.d6b266e6.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac5be2b7da8d47878caaae404942be95","sha1":"6aa091dd8a2872faaea3b570b8b05908ab45b6ef","sha256":"3a9ef24702acf2b152e28f8191edcd0be3dcd3cc5624b8030f1974c6cd5d1377","sha512":"ce8f012d6e2bd45a1547438af8171087eefae87e2f88cf9cfa0a9537cfc50b5439e774bfb1babe8409c01608b1faada843655e3284b86e0a579baeb1224cabb8","ssdeep":"384:8Zq7GHHnUen7Qt+OY3VUwrGzLD+/oT/9Kb427IK14qITyOYfOUgOsJz6X:V7GFY9KZ","tlshash":"72f2a20dcb8cc2ddaa211f9c431d90a00690e8f7e58699ec95f6ad4ef93c54e325fa5c","size":35618,"data":"","first_seen":"2026-01-10T05:58:33.940614Z","last_seen":"2026-08-10T03:56:53.615206Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/45540.1781011881923.25dfba7d.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7983a109fba451279f84fe7b75724983","sha1":"9487dc955240c6083cf3497e806dff89bec2061f","sha256":"80bb5c781336a9095ee3e8ae99d724f58a409c7f3c159bf0f320a9c948afe030","sha512":"ddf49f5cfb4721100ef951228391607209e248a8733d48229ff5196fd8a32fc3e759d90c1040dd591b1c0bd97ab83a1c8baaffa70fa96bbe2d556af2379478b0","ssdeep":"6144:1YD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:1YD4wFsYiSAKNH3TY5","tlshash":"e724f894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","size":229366,"data":"","first_seen":"2026-06-12T19:29:57.328205Z","last_seen":"2026-08-10T17:58:48.593862Z","times_seen":1100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/18936.1781011881923.c4835433.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef933198ad34a7c7161b09ebc222fa1a","sha1":"dfe195c35c6ec7eb06f6b74d0913dc2f1744644a","sha256":"72d500e30f9bf8e13269348c415470f37f645001ba9d85971caf568021f75b08","sha512":"6d5838601b1a70df73169b6a4ca0242d346d2e390f23345426526934da5f17381d789723790cca2db384ebba800ba6819ee4880e4299cafeb6a11e76a46f478f","ssdeep":"96:0RIRXZ6PHCVBNlteeU4D+XuNSvUPPVor0Wvhl8:0RIRXZ6PmjGeU4DovUPPur9m","tlshash":"59b1fd8cb281b07007af2674862f155bf23f9890a58df46ce1b1e5d07ef151a827be69","size":5093,"data":"","first_seen":"2026-07-01T01:07:30.802598Z","last_seen":"2026-08-10T03:56:53.618114Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/96039.1781011881923.63b98ab4.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dce5ce231d5aaf54edb8735f07f2b2f","sha1":"96bea019adcdc6ab245f3a9f83031f96bfef07bf","sha256":"8d7be78dcfef436963944a61905ec8457dc5919a2c436354f25073596cbeed2b","sha512":"a2015eda106c752e446fe33273652167cee95c1eb7741ad110131d4822bba08dc359bfd86cacf3188345e15fb71e350ac8c56e3949d9ca182cd1d1000471eb8d","ssdeep":"384:/Z6PQGjHnUen7QtlObS3OIkjoT/9KzLO1IY4pOmO3QOqyR:EPQG+9KXi","tlshash":"84b2910ecb4cc2dabe711fac421d90610250e8f7e58759ec95e6ad09f93c50e365fa6c","size":25055,"data":"","first_seen":"2026-01-10T05:58:33.943445Z","last_seen":"2026-08-10T03:56:53.627646Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/chunk-init-1656f0b4.1781011881923.32336986.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"149a9a32eef525724cd200e4dce7a032","sha1":"29b091925cae6d90319391653e40685f6e6c5735","sha256":"10fcb7c4e44a141964cb31c527462c6e56f78d95c956fb02c50c61fc576cefd2","sha512":"62d80403786c13019e86e1c6b991d73cf52ff5bd25d4eeaec34ca12125d677604a269fc6c56ef301f074c42798f8e7935df623d6a0a62559d70749e53082085f","ssdeep":"1536:z2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCif9:z2twqhOIK2nCLdyACifMur06/D","tlshash":"6dd3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","size":136038,"data":"","first_seen":"2026-06-12T19:29:57.333908Z","last_seen":"2026-08-10T17:58:48.425691Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/71823.1781011881923.47c7ad12.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"af8ceb14b1c853510a4d4e956663df6c","sha1":"4d4c26cf35a97605e575e1bd7ac4b089ac747a18","sha256":"bb095595646240890498994e6b5dc6c50c1a5a1df023c4e18ddb338881c1f2e0","sha512":"2ebff77b16164a6d2301ac57434b854aa58e961390c9d37db1bd491c6ddc38c09fabdd328331a6ecd449657d75b201d850c5a8480f479d482d3259423252d935","ssdeep":"3072:EWNlVUpxqMXPca/DIonTGJwB5Vkqfyp9L80isi:EWNlVUmMXPc0DIoTGJwBbkqC80it","tlshash":"7fa4a4f4c244d6edea04ce056e7d6f2d50723786f6ecabc046eef8465e82827245c4da","size":454349,"data":"","first_seen":"2026-07-05T14:43:49.729057Z","last_seen":"2026-08-10T03:56:53.672143Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/11248.1781011881923.e1f6c133.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0ea54ffece6554702ecd697d75be341","sha1":"255162d2085739d6bd522f44fbc8f92892b5e505","sha256":"45b3be7b4d4f736b262bb3c096dab61a44469faccd8539b411629cdd09545f39","sha512":"770ec2e41680a50b32e332029d6c22126935831c82fd756e1f1d5ce5af916987528943556fbf5bae1060f99b1c442a230956b213e3c14ab10d5a76b8d144361f","ssdeep":"6144:Hbpv8K84/78+971hTnvyUVpRwekcdNtTCuOCX9:9tbyUVpRwekcdNtTCuOCt","tlshash":"29747249e3407134cf96a146402b2435962e5aa6028da964f33df55f7ff9f883aed2f0","size":360120,"data":"","first_seen":"2026-07-05T14:43:49.730319Z","last_seen":"2026-08-10T03:56:53.676953Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/chunk-init-c0d76f48.1781011881923.0f397bb1.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"815f2acbd0918250f25d4f71409219b0","sha1":"d5778078df7eada22b3175f9182b8b22e828c433","sha256":"12a61f287da39190db34dff1de7188c3d8b76ffbd1c11290962db88fd5e2ab46","sha512":"5ba4adaf4b36b4a402c30c3aaa5be5f02e292391d79400d353a5ca6c61405cb40e5179858abddb1af6dad243899e420111e49004d01d339ce9de23d8f522c379","ssdeep":"1536:zG5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:iQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"5ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","size":161226,"data":"","first_seen":"2026-05-11T06:12:53.502908Z","last_seen":"2026-08-10T17:58:48.424501Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/35142.1781011881923.1d227afa.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8325235b613820a57b71043f360e5b36","sha1":"925ff977edf9892e868d43915f93d29e6feeb113","sha256":"0c505f39a463b09ece16c213b7ead75186dcdc26d25ee02dcba5a62cc0dff7c6","sha512":"efd16c9b7ff0f806890ae77542e8c0d4e954f8c797ff21b8dcde3f240e4940ca3c6d0fe75ee2fda35bf53ff5d0eb691fa7e38cfdfa82c0f231b0cd57458fbcf2","ssdeep":"6144:N0hEyLkbJDb7w/1FOAmBm7cene7Ancbt8sbyAkKJwoSlt5MMjmlHGwwzHUY9SroE:N0hEyLkFDb7w/1FOAmBm7cenaAncbt84","tlshash":"8a742b94b290b17883af86fb731a91a1d24d0e9460ccace4f27e6e407f15746b8775ec","size":340163,"data":"","first_seen":"2026-06-12T19:29:57.248751Z","last_seen":"2026-08-10T17:58:48.558753Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/chunk-svg.1781011881923.7ca9cdc1.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e885a50d7dc711be337a96fe33f0c2e","sha1":"8c767dd1bdcbf35f2577bd215ff6fe495cbd0f43","sha256":"603d14d58a247671742688b96c517d62e9c636443b960bc421af5352df4c01f7","sha512":"09289e06b0db84915693f0b78ab40149972b29693d0d6b1e66e4fbe9bddf00380f5f4e8e78961512d91a132226494572994ceade62d3d8a878126fdcdeb8fd95","ssdeep":"3072:/8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:/8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"c0a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","size":470763,"data":"","first_seen":"2026-06-12T19:29:57.244213Z","last_seen":"2026-08-10T17:58:48.519231Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/13575.1781011881923.cda1d494.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"65e5fffbcacf52710ad963a4aeede3be","sha1":"f9c16a3c86649aeacf18e736faacff0cf78192e7","sha256":"36f42498ee253b0d1d5e7ec8bdf406f05c4c91e72f64169b1ff67435d2069099","sha512":"96e8263c115ca75ff63f6ce70ba8ad5af370662f86c2f95a8960a5aa5a30ce4134fa01d7fbd1694ce37f111b69e3e418f0542a7ab1bae4cec570c8c3d8d08986","ssdeep":"1536:917BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:7jHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"23141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","size":194916,"data":"","first_seen":"2026-06-12T19:29:57.266361Z","last_seen":"2026-08-10T17:58:48.576135Z","times_seen":1099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/home.1781011881923.a94e73ca.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ad9af47a2c0c93f65e42ff84b45dad7","sha1":"eed3b4bd1191c75416f457ee41317595880f8635","sha256":"c9d64aef33c7a35945a5963b08b2bc3157f403dc91a5c9c9463c82a0d4075af6","sha512":"757a63f9b96bc8a36491424f8e0ae9fd6813983817ab2da87bb3455e18b5cb5f71d5e682919941194e4a588bea925c790888e4d27f8531ee03c777c1e2c92678","ssdeep":"3072:T5daS9tSIMcewi8uJBuoMfqFf2GMkvVJuhxffj7TEOiGRlc:T5ES9tSIMcewiLQqFRmzffjAGHc","tlshash":"93141880b5f0e275575fc2a7d7371025b2271786d0ccac60e1f66b187e2879ab236db8","size":203243,"data":"","first_seen":"2026-06-12T19:29:57.277471Z","last_seen":"2026-08-10T17:58:48.463887Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/m/index-399e2569.1781011881923.3af63572.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc20724c56846e36ec0c5a6d71bd9cd9","sha1":"00461d0ff2e4ae7c7c9696e710f673451770884f","sha256":"d29610263458856bc7eec5c5388fdc9ab1102e33dca30cef80e5e403ed2ba2d2","sha512":"59a8049736fe4614b348873da59fa744b059298f40bc0878231f88cb1fe1603ed7570f0cade60e43811e7c9d9f286fcb252d7ad7ebc0ed7819fcd83171e66bcb","ssdeep":"768:zWQ1rEMRCpgZWd7IUML4oXTzM+AOpULa+6lKtZ0NyRCrCA5FY9AfXyU5VH:yQ1rEMRCnd7INZAOOLabK/0NyRC/5FYS","tlshash":"43e2a5e23382bdacc54f9277f22a64ecd93fc185c31fd4fcd155be9478986059a81680","size":31418,"data":"","first_seen":"2026-07-01T01:07:30.795214Z","last_seen":"2026-08-10T03:56:53.632551Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/21954.1781011881923.57c97863.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"35aef3c03c45b75cc6c2851265c30f23","sha1":"54874afc1d2d6391142418c6c17d7639247b6c9b","sha256":"c7a0283f3d2fde40ce97fe3bb5e79621f9939000c50c3c781a4597c3242ebae2","sha512":"f74356629d65ff26f6928ad3183ba8e6e01848921202f9c14c5aef758ef72acdcabf523209e892df42d230d9c87cb47cda7bd106105ed8447718fc502b2d71db","ssdeep":"768:U/aSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:z81R6Ipyk6o","tlshash":"33132088fac2b06dd3eb7330857f505ae66a1dc0668c5434e260d6917e7198dc1fb9f8","size":41946,"data":"","first_seen":"2026-05-29T16:01:53.086335Z","last_seen":"2026-08-10T17:58:48.404311Z","times_seen":1073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/config/telegram.js?t=1786324415844","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","size":116886,"data":"","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-08-10T17:58:48.411243Z","times_seen":2478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/m/index-a3dad144.1781011881923.e6ab9b18.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d337aeb01788561f9ef1881849ddec70","sha1":"364f854098797338ffd05e3eef17d5e5c1790b21","sha256":"36552adf11a80e25925974f590f6fcc5ff2b1206cfa355b2087dd2f559fd60ee","sha512":"3f762deda433bfda5f1449ac84462236344a5a1223c0d8c16259af5a0b0f841e650ca2e2507673ef969913a84bc0e31bdf3dbe3ef1b85e9207228cfe1871ed0b","ssdeep":"6144:RQbhFOufhtRykiG5LHEY/TJ/Pm1lVs4h+Lg9uKYiwEqLD9q5f:OzBHRykiG5LHEY/T5u1lVs4h+Lg9uKYo","tlshash":"c9741be1f76ce1bd434e59ff7a22d094d01d2b41b0c86e49c25e5a44ba6f385eab04bc","size":353784,"data":"","first_seen":"2026-07-01T01:07:30.821451Z","last_seen":"2026-08-10T03:56:53.652045Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/40621.1781011881923.7917fc2c.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1524ffa63773d045b5ee1ef23ff2cb4","sha1":"99818e75bc302a7fb358b88c8daa91b9ecd039e5","sha256":"b5e9948cf2e7405662160113ffec7d4d382653a0b0ee74a4677113dd7f302699","sha512":"a1696d383e5596b95cb3fe65bf7b5958ba114c22bf38d5486798c80ccca1b3b0c63a0780602d20cb87f37dd1b707911f405568bfebac2a52e6a8ee0b1c0a5389","ssdeep":"","tlshash":"e9210f69f6a17274537b2aad463f2a8bb1774561e9edf098d450e6a02cb430c4432909","size":1195,"data":"","first_seen":"2026-07-01T01:07:30.832873Z","last_seen":"2026-08-10T03:56:53.581047Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/59490.1781011881923.42744005.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fc1f2655dbcc496f7d2b9b19cccb4ed","sha1":"d6d2131d90cc605cc12875c65ce702f3409f5594","sha256":"2c566c376d0f6cb48708c08f8110adaab1032b9f747a09b77f47357cbaf9318e","sha512":"d3d7ff6bea473171c80b7fb461989c413ea17a6cbcb4e5b3e40a5e4e208ef06935c122dccced2803c2916579faff0985b27ab2b6812286fbf4152d50712c939e","ssdeep":"6144:x7tBwgttXxyUtnBYHo0L8sDI9/KCytZLyfCBnmMzIroKj7:ttrtnBYHo0L8wI9/KCytZLyfCBnmMzIv","tlshash":"95643bd0f39171bc8b9791f2761b1039a06e0951208cace0f26dfa647f61558e97faf8","size":324667,"data":"","first_seen":"2026-07-01T01:07:30.839391Z","last_seen":"2026-08-10T03:56:53.641583Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/57530.1781011881923.ed8b1102.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ac960a22cf01fe7113867220980c6ce","sha1":"1ea53c8676b82c7098de92f76832286b08c890bb","sha256":"7a53c982a6e9f8b5e5cc351abed7944bd91d198d2ff8c61e14a34f07561d4924","sha512":"86a060d3d5ab5fd417a2f0a142ff8a715c1ef3b2df0c36ab775af5af13ce3630ad8c293a928d08bdcf037c0001e7d0d986410d82fcd6f9023ce01296c8425a8d","ssdeep":"12288:U5kuoy+RfKgD+Ng2xLU4nYdfX4fAaHu7zuitp7xagoXShH8Qzo:+Joy+RfKgD+Ng2xLU4nYdfX4YaHu7zut","tlshash":"85c41ad0b15072b9a55a82b5b73524b86027490950c99cb0f1f9af68bf1134bff6acfc","size":572859,"data":"","first_seen":"2026-07-01T01:07:30.823632Z","last_seen":"2026-08-10T03:56:53.662803Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/83876.1781011881923.7ce40e6b.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf84df30621edc23a82d05ff0b8a83a","sha1":"e727ad94ce5d5f5b8fabec0e0b5a966fb6e6594f","sha256":"c3b02d056ac034939c3ff75a10a2da23f5f05f96a36ca1e5cea2157ce0fe12be","sha512":"db2a2a00f51cc6f75cfcbb6d988df74403fae93255982a054710e5f87a2d8407f4f8f02fef8ef1a0e5edb289736296b2d11a3b77cad6c6d9089bb831cda45be5","ssdeep":"6144:0/rOTU2/xB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:0iUjytgPJPT3p2YpHrrL","tlshash":"2f442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f265f990be7555c927fbfc","size":262269,"data":"","first_seen":"2026-06-12T19:29:57.272405Z","last_seen":"2026-08-10T17:58:48.318569Z","times_seen":1092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/84222.1781011881923.122fede9.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac805aa0d7216d2651fb367a7bb3ad5","sha1":"b21c2154160b9f13c3c27b0ff5b1953e64daafca","sha256":"38c2af4a3a0acc2ea2533b07d3295df6c95cdde2dad5aa094c8f4a088c660374","sha512":"eef30692a0945e399910b75bf69bd8030622d2abf52d872891b58d539bc339db517fe138e8dd104f9860fde0ef1f13739e35735250fb36f0caad603e293c261c","ssdeep":"1536:QcK/KnqHB3vmxuHXvK5+Gruc7iSxTcgO1JwTl0sI5pQiVFFsdt+H6Xk:0B3vywXS5x7HYgODwTl0sgQi2tkkk","tlshash":"0c93e8c4b5f4f5f8279ec5a6973644b8b02527c5b1c8ace0d2e96e047f1ab52b0718bc","size":91573,"data":"","first_seen":"2026-07-01T01:07:30.843443Z","last_seen":"2026-08-10T03:56:53.58224Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/94465.1781011881923.b12f8bd6.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3adb31512285dc067bcd8be2241dbca1","sha1":"e6d76021d8c6f5ad30ab4e39885af94eae806356","sha256":"7299237ed790171980b6fb79464812c061337d4eee46e5e4f4eb8f2a9a5378f4","sha512":"31bac6a6e0457e3e6f208b112d01ddae69cec4801e995fa134e57ee40278ab34c0f6b0e97637e25c9e6b83cc6f787a5d25dc725497306cab7c0ffbe4d699171f","ssdeep":"384:NZqNCGnHnUen7QtjjFfVHKrjoT/9KHnV0OZ4tOZMo0HyR:ONCGKH9KMK","tlshash":"0bc2050ecb8cc2d9be751fac421d90a10750e8f6e58749dc95e6ad09f93c60e325fa6c","size":26851,"data":"","first_seen":"2026-01-10T05:58:33.742489Z","last_seen":"2026-08-10T03:56:53.624335Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/config/initGeetest4.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","size":14975,"data":"","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-08-10T17:58:48.514407Z","times_seen":2042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher16.process8//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher16.process8//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://x39p.top/config/telegram.js?t=1786324415844","line_number":139,"column_number":13},{"level":"warn","text":"Telegram initData 为空，可能原因：未通过 Telegram Bot 打开或 WebApp 未正确初始化","filename":"https://x39p.top/m/","line_number":160,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"x39p.top/js/chunk-common.1781011881923.b470d60e.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.888Z","timestamp":1786324415888,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/chunk-common.1781011881923.b470d60e.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-27606\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324417=Ptzdt+FUuUNHZKTtlKr9SiHGktL/FNC6JMSTgGOX59JwdiBMJedi69SsGhwJjdF5psDMb2A1yYaF8EUvxF6vE6rbfHtIwGqZXJnqACd5VcbRw9c2RGR4Ni1cQLqRHspedTtDRTdulNygSPBsYxB8wKLyo3uVv5HB6sLvnaxq7c8YpHm1WnBXJ1hcT6Ikg22V\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b7ab33f2b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161286,"size_decoded":36940,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08afa88982cffd7b96a2190cdafe1c42","sha1":"abb87563ff4cd658f4436118c54f3f39c08f74a4","sha256":"8673d3fc3524eb9d8b4020b3da3109aa5ab5e569ed8d0074f2b72b8643f813ae","sha512":"70c9df3dd7b3e3d41a607627c6a2750f43673649dbd55c7a56606a7d3e67382cb2991f146f7ad2359cc5ff1615f9db484b54642917150351017d0fa4385c3d2f","ssdeep":"1536:jBY8bgGcdWUa2UTY6eryXHuLmbErF/G7D1dMI59H64likx/vocGAClVbGD3tFk7u:jBYCRTY6wjFetH64liC/vocGAcgD3t","tlshash":"65f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","first_seen":"2026-06-12T19:29:57.317434Z","last_seen":"2026-08-10T17:58:48.410425Z","times_seen":1102,"resource_available":true,"data":null}},"time_used":1908,"timings":{"blocked":1058,"dns":0,"connect":0,"send":0,"wait":562,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/94465.1781011881923.b12f8bd6.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.759Z","timestamp":1786324425759,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/94465.1781011881923.b12f8bd6.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-68e3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93b9ec65e94\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26851,"size_decoded":4127,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26615), with no line terminators","md5":"3adb31512285dc067bcd8be2241dbca1","sha1":"e6d76021d8c6f5ad30ab4e39885af94eae806356","sha256":"7299237ed790171980b6fb79464812c061337d4eee46e5e4f4eb8f2a9a5378f4","sha512":"31bac6a6e0457e3e6f208b112d01ddae69cec4801e995fa134e57ee40278ab34c0f6b0e97637e25c9e6b83cc6f787a5d25dc725497306cab7c0ffbe4d699171f","ssdeep":"384:NZqNCGnHnUen7QtjjFfVHKrjoT/9KHnV0OZ4tOZMo0HyR:ONCGKH9KMK","tlshash":"0bc2050ecb8cc2d9be751fac421d90a10750e8f6e58749dc95e6ad09f93c60e325fa6c","first_seen":"2026-01-10T05:58:33.742489Z","last_seen":"2026-08-10T03:56:53.624335Z","times_seen":43,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":452,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_3340babe-d86d-4379-84e5-92efe2221568.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.332Z","timestamp":1786324427332,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_3340babe-d86d-4379-84e5-92efe2221568.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 69604\r\nConnection: keep-alive\r\netag: \"bf4ab4dd29a7e850bb98cc23f8aa469b\"\r\nLast-Modified: Sat, 06 Dec 2025 06:31:49 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144598\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZOzWCtie7IYVKb0E%2FtdQVOqvhrL5FZLmahnTukZmMVdkCMb5CTHHfF69mqxhDgU9VkcztkB56aNnherqbf0nRrrK1Su1zw6TEVTMhZtrOUxFkLqIru5vZ3xtIeLrdTZpkTRA5qn2v%2Bjy5gpsVgd6AI%3D\"}]}\r\nCF-RAY: a27d59ac2f27ddc5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bab243c55\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69604,"size_decoded":70755,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf4ab4dd29a7e850bb98cc23f8aa469b","sha1":"bf8a5db8a24980c822ff470dfd5c400c3a7c9318","sha256":"2755467e92e31efad621b2e575f92ee22de6de608fa8f2fddb67db94b677b946","sha512":"21ee32c3081cdce13a032da5e97d59e0a8abd54778a0be5efadea03e95f5a9876414faeb43046ddeeeb580bc384b67ef786ac80243a9b7d10b4695ed25a5fb03","ssdeep":"1536:kzZ24Ia5yjsOfOLgsOtyLr/i7deYSzcwqzpf1btvhp61:kzZDIa5yjDMkyLr/z/cwqzpdxpp61","tlshash":"f76302aa4a11d1c8af767507133a99aa77ec93ea60d612f04077944f162bddba1f0c0f","first_seen":"2026-04-24T23:10:16.876074Z","last_seen":"2026-08-10T17:58:48.366597Z","times_seen":977,"resource_available":false,"data":null}},"time_used":2845,"timings":{"blocked":2037,"dns":0,"connect":0,"send":0,"wait":438,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_9986c108-3fd7-4f35-9443-f78ce32e1660.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.395Z","timestamp":1786324427395,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_9986c108-3fd7-4f35-9443-f78ce32e1660.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15914\r\nConnection: keep-alive\r\netag: \"d455ee7db25284552aeaae58bb713429\"\r\nLast-Modified: Tue, 02 Dec 2025 14:11:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144602\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYgZDpn7OFLNaHxbkI8ROK9y188saGjVvchN0vum9ITV70rfl1EsPTWPCD%2BjMEIH4azNeOaOeBwLZ7NbFPfpAVzWnWIHjSd0z%2BuSmdpsJ9c7Nl0%2FdKY4x066irwMKsJZxJi2tcstw6O2PPsrvUP96Kk%3D\"}]}\r\nCF-RAY: a27d59ac3d1e4e53-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bbaac5ec1\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15914,"size_decoded":17067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d455ee7db25284552aeaae58bb713429","sha1":"22ea59f69e3ce33cb693d6ab7cde1f4f64bbe6b6","sha256":"20c558fe862164c2d2636a0b3aa259515f5175835dd461e5c16689338ba39413","sha512":"bc5147cbcf7ebb167eb2a75a56c140a33d81616f014f44c4976eff4525f665957e33e6d46f946d873016140af260808658915299a2004c2964be1543126a00b2","ssdeep":"384:POdbE1lYVo0UOKUjQgxN5voCgMMZUN3GcHHZUX3650gyyY44oDMWQ:P4+6+0URmQ+OMMZUNnnZUX6jyJPoD","tlshash":"8b62b051fa2b34398ea119feefcd1d195804ce608a3e6d6a6f3cd20d96b450ec46ed05","first_seen":"2026-04-24T23:10:16.815124Z","last_seen":"2026-08-10T17:58:48.45058Z","times_seen":1089,"resource_available":false,"data":null}},"time_used":6315,"timings":{"blocked":5947,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/img/enable.9ef47d58.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.404Z","timestamp":1786324427404,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /img/enable.9ef47d58.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-792\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nAge: 4329\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bbd753877\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1938,"size_decoded":2662,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b1d702ead4d924bae52a64441d6e36cf","sha1":"ba96b2b9b8925e6d3ced19ab50d41ec0b3def2a9","sha256":"9bf083510f61bd1b3fb1bd661842c2d5061c32bbab6054ac4d869871546bab4c","sha512":"b3c279be02b8da61ce59e1ca86695f3d4d45870d8ed3aa3d3deb76063a14ec481d7a1517ded054fbb105ee9d5802463bdf1a9ab18d39b4f48bbd154117277bc2","ssdeep":"","tlshash":"c44119c362d49d39911bd54497977a42aaab5c4ba23bf63478e30c7e67444d0dc00ece","first_seen":"2025-07-04T09:17:37.860529Z","last_seen":"2026-08-10T03:56:53.680905Z","times_seen":90,"resource_available":false,"data":null}},"time_used":7001,"timings":{"blocked":6662,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ebfde7c7-fdc6-4b58-9f46-2e709f79d7d7.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.370Z","timestamp":1786324427370,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ebfde7c7-fdc6-4b58-9f46-2e709f79d7d7.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52382\r\nConnection: keep-alive\r\netag: \"d82815d2e1685b08148f834895263ba3\"\r\nLast-Modified: Sat, 06 Dec 2025 06:31:00 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZ2bB16JQ3pJqkWEnQxtu7uuRrtktet%2BfFTsD8saaOD8AJCOV23pu9fKVhjV0octBkAtoOSec%2Fo6wyOz9zrclbJeCBn%2Bq1rvuXTC7AoNeIEJfOxsZZNdasqBnu3bIPhVisMhSUAsnuxnZdcX0TTA5JY%3D\"}]}\r\nCF-RAY: a27d59a34a6aa61c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb40f3868\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52382,"size_decoded":53535,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82815d2e1685b08148f834895263ba3","sha1":"77d1ecea682ed9c5c6be0f1644f2314eb3db64e2","sha256":"4dfee4506bce2de57a4d8d608edd295e0f8233b44b869f6d94481d17931a42d6","sha512":"9941cf4ea9abb6631c519ddd7067d21ac74afd06329b64581be00aa28b89e4ae7dd9750fcec2913df15a4f5fd7209a2049ae62bfec1c802d304a710105ed5d0c","ssdeep":"768:i2/E0Y/tLxLsxLHzZGHtzwzzxgHi5hUOjl7pE1+J1r5k+A8okW8winHfG1HL:xEHVNshHzIIxEuh7q4JxqXPin/G","tlshash":"a13301689c11db25d8805a2dd62fbfce984330e2231f0bca5b13d95e0bf1a852f44c9e","first_seen":"2026-04-24T23:10:16.886375Z","last_seen":"2026-08-10T17:58:48.574132Z","times_seen":952,"resource_available":false,"data":null}},"time_used":4667,"timings":{"blocked":3574,"dns":0,"connect":0,"send":0,"wait":1049,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/css/chunk-common.1781011881923.90261a1c.css","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.875Z","timestamp":1786324415875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /css/chunk-common.1781011881923.90261a1c.css HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:36 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-34c8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324416=wJN/YjCzHxoo2k1yl9XvHYteNyhust0JoM3QzzIPXC74oYImz+kZDV3rg/oGAkvuRagLG0MJZaySknEMi+fhIkT0CJeS+hnKVuW4XRmlZVPqty8HJobQG39Uf3bEzc9E+XGWLYbuf59RY8RKDBQTt+41VdO0BlkFS45g+vvGgj+F0fadT/Io8tljcV2HJf8U\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b78ed381a\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13512,"size_decoded":4720,"mime_type":"text/css","magic":"ASCII text, with very long lines (13512), with no line terminators","md5":"18db28ed82e6a8aa84b4ca311e8effc9","sha1":"19d1c3f13ce483b564653631f2bd6a340017a84b","sha256":"8d0fd3816e0960390ac6c9757e98a97c96597871468e74a8dcb81f170ad98303","sha512":"dbee6bb335fe964df137f44bbd9752844d5baeeec889ffb5c21c9979a8ce51018f81dadd4a66b2016a30874962c6e4fd2243325fa60958d45d06f34bdee72b87","ssdeep":"192:4dQK/X4cBY4mZGX1lsUTLA7gYER7/i//LN4hHSQZA2VxM2XwKjv0:M8oTGER7/i//LihHBrxP0","tlshash":"c952a631d634b53ce57be226f9d09adc6024d417e2730baeea643b3ac5ca4d215332c8","first_seen":"2026-06-12T19:29:57.231975Z","last_seen":"2026-08-10T17:58:48.454081Z","times_seen":1106,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":326,"send":0,"wait":361,"receive":0,"ssl":336},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/21954.1781011881923.57c97863.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:42.279Z","timestamp":1786324422279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/21954.1781011881923.57c97863.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:42 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-a3da\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324422=8dxcc8HeWQI+7CybPz1DpXyiZzA/cXoJNbMRPQKqmVTq0EdnC+OHlGYA6RqWFF0dNy0EdA/9hOhIiVGjkRVOX07yuE+xmvv2KlR8DZZcgP2LDF6kVNkL5cMMSZk6Si8vyYweajkpMKadx9n5rVr/00fJMcWAAjcQzs1b+B9JD3yZrWsSL0q0cYhO+Fru4oPB\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93b8fb85e87\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41946,"size_decoded":9458,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41946), with no line terminators","md5":"35aef3c03c45b75cc6c2851265c30f23","sha1":"54874afc1d2d6391142418c6c17d7639247b6c9b","sha256":"c7a0283f3d2fde40ce97fe3bb5e79621f9939000c50c3c781a4597c3242ebae2","sha512":"f74356629d65ff26f6928ad3183ba8e6e01848921202f9c14c5aef758ef72acdcabf523209e892df42d230d9c87cb47cda7bd106105ed8447718fc502b2d71db","ssdeep":"768:U/aSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:z81R6Ipyk6o","tlshash":"33132088fac2b06dd3eb7330857f505ae66a1dc0668c5434e260d6917e7198dc1fb9f8","first_seen":"2026-05-29T16:01:53.086335Z","last_seen":"2026-08-10T17:58:48.404311Z","times_seen":1073,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/common/usercard_coding.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.816Z","timestamp":1786324425816,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/common/usercard_coding.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:48 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-81b\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324428=DSyzgCHhjF4Bg4+7k5rJvoHFOnpQqlFDlme+jAyCtDmh3s22hqALMnpdwVfEDsoRwnJVA+/xQ7R9kAejmeCCMMeynpeUFkCdYda2AN5yGZRnqp4GGY7NdDfKivBo+ufcRNfj5EhEFrHx0XF2/cDI8EHdRugYloTaFcYshDZfxIKU3hKC7B0jklMJxKP96M9F\r\nAge: 143315\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93ba4fb5e9f\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2075,"size_decoded":2801,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"f89b273a74d4f7e6c848d057a57f858e","sha1":"1e46e1e4af5091eaf8e4436f9a79d7e8205e98d8","sha256":"2ea6c8e61558168c75907e851e61ab0883c2f39b7c1cc6264d65b7d4a7096c94","sha512":"4646539ea6f4d573480a2bc9b955d1dbf1cd04550af13efccf713266f6017d68bbd3bdc564c2b214e2294bc02490d6cb03beb6d30761b22c053a73b520ebab43","ssdeep":"","tlshash":"74414c2aa3c0b69a86c2941494375cadbdf0f3a7408b6723f063d470f28108515fee06","first_seen":"2025-11-01T17:14:36.255094Z","last_seen":"2026-08-10T03:56:53.665344Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2325,"timings":{"blocked":1980,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size750x590_1103f977-5f3c-414d-8305-ab6884e8769c.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.404Z","timestamp":1786324427404,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size750x590_1103f977-5f3c-414d-8305-ab6884e8769c.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43614\r\nConnection: keep-alive\r\netag: \"f0558545ac271256cf9e2e089c4b5d7b\"\r\nLast-Modified: Sun, 09 Nov 2025 14:30:08 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144603\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vusseOEgtHMDXogzH6mkkYvwfiWu2mxe7QqddSql0zITU6%2F5kP%2B7vitM3IYp0gsmDlAsYbqkdNT9K66s7SqElIXlz%2F7xHJllCOdJp6gaFDTQ%2FNAYjO2ufRZo1qLgNu6ad9NQXmSvR%2FMs%2BzPeqoJQd6w%3D\"}]}\r\nCF-RAY: a27d59ad09674bd7-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bbf67387c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43614,"size_decoded":44773,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0558545ac271256cf9e2e089c4b5d7b","sha1":"9594bc20fca63f0cfc8d31eeda8158bab7c54139","sha256":"cdd8fa33c321da25e96a0fff96453673d60d6c59c309aa7a2048e32b78f29e75","sha512":"e9a34139f7f091d9269ef1b87c11fa7900523ac4d286fddb7843e64afb1ea084064441c836ca8460185a800378cfe5153141613f0807d84e0687a1ef41f027b6","ssdeep":"768:c8urDr4gpwG3TMvUToCKvqwP9bDPCqO45+V0D63GQu54vlb:c8urDr4VGj9KPPh3+y2Dvvlb","tlshash":"b41302a684b210b1cc6db573dda010661bb07cb8ad6d5d1e0690e60fadbcdf12ca3e90","first_seen":"2026-04-24T23:10:16.765262Z","last_seen":"2026-08-10T17:58:48.524995Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":7556,"timings":{"blocked":6548,"dns":0,"connect":0,"send":0,"wait":976,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/css/18936.1781011881923.a936780f.css","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:42.283Z","timestamp":1786324422283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /css/18936.1781011881923.a936780f.css HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:42 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-47891\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324422=8dxcc8HeWQI+7CybPz1DpXyiZzA/cXoJNbMRPQKqmVTq0EdnC+OHlGYA6RqWFF0dNy0EdA/9hOhIiVGjkRVOX07yuE+xmvv2KlR8DZZcgP2LDF6kVNkL5cMMSZk6Si8vyYweajkpMKadx9n5rVr/00fJMcWAAjcQzs1b+B9JD3yZrWsSL0q0cYhO+Fru4oPB\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b8fb83828\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":293009,"size_decoded":58048,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0ed9f2cc667b3d3d14cecebfaa9c5f48","sha1":"a991ca7f55947e2d6f8c693dc5d2dd0e53c15007","sha256":"57e75ee71498280fb9671a58b6cc4d02ed50b063ced7ff960c41fd78ccf4ff53","sha512":"28304fae09b0108fc58fc3789dfe5a3dd52c96faf85ebef196a40fa2fd1c83b0919b7a03d15608fd9e0d8924ad6a82e34e8f477ee74976e3ebdf45a7d1d411f8","ssdeep":"6144:D+npTP+IVrfeIDb/tqgF0uibM4tgvVDQK+EMQxV5QjwzqIHoX1axr:DUeIySjkG","tlshash":"7b54d93b9152037ca51bdc605bacb2988265ed22d95213f9f2176f3a87cbfd713b1209","first_seen":"2026-07-01T01:07:30.811738Z","last_seen":"2026-08-10T03:56:53.663674Z","times_seen":18,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":315,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/logo/logo_h5.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.813Z","timestamp":1786324425813,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/logo/logo_h5.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69ccafb9-4754\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nAge: 143322\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc3b73880\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18260,"size_decoded":18447,"mime_type":"image/png","magic":"PNG image data, 428 x 80, 8-bit/color RGBA, non-interlaced","md5":"cc9379f39fc3038113c7b0ac8442fe0b","sha1":"4730b9b1bb882b0ce874b2e47755d8b089bbce00","sha256":"38992da61a8e7c718393289f328982acb2d121c7dd8d46dd8ec684283c196728","sha512":"4635f5d143bf9187682697da87f60c574f5158ba5a86dc04dfd90bcea523fba94253a265e876ed5068d117cc906a8ccf06414473057e840e95acb9151809ea4d","ssdeep":"384:k1nRJZ4TkMjHv6LvCAQxMjYoz5wn8uW7+yhni8Xw2KpCFoa3:CcDCL6ASCwnS7+yBXwFpna3","tlshash":"4182c00696822cc28637db967dab61cbca1b3ad25912c01d8fbd1b57b4149e48f48cde","first_seen":"2026-03-29T15:00:38.324151Z","last_seen":"2026-08-10T03:56:53.670498Z","times_seen":24,"resource_available":false,"data":null}},"time_used":10532,"timings":{"blocked":9855,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/common/usercard_transfer.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.817Z","timestamp":1786324425817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/common/usercard_transfer.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:48 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-aec\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324428=DSyzgCHhjF4Bg4+7k5rJvoHFOnpQqlFDlme+jAyCtDmh3s22hqALMnpdwVfEDsoRwnJVA+/xQ7R9kAejmeCCMMeynpeUFkCdYda2AN5yGZRnqp4GGY7NdDfKivBo+ufcRNfj5EhEFrHx0XF2/cDI8EHdRugYloTaFcYshDZfxIKU3hKC7B0jklMJxKP96M9F\r\nAge: 143315\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba564384b\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2796,"size_decoded":3527,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fc28a7d4da8153d16d27c7276859121e","sha1":"5faf7d4211a8223d87728c647093046d660abdf3","sha256":"aa5b21c4a279e6615438b372f9f8e689419bc7f87d1f02acb9d10361b3c6714b","sha512":"1a2d44286eb468a705297bab00cc18f62b03e73fdb320ef15fa4dd08c9bd28697c7eba5a81d83caf280605c61dd4c73145421eda18b3dbbfe3d875465d8e3654","ssdeep":"","tlshash":"ba514b827312466597df33a177cf2728bbf621944699b82371d4a2094bf157b80d509f","first_seen":"2025-11-01T17:14:36.276405Z","last_seen":"2026-08-10T03:56:53.64894Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2436,"timings":{"blocked":2080,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ca5ef219-cb88-4c5a-b68c-c85984b21465.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.329Z","timestamp":1786324427329,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ca5ef219-cb88-4c5a-b68c-c85984b21465.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 83944\r\nConnection: keep-alive\r\netag: \"cd3cf96ac48355aa8a68b4dd114b3511\"\r\nLast-Modified: Sat, 06 Dec 2025 06:32:14 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144599\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMcYWAN2j2OZtlwNQ%2FhvJ2efBapKXs53%2Bwf0oVaI7ViJw4saN3Sk50tKu0CaYk93bOewNyDjt%2Fh96Mj7WXEPu1OkqZnaypJVWEW424mVwUlLNDY5c2Eor%2Beex7yVKM626FklKn%2FE2ZVjYYr5HW6T85k%3D\"}]}\r\nCF-RAY: a27d59a32af206f0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93ba9cc5ea5\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83944,"size_decoded":85101,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd3cf96ac48355aa8a68b4dd114b3511","sha1":"344310d10f86fbdbc05ee7080d3ca849573ac9ef","sha256":"e9d91b84873b60fda60b6113151bcb7abb1225aa67f1d823343f611eac3c92af","sha512":"987cad3ea6ba2be77a3fd0904132cb11c1945e1e5556cdec550708d2e22c279398f951312a4029b369980af4ab0b30f4fd72ad5d38740800d6dd48938d323016","ssdeep":"1536:Ka0Pq9/ipy6cNgUraO4ysYwAcTa6bfr9BHltyI4VGeglGZVClKy:Ka0Pq9/hzvhsTAp6bhBH7QLZolKy","tlshash":"2a83128e457a2ceec4bf7de9267cf94f60ca5e31557b1add437826c5208b80cd227292","first_seen":"2026-04-24T23:10:16.791296Z","last_seen":"2026-08-10T17:58:48.365715Z","times_seen":993,"resource_available":false,"data":null}},"time_used":2190,"timings":{"blocked":1674,"dns":0,"connect":0,"send":0,"wait":380,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_07a2d840-d1e1-4217-9d3b-badf80b88abd.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.340Z","timestamp":1786324427340,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_07a2d840-d1e1-4217-9d3b-badf80b88abd.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 77072\r\nConnection: keep-alive\r\netag: \"81934df1c48f153ec91149ba3c3beb37\"\r\nLast-Modified: Sat, 06 Dec 2025 06:20:21 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWbdqRu2XxHDmoWzKEQXlbmolO8xjdVtYz2okWA31BXaJUPOzyF0aVKYagQ%2FEF2u1NwJmb8zMmqV%2Bt2MseSFW0e0KxMLkwjjGuaw7NV5tuDRriRUMNFV%2BratybTWX%2B4KqB6ue1NID91PdSNdBiP0jpY%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144598\r\ncf-cache-status: HIT\r\nCF-RAY: a27d59abb9dd856a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bab64385a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77072,"size_decoded":78227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81934df1c48f153ec91149ba3c3beb37","sha1":"263dec3db6f316ad859fae46f18adc5cbb9e5c61","sha256":"9393129dc2d2eb90aa6b0e3cae170e77eccc785d4fca575804e1d25a2bee1383","sha512":"9d322a35877bc71c33fad174b47d6377f214fba0f11bc6a6180c5032765a9f4332354a4e6192a33049ab7a20a79ef58804de08d54098f64d8511c08b50e2b6ca","ssdeep":"1536:vow5Jv2vmGSpZk1IdIwZojJkcFgxPAifiE3TcBUPpCoS+LsAEZhO96:vowCOGYZk1w7q+PaE3T8uS+Lr2hO96","tlshash":"a573127b5c2c0bb32fc676c6e2e9b5c82cc817b1478556cf5b7958af95a4311232c02a","first_seen":"2026-04-24T23:10:16.861629Z","last_seen":"2026-08-10T17:58:48.266264Z","times_seen":969,"resource_available":false,"data":null}},"time_used":2450,"timings":{"blocked":2083,"dns":0,"connect":0,"send":0,"wait":344,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x422_936e6f39-c72d-42ec-ab51-2bd5a806c902.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.389Z","timestamp":1786324427389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x422_936e6f39-c72d-42ec-ab51-2bd5a806c902.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15760\r\nConnection: keep-alive\r\netag: \"dbd5bbca2ac98b7327bec49ec9e17a87\"\r\nLast-Modified: Tue, 02 Dec 2025 14:11:52 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144602\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpaXrHc5qcXLzzRSZMaMIN5ivOxvkkAKvG9TGCaJy%2F90dtCteGxOlFV6NxSWMJc8Gl3aJhEOG6n2vLIkLvD2Y%2BVPbKzvNpjSjsT%2Bv%2FYQ2K0G4CLqgQro1fXSjN%2FoQPtTe37%2FZb%2Bvzztn6BKIUJvD3Js%3D\"}]}\r\nCF-RAY: a27d59ab0f6c08e9-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bb93c5ebf\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15760,"size_decoded":16921,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dbd5bbca2ac98b7327bec49ec9e17a87","sha1":"7ad876b6c3f6922c1cff9db452948604cfc691cf","sha256":"12e3a0e3de790b5f640b48e4fede8f5d1c881e23b4d710d1971282362277eee3","sha512":"c96a4f88a602c4bd5d8ccc3a0ae44ca9d85d5a75175b8b8c219c527d2ed1338b8d65e9bc52e9c1e844f34aa76e6d0d1d81c4eea6b28592de710a4f4922b11701","ssdeep":"384:z25GXKCP2DdvL8cWHImH7LKcCZzFwu/6unzgL4X9:S55Ce/xsln46un88","tlshash":"f462d0149f5537278cc4787941315fbf7f601c42b208e45296ffa86bba2c2957a146f3","first_seen":"2026-04-24T23:10:16.813188Z","last_seen":"2026-08-10T17:58:48.575137Z","times_seen":1061,"resource_available":false,"data":null}},"time_used":5948,"timings":{"blocked":5580,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b4c9aa45-cb3f-4828-9926-119d48e2569f.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.367Z","timestamp":1786324427367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b4c9aa45-cb3f-4828-9926-119d48e2569f.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1086\r\nConnection: keep-alive\r\netag: \"bf3d921165a3f71e2df3355fa367995b\"\r\nLast-Modified: Tue, 02 Dec 2025 14:06:49 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRtw4cdCjR0WoWIYORbg4VAV%2FM418zsSSjxCTWgQzUCr0MMviv6DaTtusHFCanzGQ5840ZgVUH4ikkFy6sCuxsJ9Y5jmOIfiFIg06V%2BS1gxQ0jBQWe6ru4y5z%2BJKxeUx%2FzTLZ66UBBKsc1skMrl5IxU%3D\"}]}\r\nCF-RAY: a285f991fb8008bc-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nAge: 54163\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bb08d5eb0\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1086,"size_decoded":2247,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3d921165a3f71e2df3355fa367995b","sha1":"3b7cdf04a4ca59b14bc51326218ea1cad70f8f8d","sha256":"4f4109d5d1dbf5144085bb9671dad452cc50bc01fac3bb74eb706042338b0ff9","sha512":"d7d910ee314b0b7dde201bb3c2cdd01e242481487960067c4fa5686a896080436c3e6529f3e0db49628013fa1801562fd206127f840c96ffdc161315cdf82371","ssdeep":"","tlshash":"5811b6ae8ff7e268aca3f51564f5d4a2464d3a52088813c0045611f9860877a9fce9dc","first_seen":"2026-05-02T01:47:15.989776Z","last_seen":"2026-08-10T03:56:53.668197Z","times_seen":23,"resource_available":false,"data":null}},"time_used":3701,"timings":{"blocked":3360,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/config/gd.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.874Z","timestamp":1786324415874,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /config/gd.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:36 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4420\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324416=wJN/YjCzHxoo2k1yl9XvHYteNyhust0JoM3QzzIPXC74oYImz+kZDV3rg/oGAkvuRagLG0MJZaySknEMi+fhIkT0CJeS+hnKVuW4XRmlZVPqty8HJobQG39Uf3bEzc9E+XGWLYbuf59RY8RKDBQTt+41VdO0BlkFS45g+vvGgj+F0fadT/Io8tljcV2HJf8U\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b78f13bf0\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17440,"size_decoded":5524,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-08-10T17:58:48.244953Z","times_seen":1245,"resource_available":true,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":328,"send":0,"wait":372,"receive":0,"ssl":339},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/assets/logo/favicon.ico","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:41.016Z","timestamp":1786324421016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:42 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 585615\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nETag: \"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324422=8dxcc8HeWQI+7CybPz1DpXyiZzA/cXoJNbMRPQKqmVTq0EdnC+OHlGYA6RqWFF0dNy0EdA/9hOhIiVGjkRVOX07yuE+xmvv2KlR8DZZcgP2LDF6kVNkL5cMMSZk6Si8vyYweajkpMKadx9n5rVr/00fJMcWAAjcQzs1b+B9JD3yZrWsSL0q0cYhO+Fru4oPB\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b8ef53c38\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":586282,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-08-10T17:58:48.267063Z","times_seen":1509,"resource_available":false,"data":null}},"time_used":2494,"timings":{"blocked":1160,"dns":0,"connect":0,"send":0,"wait":355,"receive":979,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/5d23d9a4-8f94-4b81-a8d1-0ac91c0587f6.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.997Z","timestamp":1786324426997,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/5d23d9a4-8f94-4b81-a8d1-0ac91c0587f6.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\netag: W/\"d552e702a70c347ec7d5e4a14aaa9190\"\r\nLast-Modified: Wed, 28 Aug 2024 17:47:36 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143321\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bh%2F9QPkgApdWh10khKyYSxHV9ApnJKNKlgEBYxzcqeQCsbZYbkN4m12tZ0R5vjM4llEVVeq8Wgbmt3i4U6sePcph7gg76dsc68CaOzScPLRcIumSdSgDrU3ntzOUHWzZjFC%2BGP%2BYing%2FTg5G4DLOCCA%3D\"}]}\r\nCF-RAY: a27d78fd1d788106-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bc16e5eca\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13307,"size_decoded":14524,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"d552e702a70c347ec7d5e4a14aaa9190","sha1":"06fff1c2073d4f42951ac0ed81419770189ae9e7","sha256":"7f18c8eb73d8d413d13ed80f08020a5c201dc47b8e8ddad587e175cc36e090ec","sha512":"4be710fca6d8c879aed615849eecd90a498e53d8cebe10ae7644c186c275a03611337642b7923252f123a3287e41cd54813082b0870cedc4622eb0f7ee39396c","ssdeep":"384:yZXSYKBI1PM7TncmeAdj+i8aK+yBE1bF200a2+:TBI1EPkA5+i8aPyBE1V","tlshash":"9552b0af83219fbbf475ea82702ba3b92165119cd4b75fc30c8e57514aa847fbe01193","first_seen":"2025-11-01T17:14:36.307053Z","last_seen":"2026-08-10T03:56:53.66114Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8445,"timings":{"blocked":8084,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_04beb05f-bdcc-4bf4-a35f-b560e45e45b0.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.379Z","timestamp":1786324427379,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_04beb05f-bdcc-4bf4-a35f-b560e45e45b0.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 73676\r\nConnection: keep-alive\r\netag: \"41e79b39dc26bbaf7f40e04fea71c634\"\r\nLast-Modified: Wed, 10 Dec 2025 11:53:06 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrTmifVKHyeKfcJDVHKmivLNQqokmqAEC8z7iSuGK7vnsiQL%2Fa04DirWryhy1cBdK0zFMENKHI8%2Bk874gj%2F%2FLxL0IFmKbiLMdbU%2BI6PoCKcsFZlviah%2Fpo8Vlwg5elBg3OhJucaXMhW8M4KB5upj1VA%3D\"}]}\r\nCF-RAY: a27d59a878370701-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb5ae386c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73676,"size_decoded":74835,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41e79b39dc26bbaf7f40e04fea71c634","sha1":"477586286821f2dab7b013e04ff4921b7719f121","sha256":"a6091cb61f7968a02345dfef2905c4f62f401345fb3fd5d2bdf5306416b50d90","sha512":"5fd2068c26d3d5e6995cbe847edecc9145c7abcdfee76ed94e1db9b97da7abb651e8dc990d06f05d2bc9b04cfbaa5c9cb41fa32da479554d64e47eb91e01fe56","ssdeep":"1536:Dsmee6MaqRp352dNFckeb6yTb6Kpmd4xIccPip688s23Z72HuJjJrl:gEaqRfoeb6yTb6KsdiIccuE3Rfrl","tlshash":"c7730143ccff7298de2c687e0d5e0caa191442443f8c0ab3e6e5615571697af36b32b8","first_seen":"2026-04-24T23:10:16.752534Z","last_seen":"2026-08-10T17:58:48.449811Z","times_seen":976,"resource_available":false,"data":null}},"time_used":5108,"timings":{"blocked":4667,"dns":0,"connect":0,"send":0,"wait":371,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bbac9ff6-d09b-48f7-9e60-77639d6ba1ec.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.358Z","timestamp":1786324427358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bbac9ff6-d09b-48f7-9e60-77639d6ba1ec.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10174\r\nConnection: keep-alive\r\netag: \"786d2731ac4145dbdb474c2ef236dbe0\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:48 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144599\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvB8%2FV%2BSWh9bheV5yIj8kABKRaYAp5sMheW03qZZeB%2ByB5Xo5XZxbRQwr7qfrl53vuAKVYdyimQKg1cVsfof78%2BYa%2BnMifGeYsq%2B75kVN0aODHiFJw0VAUB17w%2BMCvD5CqQ53U8aNiEpbMOgd0Ceocc%3D\"}]}\r\nCF-RAY: a27d59a98ae70489-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bae753c57\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10174,"size_decoded":11335,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"786d2731ac4145dbdb474c2ef236dbe0","sha1":"e25bf96d16a7d8c9ba8cb8977c5223823b576354","sha256":"a5582288a05ad90cab5e153a954cc868cbf69672d5811c24564ed2292638b772","sha512":"aab8876381867a1eca57b4f3b8c18c5244840ce1283a71b3387e80ea096b2c956dd8cd3461861cf6be2d063f980a1c59495aa8d3c47f1579017239ac07ecd1c3","ssdeep":"192:Oz8jXYXj6SZFy5siAvpSdg/2OwNHKThGZ0G9g1/5gqWLbG0X6YqIsyT:nXbMFy5siMSdNQh3oSe6Ye","tlshash":"1c22afa5b4ff3f61484df1f1f78ad342559a697432be475d79b5467218082988c303f2","first_seen":"2026-04-24T23:10:16.833619Z","last_seen":"2026-08-10T17:58:48.412881Z","times_seen":954,"resource_available":false,"data":null}},"time_used":3238,"timings":{"blocked":2798,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202502/_webp_size328x442_27f7b303-88a3-4b2c-aaf9-2bc0106b5d62.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.361Z","timestamp":1786324427361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202502/_webp_size328x442_27f7b303-88a3-4b2c-aaf9-2bc0106b5d62.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 22168\r\nConnection: keep-alive\r\netag: \"04f8fffa2b2bc694cfc7174078dc54f1\"\r\nLast-Modified: Tue, 02 Dec 2025 14:17:04 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144623\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyWjPXYrUWfRagrZ2AF3NVQqOrvphOeWPPw5ynY2EjzC3PepzOzc8rOS8p%2Fn4xdZqcqzWRieJMQho%2BCJ%2BTioZDFn20d3kPtEpfRHRxBPHlRx0Lrwvy9lmPkCJQEexvgZ1hAC1TsLiAnse1XjACRGNoc%3D\"}]}\r\nCF-RAY: a27d5915da3adbc4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93baf0f5ead\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22168,"size_decoded":23321,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04f8fffa2b2bc694cfc7174078dc54f1","sha1":"ebfaea4761ce72105a95c0241ca87bf998a81338","sha256":"9900ec116e5fa903d64f9cfc38a6855fbc19c42bbad46c2690e2a50920abf030","sha512":"599c14c0dd6eabf0aacdf250e366075584c9086dfe71ab9f4cab55301c2a16efecba29d8dd9b14be7472766ebe2618de9559ca7a20fe3550e9ae564fe12aed05","ssdeep":"384:+Jq0Vf96zLIvbNpNUU2tDeOouLf5GslLXGdB3Rk1SV14Hdyd/2U3lMezZD:+Jq9ENuyOp5G0WdlRkQB12k","tlshash":"d1a2d14f988244a9ddeca9d6e2cf7a5c44f39cc012bea4668eb455c8b04f5163ef1059","first_seen":"2026-04-24T23:10:16.784958Z","last_seen":"2026-08-10T17:58:48.226356Z","times_seen":959,"resource_available":false,"data":null}},"time_used":3360,"timings":{"blocked":2978,"dns":0,"connect":0,"send":0,"wait":368,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_6cc2215d-c6af-434c-af5d-2867d8d4a43c.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.385Z","timestamp":1786324427385,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_6cc2215d-c6af-434c-af5d-2867d8d4a43c.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1136\r\nConnection: keep-alive\r\netag: \"cfa94bca41e7f65cee3187aadcbe633b\"\r\nLast-Modified: Tue, 02 Dec 2025 14:06:56 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNgaNrGtaQM4fmwCEgl5VnVXOhbyX755os0aZvKsYEg65rKMKoEGErRAtb5b2Lwfnbx1fnHz7PprHZa6l8PLK%2BMsHG7JMIWBN6IfqfL%2B3lc%2BmHoN0z4%2F%2BIhu4m5F%2FNnPnc46ON%2B3NkeZgbzN%2BFyoEFg%3D\"}]}\r\nCF-RAY: a285f994783bdd65-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nAge: 54165\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bb7e65ebe\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":2305,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cfa94bca41e7f65cee3187aadcbe633b","sha1":"3a5b10f33c6d44c857b3eefa00593c567ee5238d","sha256":"96c71b3928c6d26386a6ab232aa6a5973746db6f4f491ba70a8137732e42105a","sha512":"cdc9e8151c84bf7033ae69e53f4ba33df16f528d8838fa7fe500bdebc7dbd9d8d612803dd39a39a2a0fd3d816252f12ff6d411268ad4276a7db1610d326dd33c","ssdeep":"","tlshash":"d721a79d1ad1603ef5b3f978b998a4a13d5c7649a00942c3657a88b4a829133e05e5ac","first_seen":"2026-05-02T01:47:16.024593Z","last_seen":"2026-08-10T03:56:53.630402Z","times_seen":23,"resource_available":false,"data":null}},"time_used":5579,"timings":{"blocked":5238,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_fc0e1468-bc71-4d42-9849-b6735b50978a.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.387Z","timestamp":1786324427387,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_fc0e1468-bc71-4d42-9849-b6735b50978a.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11120\r\nConnection: keep-alive\r\netag: \"c2103cd78445d5d98b8a8a38dee95854\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:18 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSFiTI0OoyDQIqH%2B8sYj3qv1rU9dXd2w1B7VTh20afZuxMtQZruS6oL30af7XKa7A4JQHjp6%2BoJd9Gpzten3bNm6w6RTcekTeZdlnQvihUFIKxvl7vxi0j7uleC5MzMe2rgkjPoD16ooETo1%2Fdz9Ajk%3D\"}]}\r\nCF-RAY: a27d59ab3dc5ddc9-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bb82d3c67\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11120,"size_decoded":12273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2103cd78445d5d98b8a8a38dee95854","sha1":"77e8b55343bf4092e6a298d564b828b7167d73a7","sha256":"23f7d437c49f455c0bbe3d040982bd6cf8d25411106c3eaa156cc3e4760c3c1b","sha512":"c1f7b1f8f0187dd22795297f21febc867932be6f47b9d033e4df6dbe5f456cf4f7b97d88fff1320945d581b13e4e23cd66330b4432f6f506e504b9dcc01776fa","ssdeep":"192:UFGWMz7rqmua13y84zY36YC0JwSCH2XOc1wK3/RZ/dHGKFdVr5suOWQgcSQBO4mZ:Qmus3ytKC236rKJr53IW4mZ","tlshash":"1f32afcec9dc3b159c35837d36252988ea4909130b3762d2752a64c646eee8a3196bb3","first_seen":"2026-04-24T23:10:16.81812Z","last_seen":"2026-08-10T17:58:48.582736Z","times_seen":1040,"resource_available":false,"data":null}},"time_used":5707,"timings":{"blocked":5312,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/sport-resource/locales/zh-CN.json","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:44.758Z","timestamp":1786324424758,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /sport-resource/locales/zh-CN.json HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:45 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cu0%2FiZssh9ZG2aPF6rsbK%2FvtHvOoJ1NHo%2BRlqCO51BTQ4RgS5YbDlAURdtIEM0jw%2FxJJPpNAL3LqRfjHWU0SbUzH8WYkCU2qfCFjbZx74%2BUV%2Fx%2FaiPgMAmXj4HFuTgYf6lR5ETkJdZSc9RcPtwMXAi6jGOVd%2BT4Zi4%3D\"}]}\r\nLast-Modified: Mon, 18 May 2026 13:48:07 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: W/\"f6602a16d7060772d7c90430e5362a79\"\r\nContent-Encoding: gzip\r\nCF-RAY: a28b23c7ff225df3-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324425=hIUHXVwWhkwfe4KJ8+ag7MlzledQEjuyOFw0S8GJs8rkFiJaM44MKSvvYUtPFYXYKDeu7M5plmF5aC/ACZaP2cOejYk98utIkL4xKpKP1SDG/2alQYVGL3A3ZgxYZdqmQPU2FtycrwiswFUlepWhvOKI1Y+/fZZ5+wFkbmU35J7dT13WkE6GKd/Ief4ukc30\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b9913382e\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43279,"size_decoded":12147,"mime_type":"application/json","magic":"JSON text data","md5":"2b5ebb6952643e0a32efa7dcf1f8e560","sha1":"553470018d302b5c081c73fac745bd7fa9c75b73","sha256":"d78be67f77a0ae18ad650e4d53d0e4cf8abcca8a031da1f7efe519437c4c5a74","sha512":"d0eeb881fc45544023f55aa46bbeaaae0593590caa154630e5d3cf1b6ff13977f68d9bbb51b0ed8e1fe0fe86a7b92b33a378849a435b9c8f4a70fe3e43535361","ssdeep":"768:urNKJqZbUQMj0MO8Lp88wIdFvPYPPpoAqm2:rD8jrpoAqm2","tlshash":"c21354a8a16446a780e62957387f61910064ff6f00cb7506e77bebed418c72faf3650d","first_seen":"2026-05-23T03:34:47.355695Z","last_seen":"2026-08-10T03:56:53.584529Z","times_seen":40,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/sponsor/sponsor.json?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.801Z","timestamp":1786324425801,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor.json?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/json\r\nContent-Length: 646\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nETag: \"68dbcacf-286\"\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba00b3837\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":1261,"mime_type":"application/json","magic":"JSON text data","md5":"10d2161de8cf99c474812f4c43645a26","sha1":"71884ef7281cdcb5084088f16d4550ce8790e634","sha256":"bb02fd7438bb49dd4decb6f76a71f11e93355332fd9f965d6f9f13bb8175aeca","sha512":"bf0fd1232309fcc5582d5c42644e1c7b4b8d235b1066e988ff55e0dd94a956f89742401f00c2d904359041c8e0c2bac8e9316252fab60db5eb0a3b4c935172f0","ssdeep":"","tlshash":"d8f0f44ad8b25b93211fb57c58cd050470294a8f0eccaac4baac987c4f598ddd1e839e","first_seen":"2023-06-16T04:51:50Z","last_seen":"2026-08-10T17:58:48.246933Z","times_seen":2852,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":751,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_c0a34e2a-97fa-40dc-8123-594806696886.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.356Z","timestamp":1786324427356,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_c0a34e2a-97fa-40dc-8123-594806696886.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13338\r\nConnection: keep-alive\r\netag: \"c9888ec9eb68e23af8c466de36aa1374\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:14 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144599\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHjKDd%2FSJWggkElHhqXIXiF7YdGJDoylWHw9H8NVKuO66GVR0ny77I%2Br29OJ0FNgWoVUaai%2FHHjlVGPEn6pHn2tJZCHMMkpk2ylRzGLBnS447Gq%2F%2FmKKWmnXznIwEcnaCWx5tf0lePr78wAeoV0kGHQ%3D\"}]}\r\nCF-RAY: a27d59a9f983dd9a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bae4c3860\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13338,"size_decoded":14495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9888ec9eb68e23af8c466de36aa1374","sha1":"9f390e12dc110576b1f87b5705379cce7c8d821c","sha256":"8ff81de4e5b37505789b23808f901d64ab7d3dd91a813438ff0c762971c445c2","sha512":"6234782d00cacdac98ef61238100e1e4b6d3a44b462264cddf34237f74cc589576644b8b1a8e1e309c0acf400d17b899dad9717654f487f86a28224d4e2744e6","ssdeep":"384:sfQdwsWMYKGas1GU33KVwYl/0VPxDNUrIJeYcsFAl33l8Ta0V+t:vdTqGU3aJB0VPx0IJ4sFApWT5q","tlshash":"f052ae4ef297816890419138d0d51cb6583550ee8ffb29ad2e78e7c9630173ee4abb3d","first_seen":"2026-04-24T23:10:16.827229Z","last_seen":"2026-08-10T17:58:48.566228Z","times_seen":944,"resource_available":false,"data":null}},"time_used":3135,"timings":{"blocked":2792,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0fa85f10-2205-44f2-82c2-66bd141c7d57.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.394Z","timestamp":1786324427394,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0fa85f10-2205-44f2-82c2-66bd141c7d57.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10174\r\nConnection: keep-alive\r\netag: \"7ac42d17bfd5a06e8fc6a329b7018939\"\r\nLast-Modified: Tue, 02 Dec 2025 15:07:04 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144603\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3dC46yP4U%2Bp4HB5mNOcAuqjq2vCluXVso4CPXAcJoyxVhUrT8odTNGwgJ1SswhhwG9ZYVd%2BOkbykGn%2FUBhNGalM220LX7V%2FZQj%2BsUK%2BskcsKhqIga%2B7salCNxUdgeZlcrQX3eLDPXn6Voi%2F2qJ%2FmEU%3D\"}]}\r\nCF-RAY: a27d59a58b0e09fc-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bb9bb3c69\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10174,"size_decoded":11339,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ac42d17bfd5a06e8fc6a329b7018939","sha1":"37f26ed9d40765d2f0a2436038a6c772d654e316","sha256":"23d5a3a14c318b6982e98a0e9f7ae7eb6f3658fe842beef7f26850121f84279c","sha512":"8c49c05d03fb49bc2980047e98e2d1759192aedc89ff040050b1c8e007b16007f71bff0f17eaa3584bef6c0b0db5a52b68009463bd3dd2aa43cacd757ad7367b","ssdeep":"192:O5IkarrboesyPUh4c/gp+sIR6RxWiH21vZgiClgKV16Lq1eM9h0K+B5pZrgVWPWb:5k8rboesiUec4p+sIAYkgK7eQ09B5pZz","tlshash":"3c22bfd259d648a4e1d3d63229678a89d3bf3d0f0309b6d4acec74cf9846dbdd4d0a41","first_seen":"2026-04-24T23:10:16.755505Z","last_seen":"2026-08-10T17:58:48.510591Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":6103,"timings":{"blocked":5706,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_b1b5acd8-3851-4b06-8e10-d549f7f09d1b.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.396Z","timestamp":1786324427396,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_b1b5acd8-3851-4b06-8e10-d549f7f09d1b.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15438\r\nConnection: keep-alive\r\netag: \"a1349a63a048224ad8e87814e87bb73e\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:01 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144620\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCpdAtta4AFZLiyvbCcJ2h23GQqaU3w9c8GH5wBeBh3b23ZK3075EsLIyfiqUncnrPra1cBGhqWdjt4afeQFbrNdBHIVBikTH4vopsgHHI8lVbt6HjFQQG1mAAH9jN1p2cE4Zm1c9k7ADhbKjXpyGjY%3D\"}]}\r\nCF-RAY: a27d593a69b904f5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bbac93871\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15438,"size_decoded":16585,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1349a63a048224ad8e87814e87bb73e","sha1":"0e04bbeddf14327f501a7d2c6df6e05795879d8e","sha256":"07dea36c21de6e1a3b038a16fee3fe652275f33b1757c12ef30396e4dcabd2e8","sha512":"6e92d8f202db95f03407b4594b217cc15dd52e187fd69f779d45407cd9644095929c9a657b49fc030e7a2f4b1dc1f92cecddbdf72ceddba23cf33b759b782c11","ssdeep":"384:8033ZoVI43DY5WxPnFK9OMJuFUzYc4Ig30k8E2:PobD3xtwn+jc4IgV8E","tlshash":"2d62d0402ecaf0713ba1781ebb7df58804b89937b45a724758b70471b66d4ae13964f3","first_seen":"2026-04-24T23:10:16.871482Z","last_seen":"2026-08-10T17:58:48.344273Z","times_seen":1096,"resource_available":false,"data":null}},"time_used":6323,"timings":{"blocked":5979,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d4d2b521-861c-48d3-89a5-438931453851.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.399Z","timestamp":1786324427399,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d4d2b521-861c-48d3-89a5-438931453851.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52456\r\nConnection: keep-alive\r\netag: \"c545c93beaefd4bd61fc5c1b18fc1cae\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:18 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144603\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnFRaDIIc10oKnxUDxQoD7XqE%2Fo06JENerRVpG9KOTCVCZwRwnmM4bGraw7%2FvOL02YVaiJX1%2Fn9DvkXFJ6wROpeb9vVYxwnUOj57JX%2BwYRcSNuB9powiAIgj2EkpigoH9R6I1kZsyyVA5JyuNzBwn48%3D\"}]}\r\nCF-RAY: a27d59a72f75a0b0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bbb453c6a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52456,"size_decoded":53611,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c545c93beaefd4bd61fc5c1b18fc1cae","sha1":"19a7126947210454bd434f5642d579bf87bb0e99","sha256":"c3a29377aa06329a7068664cec9166fbcf02f0724f8938eac5106b1c3a6b4644","sha512":"bff91a20b5bcb7b7eab35453005dffaa98033341f7eeaaec88a0c4b414d0d06511b4c05ebb0c3723aaaf654bc9f0c372ad3b5b288030b1d899736b27b84f0208","ssdeep":"768:n4M8fxEbpGtvfqj0Bs8GkjOhpAh9bzillpUed5V/7hz9WJVI7X1BPFLN7CLrJneU:nifKNsXI0ex7lgVMPZN7ErJnnZ","tlshash":"333302a0d69cc510dbf8d6bf0a5130fc5e88fa501ea53bab4b804cdd889e5e4e51f60b","first_seen":"2026-04-24T23:10:16.825501Z","last_seen":"2026-08-10T17:58:48.328199Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":6866,"timings":{"blocked":6103,"dns":0,"connect":0,"send":0,"wait":762,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size1080x1196_b15d1708-bfce-458e-bd99-5bc1134b7122.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.412Z","timestamp":1786324427412,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size1080x1196_b15d1708-bfce-458e-bd99-5bc1134b7122.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/webp\r\nContent-Length: 48628\r\nConnection: keep-alive\r\netag: \"170614bf75e281d0f05503cdeab75a59\"\r\nLast-Modified: Thu, 19 Mar 2026 14:50:59 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144603\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rC5IrYAgMLKH1Lu91tHsM2lO9Ti3NfqGkRB2ByTu0mJHLeuSSItSVSi5cPF%2FJW7xJUbKECCXddNyVWvXUhx6feSMkTkv9EBSpWnqepAdI%2F9LPjfX9fjKrPQamY3AP3hce6ZIqFD4wm%2FCiPMwSsfgNj4%3D\"}]}\r\nCF-RAY: a27d59b22e270b03-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bc07a3f6e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48628,"size_decoded":49781,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1196, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"170614bf75e281d0f05503cdeab75a59","sha1":"32025008b56adf94f2a64724f1b00f55939db943","sha256":"010f104d5782b172955179537b5945b89f7a5ac32185a63d67ea5405d5c13733","sha512":"e11fa01405248d40ad8f95f335734207193356f418418955cafc6ebdfa04f5a08d8e304d23c34b211fd9dc7cdab36710694ccd0585c79778a156bf214750346a","ssdeep":"768:tk9BmrgO1s4wjUc8pqYtHwHGvhSgV1iCdmcmxWSqZA16T2rrKhv0cQ6ZQOc4vS9P:tkbmrgO1srjUtkEn5LTdmcmxnqC0aKhm","tlshash":"4223f124d4de0cda1978e776f637574cdb8b325fabc4601f82c9499f800ab04c6628ee","first_seen":"2026-03-20T12:57:26.684793Z","last_seen":"2026-08-10T17:58:48.396679Z","times_seen":1077,"resource_available":false,"data":null}},"time_used":7865,"timings":{"blocked":7435,"dns":0,"connect":0,"send":0,"wait":371,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_5286b86f-48ae-4056-b4c2-f68d7cc98bd1.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:48.020Z","timestamp":1786324428020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_5286b86f-48ae-4056-b4c2-f68d7cc98bd1.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 24702\r\nConnection: keep-alive\r\netag: \"e7be93c65218d7634dbe8783c4216368\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:24 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143320\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ec%2FZ9UThvDPSiZTybcwPlIeTxIEliIWSPZT1CqHt6wA1nOmKIYumfLD1kIi1jkF%2FzvMPd5SQTL8BS97MSNRhta9mCIyYM66v%2B8hdLS2vkni%2F2tVb8wesqWDWWizgKpaw0XkDyZi0SoboIh81LmtpwQ%3D\"}]}\r\nCF-RAY: a27d79079de002b2-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324436=SewwZXC5o77Q8hpIdkD415QoaGmibdD+KUGaWm9kKVPJU76cjvZ4ABfwgLqXlPnM6LOvkP0RX+FoH+/HJDIOQJTgS1FZNmj0riGJnKEEsoq1GeqI8lZS8EfVERvXxDKCBVtpn83xvQvcWPGr+/l/zvoL57JxjIvPnsywmebz0UF2I/vI38ZeHbpo9HvCByHl\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc65d3885\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24702,"size_decoded":25857,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7be93c65218d7634dbe8783c4216368","sha1":"7d8db251da5fe5e3885cdc3d934eefb258db241a","sha256":"44b211d3c79ec1a2c6ca79c619c036dcc5039150def4274e95a88d8361a76332","sha512":"7e7dfff4f99af2259dc36a0bd05ee76e67948eb2864a95dce91fe8363fe91876bbe233ad0673aba6234a8bf71052d0b5ca49967c2d3d3e70bbda5cbac21ee3c8","ssdeep":"768:eDOQiN49AUech69eN1RcmhiEveSRkmxz3HTNeX7UCMj9qm:8iNEbhpN1RcmgWeCbHTN","tlshash":"fdb2d07637ad617180d2fdb0e7a65b467841ecc03954ce64639de73d8efe869f028118","first_seen":"2026-05-02T01:47:16.022023Z","last_seen":"2026-08-10T03:56:53.67968Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9333,"timings":{"blocked":8329,"dns":0,"connect":0,"send":0,"wait":765,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/config/telegram.js?t=1786324415844","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.897Z","timestamp":1786324415897,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /config/telegram.js?t=1786324415844 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-1c896\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324418=B/NV+WXMCBvPhYUDNiUBVX0iZtuMbGLWLaYPqvS106sdQFnEiHVAu/Q3Z2ZnI0nyK/mbDBjuzYZXUl5Igpo1qRzngWOto80aBVQTgKARHZ9D2JO4MYdAj/0XKLJJfc6M2yZRJty3XYT40sFpP0+i6hktrA7Fv8e7EsiKRrbxESLnSEvx9k8iw5SUfssJVL92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93b81345e80\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116886,"size_decoded":18895,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (483)","md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-08-10T17:58:48.411243Z","times_seen":2478,"resource_available":true,"data":null}},"time_used":3125,"timings":{"blocked":2741,"dns":0,"connect":0,"send":0,"wait":379,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036f","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.829Z","timestamp":1786324425829,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036f HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: cu425+dp+0al+ZMukjdpl7RflUK6tIi50lJFRAHBczpKe/SfwiBdkTOMNGW6qHhvnm9nYnFPMokgBr+xD7LUYhW1NZD3ZrNBYvDqtW6hfGNGvEkLwINsg+NABEBYhlku7Dv1TtGh/IMcwg2GByHMHbwv0etePTzqudSKFNBxE9w=\r\ntimestamp: 1786324425820\r\nsign: n793qb361t616p5m\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: zPHmDkF2HsbrB2bh2dBjtbe2KJKYwaFM\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:23:46 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: d3dc413012c1432eb651977ef5dfd034\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba0613838\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3828,"size_decoded":4861,"mime_type":"application/json","magic":"data","md5":"846c1918eab34a4050c87f718ab9f46a","sha1":"9f18274e938af5df7d63f1d953027d5f1d1de3e7","sha256":"6a2c2dc7af180e9f3e1ef4d1dad0c8833e3a88b636cdad395e25ebb19ef79a7b","sha512":"e0b48fc3c37dae067ba16743f201bddc9121b742f79c744e458506c5140b3d10a022bbb8a718554a49d1f18224818154a11c1ce48eafc5e9a06a41db36fca371","ssdeep":"96:eOG3iMFIouVz+WuQPdcSssJ1OIQOC2Rqk8yxtx+hfchDsjdnH+CXVXdys3uJ8jc:VL0CJuX5sJGOCMq8xtxZ5UNeqd13ij","tlshash":"e9c15c09f7a4b790974653fa74d310a8a21f1dbbb68b6d7ac7b0c36b045771a031e304","first_seen":"2026-08-09T10:14:04.707566Z","last_seen":"2026-08-10T03:56:53.642784Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":792,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.834Z","timestamp":1786324425834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: P5WydBl4yiBk5hRkURrX8p4TtNi5JZ6cudeUzOAYbZIq4qvjv9gjzYpi0NPNnrUIzt0wxQY6wydIIwFIFXmD+xRsGxIrj2W+y6Qlwpf1OJ1VKzqidxBJ+W87gaIeimlWpGTq226IiMaJu2GykQ7D/YI0pQHKWAng4zVWPRcEw/A=\r\ntimestamp: 1786324425820\r\nsign: r1t1t3f40325r702\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: tra7QSHYXr44exJk7rGFizJFp6m4ExTr\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:23:47 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 9c9479744d3d49c9bfb424e6ed5b4b11\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93ba18a5e99\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6691,"size_decoded":7724,"mime_type":"application/json","magic":"data","md5":"c3b8092d2a5b882b3c20d23747a8c5cc","sha1":"c5bc1fe9407ec8a605a2702c89e8b6b22590a2b9","sha256":"3b343d208d84a98d763c336b5b718f62d991a45b549c30b360a885f4a24d06db","sha512":"2dc95e7f84e088eaeb9680638f6ce30997cc977c96c0e526e6f101a29935e74ba608b27efd4202bc195bb7d86d78b6bc07154a1fe5401a23bb131f5e6e3fbbec","ssdeep":"192:V5XaHYhgBhWN/DlxL4jiiSGv3HY5rocxrLI4irw9bdWagTgAGa+:jqHY6hk/DlriSGv3HY5rTBw4dWa6Ma+","tlshash":"2222bf970b52e7a036cdd5fca1221cc12aafa2cc40ac9bd5e37480a42eaf750b4cc4b5","first_seen":"2026-08-09T10:14:04.690484Z","last_seen":"2026-08-10T03:56:53.615766Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1444,"timings":{"blocked":1086,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/b6340994-04ad-4c44-ac40-50ba87f7a3a0.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.002Z","timestamp":1786324427002,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/b6340994-04ad-4c44-ac40-50ba87f7a3a0.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\netag: W/\"55e78c2224c20f1f40e19090f3e9badb\"\r\nLast-Modified: Wed, 28 Aug 2024 19:41:21 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143321\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDJY1YX8yWfHJ7XA%2B4UsGugcYolGb5aMDj%2FvslKylS%2FOHPnhOGQIYiPHYPsPSVk67ro3qRXJeASbj4C99QGEhOHEt8b1qZSNisoRs%2FBcxOzONeKc03ExRsREyvnq7WMZW%2Bn7qwujj4OvSaa1gIXcdV8%3D\"}]}\r\nCF-RAY: a27d78fd1be6714d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bc2283f70\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13155,"size_decoded":14368,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"55e78c2224c20f1f40e19090f3e9badb","sha1":"c798f24de9f142ee95fe386e1e1173c5cb25fc13","sha256":"0198a00681dfeba1ea3b8a0ce5001d6ca517c1b8a0825d30e927710bb13598ab","sha512":"1b3c6654420e90f4d8a83d4f518d5c8f8361d00b6a04a60229a31df6cc359dfd236d92761fb210da4cdc19a8b46124b41111829ac3c9638a054bd65fb4e201bf","ssdeep":"384:y1fhhexmwiZxjT4lR9iAXhPD2YyV1hxDtA:GrwotAgYynDDW","tlshash":"5b42bf033dda49ee6e32210608e1f41db67a9e9e9ca35ccaf45f9920b86056c077e7c1","first_seen":"2025-11-01T17:14:36.312029Z","last_seen":"2026-08-10T03:56:53.591889Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8639,"timings":{"blocked":8273,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/18096.1781011881923.d6b266e6.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.760Z","timestamp":1786324425760,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/18096.1781011881923.d6b266e6.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-8b22\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b9ee43835\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35618,"size_decoded":4135,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35246), with no line terminators","md5":"ac5be2b7da8d47878caaae404942be95","sha1":"6aa091dd8a2872faaea3b570b8b05908ab45b6ef","sha256":"3a9ef24702acf2b152e28f8191edcd0be3dcd3cc5624b8030f1974c6cd5d1377","sha512":"ce8f012d6e2bd45a1547438af8171087eefae87e2f88cf9cfa0a9537cfc50b5439e774bfb1babe8409c01608b1faada843655e3284b86e0a579baeb1224cabb8","ssdeep":"384:8Zq7GHHnUen7Qt+OY3VUwrGzLD+/oT/9Kb427IK14qITyOYfOUgOsJz6X:V7GFY9KZ","tlshash":"72f2a20dcb8cc2ddaa211f9c431d90a00690e8f7e58699ec95f6ad4ef93c54e325fa5c","first_seen":"2026-01-10T05:58:33.940614Z","last_seen":"2026-08-10T03:56:53.615206Z","times_seen":35,"resource_available":true,"data":null}},"time_used":868,"timings":{"blocked":486,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_4af051b0-3d60-41bd-8dce-df47daa5c0c1.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:48.019Z","timestamp":1786324428019,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_4af051b0-3d60-41bd-8dce-df47daa5c0c1.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 23470\r\nConnection: keep-alive\r\netag: \"6710376e6aa39b4ccb093f1125eae6ab\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:17 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143320\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlWZIRhfQzzBWGfs4mtvXJLF4N6S%2FCEVJs%2F5SOJ%2BXkhfzE39gbASdsLVAsdAkG%2FCLBcqNAp5K4M8%2Btnh6sPOWqBBDE2GrcEwZ%2FT2gM9jhKlq9Vxwtfny%2Flguex%2FvJaP9Wx1RNb%2Fy%2B3Wxf0nbhzu7g2o%3D\"}]}\r\nCF-RAY: a27d79079f1411cf-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324436=SewwZXC5o77Q8hpIdkD415QoaGmibdD+KUGaWm9kKVPJU76cjvZ4ABfwgLqXlPnM6LOvkP0RX+FoH+/HJDIOQJTgS1FZNmj0riGJnKEEsoq1GeqI8lZS8EfVERvXxDKCBVtpn83xvQvcWPGr+/l/zvoL57JxjIvPnsywmebz0UF2I/vI38ZeHbpo9HvCByHl\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc50f3883\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23470,"size_decoded":24637,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6710376e6aa39b4ccb093f1125eae6ab","sha1":"55e2492c8f0011aece7e55ede6464cfbde1b00d8","sha256":"24b1cd822323032ebfd629d4f9e7110cb95e5e50818aa0fcaf9f89ab3a85c78c","sha512":"dd65cba109b270f027775e7ca4dc13d82ce6b8b14ece7d0fbb9ee6e35436aa74da4f6033cda37fa1277cec081181df4344b5772e5196239f28cb077a69f462ce","ssdeep":"384:wBLNtZZx9SJ52I3XH35EbjT3ExgGee1V8StE/VcaoXCy5LmkUtl4:wf3JSjnH+fT0GQ1V8pd65L3Utl4","tlshash":"36b2f17740867b655a7eec8e399b66f023523034ee4e91c93fbc18e48fb012891389c6","first_seen":"2026-05-02T01:47:16.021193Z","last_seen":"2026-08-10T03:56:53.653434Z","times_seen":23,"resource_available":false,"data":null}},"time_used":8360,"timings":{"blocked":8005,"dns":0,"connect":0,"send":0,"wait":345,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/59490.1781011881923.42744005.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.894Z","timestamp":1786324415894,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/59490.1781011881923.42744005.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4f43b\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324418=B/NV+WXMCBvPhYUDNiUBVX0iZtuMbGLWLaYPqvS106sdQFnEiHVAu/Q3Z2ZnI0nyK/mbDBjuzYZXUl5Igpo1qRzngWOto80aBVQTgKARHZ9D2JO4MYdAj/0XKLJJfc6M2yZRJty3XYT40sFpP0+i6hktrA7Fv8e7EsiKRrbxESLnSEvx9k8iw5SUfssJVL92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93b7ee45e7f\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":324667,"size_decoded":102195,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9fc1f2655dbcc496f7d2b9b19cccb4ed","sha1":"d6d2131d90cc605cc12875c65ce702f3409f5594","sha256":"2c566c376d0f6cb48708c08f8110adaab1032b9f747a09b77f47357cbaf9318e","sha512":"d3d7ff6bea473171c80b7fb461989c413ea17a6cbcb4e5b3e40a5e4e208ef06935c122dccced2803c2916579faff0985b27ab2b6812286fbf4152d50712c939e","ssdeep":"6144:x7tBwgttXxyUtnBYHo0L8sDI9/KCytZLyfCBnmMzIroKj7:ttrtnBYHo0L8wI9/KCytZLyfCBnmMzIv","tlshash":"95643bd0f39171bc8b9791f2761b1039a06e0951208cace0f26dfa647f61558e97faf8","first_seen":"2026-07-01T01:07:30.839391Z","last_seen":"2026-08-10T03:56:53.641583Z","times_seen":18,"resource_available":true,"data":null}},"time_used":2740,"timings":{"blocked":2149,"dns":0,"connect":0,"send":0,"wait":388,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/57530.1781011881923.ed8b1102.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:42.281Z","timestamp":1786324422281,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/57530.1781011881923.ed8b1102.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:42 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-8bdbb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324422=8dxcc8HeWQI+7CybPz1DpXyiZzA/cXoJNbMRPQKqmVTq0EdnC+OHlGYA6RqWFF0dNy0EdA/9hOhIiVGjkRVOX07yuE+xmvv2KlR8DZZcgP2LDF6kVNkL5cMMSZk6Si8vyYweajkpMKadx9n5rVr/00fJMcWAAjcQzs1b+B9JD3yZrWsSL0q0cYhO+Fru4oPB\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b8fb93829\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":572859,"size_decoded":152632,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"3ac960a22cf01fe7113867220980c6ce","sha1":"1ea53c8676b82c7098de92f76832286b08c890bb","sha256":"7a53c982a6e9f8b5e5cc351abed7944bd91d198d2ff8c61e14a34f07561d4924","sha512":"86a060d3d5ab5fd417a2f0a142ff8a715c1ef3b2df0c36ab775af5af13ce3630ad8c293a928d08bdcf037c0001e7d0d986410d82fcd6f9023ce01296c8425a8d","ssdeep":"12288:U5kuoy+RfKgD+Ng2xLU4nYdfX4fAaHu7zuitp7xagoXShH8Qzo:+Joy+RfKgD+Ng2xLU4nYdfX4YaHu7zut","tlshash":"85c41ad0b15072b9a55a82b5b73524b86027490950c99cb0f1f9af68bf1134bff6acfc","first_seen":"2026-07-01T01:07:30.823632Z","last_seen":"2026-08-10T03:56:53.662803Z","times_seen":18,"resource_available":true,"data":null}},"time_used":1209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202507/ebd4a257-eb22-4d7c-a719-93959367b7e1.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.993Z","timestamp":1786324426993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202507/ebd4a257-eb22-4d7c-a719-93959367b7e1.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\netag: W/\"e39dadb3e892b554fc4004a30a5d592d\"\r\nLast-Modified: Mon, 28 Jul 2025 06:24:50 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143313\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MyYXXTuNsHhHXgd0EVEwLwtdIW%2FliMm15zIbnh9fH%2BgcmEOvMEcWH9I4MikwmsSkBLUEJtaIKWDwr%2BxNNrJoT%2Bvy3MhL313q09p97ULU0S4xAOFKm6WQvdy1PB4acfrL387XZuL4D8BBkg443pt6OA%3D\"}]}\r\nCF-RAY: a27d78fd1f8bbd83-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba4913848\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144906,"size_decoded":145606,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"e39dadb3e892b554fc4004a30a5d592d","sha1":"a3a4dabe0e1b97b47be92d03d343ab3b0e04bf5d","sha256":"192e2a476b15abaa93ebdf5d59317b5716be2056d77d5d6381e34502c5eb8873","sha512":"1e27bc63574eda324c8cd1245ab5a64f2ab2b1b3ee16e1c7a3d9392f6f6f595ba4da220799699f4c9de24f667b40e53241da0df418fa88d08b50b276ab3004ac","ssdeep":"3072:DtrbJ6WcIS2gJjrLkC6fsSC2RkG3MJJbalPE:DtBDcIS28vLHssz8jgBalPE","tlshash":"67e312b39e9533410386e1dafdb36ba61d0896c180406d2a0de9dba7956f417333ddbc","first_seen":"2025-11-01T17:14:36.281771Z","last_seen":"2026-08-10T03:56:53.672646Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1433,"timings":{"blocked":703,"dns":0,"connect":0,"send":0,"wait":683,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_392325e1-efd7-4953-83f1-410dea55a03c.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.353Z","timestamp":1786324427353,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_392325e1-efd7-4953-83f1-410dea55a03c.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13178\r\nConnection: keep-alive\r\netag: \"38581a2c1fb9355639ffb5a31aa0642d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:28 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144600\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQIfxmjFBWvj8BOOgrmLoa%2FkZ5ruzG%2B%2Fw85LaDOA81B%2BQr%2FUTns0kg%2B6bEj2LdhLt7B0PR3iIUxBefUoTgxD88jZGYyBf%2BEMZLZZyUIm7Oh8n4vGEDviqPSMTpqwvags4XSntdirWKnHc1QF4abxiB8%3D\"}]}\r\nCF-RAY: a27d59a6aa341fb5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bada45eab\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13178,"size_decoded":14339,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38581a2c1fb9355639ffb5a31aa0642d","sha1":"dc4eee50f114bf0f120b50766fd207ec5522e9dd","sha256":"88d44a033517e73fcf97528b670ccfa16743d61b2c0c7deca8d7fc247e2595d3","sha512":"e1757677642582409db9344003b4c9454757755bf157f2491aabdf2b1c454d3d0073f4b0012faa1e9681397e7004428f087b8a1e338f3812137007909ed9ed89","ssdeep":"384:yPsoyVYHcsbr84JZQ4zAogmntgxn7uxj8+4n:toyVUbrXDQ4UogKWlWQ+u","tlshash":"3542cf151f4044575ecd7aeb108a5ebcc9450918e63cac716493bc388ef09bf4aeb6ed","first_seen":"2026-04-24T23:10:16.737591Z","last_seen":"2026-08-10T17:58:48.400295Z","times_seen":954,"resource_available":false,"data":null}},"time_used":2990,"timings":{"blocked":2627,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_2a74177b-d024-4ea3-8b58-fce53f91051b.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.368Z","timestamp":1786324427368,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_2a74177b-d024-4ea3-8b58-fce53f91051b.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 65510\r\nConnection: keep-alive\r\netag: \"1841972db1eb6b1b08f2b8849b98ffad\"\r\nLast-Modified: Sat, 06 Dec 2025 06:23:06 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cl%2BSZbyH0TxR8%2BPwqyh%2F0oGo3X26JTLeJhvu2d9gfSUtftXHB6l75f54nTbUbiOdBE08Mhj2usOQA9wt2lunftIKmuzzM0eNFO5WvYfUQ%2F2koQif4HIcVhG2yAQEa4xV4ha37pJfhI1Chd1rZRE8fL4%3D\"}]}\r\nCF-RAY: a27d59a6dd070725-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bb1073f5f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65510,"size_decoded":66665,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1841972db1eb6b1b08f2b8849b98ffad","sha1":"6194c3f706be3f6aa4cf9042d0cc4b9c2a77a1a4","sha256":"0b162dd98f34fc830303fa40c47a002b14c2b6f4947a7378247db3c924bb7fac","sha512":"e9fb0eff09d46b3c88de962b1d6a020fd55f98d777e56ee4a0ac8aa615d14faa3d95de3ac35a92451ef4be5c8141532327b97c6fa95d5090aa61847b2b24d370","ssdeep":"1536:HsAMZEDXiepWzfRKc7nC3BQkbf9ptwv+AOtedy3JMw:HsAMZwMrC3BVTtAy3iw","tlshash":"5a5302765eef65629bf42eeb0331c6856fcb5a10803814b83059e1e5ee85c29f61d372","first_seen":"2026-04-24T23:10:16.852267Z","last_seen":"2026-08-10T17:58:48.209645Z","times_seen":959,"resource_available":false,"data":null}},"time_used":3947,"timings":{"blocked":3493,"dns":0,"connect":0,"send":0,"wait":363,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_e50c5112-b480-4217-95c2-f187843fa431.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.373Z","timestamp":1786324427373,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_e50c5112-b480-4217-95c2-f187843fa431.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 54466\r\nConnection: keep-alive\r\netag: \"d564e11aa2a3009b6985896da404739e\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:05 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4blnVqll4dkfogXpMWqae1Uuj6vGni9zRyHM1diqnSiWy1ASCPuTKFX8vyUIo5%2FDM8KwdylR4ApjH0mv4Og9TWDHVLMdXSahC9ziBtL5m3wHSNRnpWAHhj2KBE831SDOSYGk%2FQvukKsfao5%2BfFiXKA%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nCF-RAY: a27d59a5ea0f84ae-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb2c33867\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54466,"size_decoded":55619,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d564e11aa2a3009b6985896da404739e","sha1":"5701d82c9e2fd24ec69db4bdc9ee3e32cffca139","sha256":"75d785fba01e17e56ae0ba404eb302e8537d3a7b7f84d11128164946a3987384","sha512":"1f6a7673f6ccb42f0f1e5135154db412145225615504419fcd52655726f8ac4c85ec419c54167c1d4e71c60cfbd30f87f7bc07d53858adb3e30e184f2fdb5623","ssdeep":"1536:+USdyAD4v4ReUeNhO2po1VPvBu3czLES5WjB6lieR:Wdym04TGeLvlQAC6geR","tlshash":"fa330269024c6463719556f833feb42aa760a7c63801a4799a8f3594fe24ce874cfd6c","first_seen":"2026-04-24T23:10:16.721458Z","last_seen":"2026-08-10T17:58:48.258826Z","times_seen":965,"resource_available":false,"data":null}},"time_used":4643,"timings":{"blocked":3938,"dns":0,"connect":0,"send":0,"wait":670,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_09f9613c-2335-40d2-b577-5471880481a3.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:48.022Z","timestamp":1786324428022,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_09f9613c-2335-40d2-b577-5471880481a3.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 19768\r\nConnection: keep-alive\r\netag: \"2d77d1d4704b912fec123f836cba07b6\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:04 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143320\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmXxgDICValmasQefH228pnVEdSnObzwDEPYxAaYTCcEDITz%2FhapnTA6hPrAmJex3huWBmIiLNnE5DLpUTyocyAROJOV%2B8X2gmuCWp02ETYPoZJP8KXK%2BYLL96iBXOrnItYMX%2FODXmSOxOWPLNHNYbA%3D\"}]}\r\nCF-RAY: a27d79072f018554-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324436=SewwZXC5o77Q8hpIdkD415QoaGmibdD+KUGaWm9kKVPJU76cjvZ4ABfwgLqXlPnM6LOvkP0RX+FoH+/HJDIOQJTgS1FZNmj0riGJnKEEsoq1GeqI8lZS8EfVERvXxDKCBVtpn83xvQvcWPGr+/l/zvoL57JxjIvPnsywmebz0UF2I/vI38ZeHbpo9HvCByHl\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bc6975ecd\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19768,"size_decoded":20923,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d77d1d4704b912fec123f836cba07b6","sha1":"e1a903e1a360f199b6a0319c7bf895a0dc45dba4","sha256":"f1c435a7536c1285a5bc5acbc85cd4ead9c967a6206d13b8041ceb0e2612b966","sha512":"5e4ee75038b1fd24792f7944691abc310cd41936b7be381dfd9e4c8e417431c67168de888f2232721b2aafcfab593a2fe6d3936e79adc830f93c64f116e39963","ssdeep":"384:AtwLX3we/523uv3HeuqX9XSxireY+Cw5MSLH5hc6qOLC1QxLPYWkPCWD:AOX152u3HFcrePgSL5FqO21QSdCW","tlshash":"bf92d0ba34675d238753c8a37ce70e70a39d8ce552986ca03713f8aa73b011d93e9b11","first_seen":"2026-05-02T01:47:15.957931Z","last_seen":"2026-08-10T03:56:53.66168Z","times_seen":23,"resource_available":false,"data":null}},"time_used":8752,"timings":{"blocked":8384,"dns":0,"connect":0,"send":0,"wait":361,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/chunk-init-1656f0b4.1781011881923.32336986.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.887Z","timestamp":1786324415887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/chunk-init-1656f0b4.1781011881923.32336986.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-21366\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324417=Ptzdt+FUuUNHZKTtlKr9SiHGktL/FNC6JMSTgGOX59JwdiBMJedi69SsGhwJjdF5psDMb2A1yYaF8EUvxF6vE6rbfHtIwGqZXJnqACd5VcbRw9c2RGR4Ni1cQLqRHspedTtDRTdulNygSPBsYxB8wKLyo3uVv5HB6sLvnaxq7c8YpHm1WnBXJ1hcT6Ikg22V\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b7a663bf5\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136038,"size_decoded":38262,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44088)","md5":"149a9a32eef525724cd200e4dce7a032","sha1":"29b091925cae6d90319391653e40685f6e6c5735","sha256":"10fcb7c4e44a141964cb31c527462c6e56f78d95c956fb02c50c61fc576cefd2","sha512":"62d80403786c13019e86e1c6b991d73cf52ff5bd25d4eeaec34ca12125d677604a269fc6c56ef301f074c42798f8e7935df623d6a0a62559d70749e53082085f","ssdeep":"1536:z2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCif9:z2twqhOIK2nCLdyACifMur06/D","tlshash":"6dd3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","first_seen":"2026-06-12T19:29:57.333908Z","last_seen":"2026-08-10T17:58:48.425691Z","times_seen":1104,"resource_available":true,"data":null}},"time_used":1782,"timings":{"blocked":1012,"dns":0,"connect":0,"send":0,"wait":483,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/sponsor/sponsor_web_1.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.819Z","timestamp":1786324425819,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_1.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:48 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-a556\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324428=DSyzgCHhjF4Bg4+7k5rJvoHFOnpQqlFDlme+jAyCtDmh3s22hqALMnpdwVfEDsoRwnJVA+/xQ7R9kAejmeCCMMeynpeUFkCdYda2AN5yGZRnqp4GGY7NdDfKivBo+ufcRNfj5EhEFrHx0XF2/cDI8EHdRugYloTaFcYshDZfxIKU3hKC7B0jklMJxKP96M9F\r\nAge: 144625\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba6b13850\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42326,"size_decoded":42417,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"e0ecbe5a9349aaa328ffd6f9515f9007","sha1":"79ebc30d345c812a3e3a122f152829d161b00a52","sha256":"452d27839b3f3f35d11c9a26f06d6cc9db56dc8c61261ee43e0512f69abf71f4","sha512":"fd322bf3ca925ce2eb45317adae1dee0f1c2e4f30035738052a97ccc054ffb576a92a46758559c8d13cff6be549caca5541d14c5692cbec2758ab2b3c7f3324a","ssdeep":"768:2o9mjFjepo5h5jLasrCO57PIrvmMOSf4t7q5bo6Wruv9CSMsfRLMD7XZ0:2ogpymTxRrwmDSM7mbo6WrutR60","tlshash":"8713f2ebe1075d80bb946c9b3925eec61da50f047bc78d68c5e055f921290bb0fa33a7","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-08-10T17:58:48.261573Z","times_seen":2371,"resource_available":false,"data":null}},"time_used":3152,"timings":{"blocked":2430,"dns":0,"connect":0,"send":0,"wait":350,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/assets/logo/favicon.ico","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:41.013Z","timestamp":1786324421013,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:42 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 585615\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nETag: \"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324422=8dxcc8HeWQI+7CybPz1DpXyiZzA/cXoJNbMRPQKqmVTq0EdnC+OHlGYA6RqWFF0dNy0EdA/9hOhIiVGjkRVOX07yuE+xmvv2KlR8DZZcgP2LDF6kVNkL5cMMSZk6Si8vyYweajkpMKadx9n5rVr/00fJMcWAAjcQzs1b+B9JD3yZrWsSL0q0cYhO+Fru4oPB\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b8f303827\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":586282,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-08-10T17:58:48.267063Z","times_seen":1509,"resource_available":false,"data":null}},"time_used":2537,"timings":{"blocked":1160,"dns":0,"connect":0,"send":0,"wait":492,"receive":885,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/logo/logo_download.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.811Z","timestamp":1786324425811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/logo/logo_download.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nAge: 143322\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bc3973f71\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":579698,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-08-10T17:58:48.267063Z","times_seen":1509,"resource_available":false,"data":null}},"time_used":11133,"timings":{"blocked":9827,"dns":0,"connect":0,"send":0,"wait":371,"receive":935,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/common/usercard_recharge.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.815Z","timestamp":1786324425815,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/common/usercard_recharge.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-b9b\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nAge: 143314\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93ba4a93f51\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2971,"size_decoded":3702,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fedd0bbfe323ca4efac1c2ffee627083","sha1":"460d242dac28c8a1241d377e84cb3c670cdd8d0c","sha256":"f82f56f84e64bf8756f1989f43eaaee5c2760b7de8765e893df37d4326829cf9","sha512":"e9a6e21ff6b44b60a087e1a8352bbdd5b5a3a8baa12577b702b9c1db7da95135c9c17bc4a708b526ca03e8b71e3752c8894d789731a3791054d9b9be44a03d9a","ssdeep":"","tlshash":"ff514d5af50c5fa250b789f1697dcac17b1e4007956583c679d5803f8e26cd24717293","first_seen":"2025-11-01T17:14:36.247158Z","last_seen":"2026-08-10T03:56:53.591187Z","times_seen":43,"resource_available":false,"data":null}},"time_used":3573,"timings":{"blocked":1911,"dns":0,"connect":0,"send":0,"wait":1662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/public-resource/holiday/23/icon_btm_jr.png?version=1.0.0","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.951Z","timestamp":1786324426951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /public-resource/holiday/23/icon_btm_jr.png?version=1.0.0 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"f25e504c2e0f1aa9e2ed083d5f322e5d\"\r\nLast-Modified: Tue, 26 May 2026 12:06:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKCrBmM8yBkPaW12C9IOQWaVWwSoN51AdYtjBILhvKW7lF1%2BPfsUfrN5iNxx48TtnLngSDK50ZQOyXoeZ8QOKQverklW8gH08BfhLKveZB4778r0XbxvxmgedR%2FkmzrSHi46rqZ2GdeRYWr12MgnEtQwZH6mDDeV2cfB\"}]}\r\nCF-RAY: a27d78fa8e7d269e-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nAge: 143320\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bbfd85ec9\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36479,"size_decoded":37610,"mime_type":"image/png","magic":"PNG image data, 240 x 180, 8-bit/color RGBA, non-interlaced","md5":"f25e504c2e0f1aa9e2ed083d5f322e5d","sha1":"ac78f47db131e2e61aa480bc69955293c7730875","sha256":"41b4ef5ebcbe9b836135c295bda3dcc26cd7188f02e0ba540c769604c7c01dfb","sha512":"ed8bd3cf71738d0bcef51f5d63d6d57be9437a4a83c1703fc1eda3d049b6e254da043d964d9f5e22831ad1e924d7dcbfcc3528ab3798d96b834470590b77cc65","ssdeep":"768:5vMN4b47iS6uGpblTTE8wRxHjPfQQi71Pfi:xM4M7iZgfQ9tfi","tlshash":"daf2e18c7bf277b8722d509f08329ea86541519f067a6305ca30fb42db2abc06675dfd","first_seen":"2026-07-05T14:43:49.642911Z","last_seen":"2026-08-10T03:56:53.637446Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8133,"timings":{"blocked":7727,"dns":0,"connect":0,"send":0,"wait":366,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b9e3bfea-9391-46aa-b7db-5466e619a75a.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.373Z","timestamp":1786324427373,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_b9e3bfea-9391-46aa-b7db-5466e619a75a.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1086\r\nConnection: keep-alive\r\netag: \"bf3d921165a3f71e2df3355fa367995b\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:10 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mekVH0f5jIigODjtF%2BJORGZvyuH3ArbRqtWVAaF11JlfbE80z9EFJveM2FJxLdD7XsUSsW4pSzf1FgRkT%2FUMe0AKoJWqcJT4JqJfn0LvowwsgcmPh%2FuKfT5V%2FL%2Bn1VkjG2055OOZUDizLgRU4NT3nmk%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 54164\r\ncf-cache-status: HIT\r\nCF-RAY: a285f9934cf6dd51-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bb2d03f62\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":2241,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3d921165a3f71e2df3355fa367995b","sha1":"3b7cdf04a4ca59b14bc51326218ea1cad70f8f8d","sha256":"4f4109d5d1dbf5144085bb9671dad452cc50bc01fac3bb74eb706042338b0ff9","sha512":"d7d910ee314b0b7dde201bb3c2cdd01e242481487960067c4fa5686a896080436c3e6529f3e0db49628013fa1801562fd206127f840c96ffdc161315cdf82371","ssdeep":"","tlshash":"5811b6ae8ff7e268aca3f51564f5d4a2464d3a52088813c0045611f9860877a9fce9dc","first_seen":"2026-05-02T01:47:15.989776Z","last_seen":"2026-08-10T03:56:53.668197Z","times_seen":23,"resource_available":false,"data":null}},"time_used":4288,"timings":{"blocked":3947,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_aa2a4724-288d-4252-82c6-453d0458d8c1.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.380Z","timestamp":1786324427380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_aa2a4724-288d-4252-82c6-453d0458d8c1.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 49050\r\nConnection: keep-alive\r\netag: \"bb2aa8a4e812ea372888371e3493b542\"\r\nLast-Modified: Wed, 10 Dec 2025 11:52:08 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144602\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUR9z3nAUQyK%2BLlj948ah78EpLMLuOPI0EBZk4pqfyG7TUQvOWPGmaYkhUq5Q6Zeothjyf97C%2BRTRS9EuFrKFrFs2yWUIsiw6KkJkUm3%2B98MYoq81Mg5%2BAfUDpwc5QtDVOslYHfC1Fd4wJl77vTyWk8%3D\"}]}\r\nCF-RAY: a27d59a38f1bef7b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bb5a33c62\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49050,"size_decoded":50205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb2aa8a4e812ea372888371e3493b542","sha1":"4a36a3e778cd1cfaa8cbecc34e70d024963106a5","sha256":"fe97bdaee3660ca686cab03b1ef7af16d387780811e739ac2271082c7d4bb489","sha512":"f5ffb0368751705c8584d3a6bafa79c865cf33c0d4d8e58f06404807864ceefc41d20cd1162c01b17afcbc438a2fb2ed4f92b8f80938387b012bdd10e0ff2302","ssdeep":"768:6UQ6Jz2sCQ6dza0R/4YUaVSjgKLnkBM/jScHyXLEcDs5Op2jbOKz6im:tD5rCRNa0R2aOgKzkKucHybEcLKwl","tlshash":"2323f1d8f25dd108f9c51d3e9ebe898e6cbaeded3ec998c6224cd81c041494678d6623","first_seen":"2026-04-24T23:10:16.759919Z","last_seen":"2026-08-10T17:58:48.32167Z","times_seen":997,"resource_available":false,"data":null}},"time_used":5312,"timings":{"blocked":4671,"dns":0,"connect":0,"send":0,"wait":417,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/84222.1781011881923.122fede9.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.704Z","timestamp":1786324425704,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/84222.1781011881923.122fede9.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-165b5\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b9d1a3833\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91573,"size_decoded":29035,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64064), with no line terminators","md5":"4ac805aa0d7216d2651fb367a7bb3ad5","sha1":"b21c2154160b9f13c3c27b0ff5b1953e64daafca","sha256":"38c2af4a3a0acc2ea2533b07d3295df6c95cdde2dad5aa094c8f4a088c660374","sha512":"eef30692a0945e399910b75bf69bd8030622d2abf52d872891b58d539bc339db517fe138e8dd104f9860fde0ef1f13739e35735250fb36f0caad603e293c261c","ssdeep":"1536:QcK/KnqHB3vmxuHXvK5+Gruc7iSxTcgO1JwTl0sI5pQiVFFsdt+H6Xk:0B3vywXS5x7HYgODwTl0sgQi2tkkk","tlshash":"0c93e8c4b5f4f5f8279ec5a6973644b8b02527c5b1c8ace0d2e96e047f1ab52b0718bc","first_seen":"2026-07-01T01:07:30.843443Z","last_seen":"2026-08-10T03:56:53.58224Z","times_seen":18,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":503,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/569e7fcc-334b-48a4-8dd7-d13008a49f17.gif","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.991Z","timestamp":1786324426991,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/569e7fcc-334b-48a4-8dd7-d13008a49f17.gif HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\netag: W/\"5927fcd8ee7a547a0746720c23fd1d32\"\r\nLast-Modified: Wed, 28 Aug 2024 17:36:14 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143313\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZojHVDVZJclva7qRcrrNhDHQND81ytEYyB0Be7NvuY%2Bu41mhdd8N%2BwkEiRVkW0lwtZDnlPgRQt%2FxLQed2QiQWCjK842ZgUY9Obu8uY1yxDkuXBKeevDskCIq2zgwqGgLOAdVeSIuIdCOuswZOSmAm0I%3D\"}]}\r\nCF-RAY: a27d78fbed575dda-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93ba43f3c4d\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295174,"size_decoded":294842,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"5927fcd8ee7a547a0746720c23fd1d32","sha1":"71f69a04e292e69bfdce84147bca4bd45a7d9888","sha256":"f26687795530d7bce3154ccd632807bcefc52aa55f794cdb2991103266e389d4","sha512":"f8c58e07c99d04551f1be395c9fd0524f1c1932e526ba4cf1cf716faba0224ba66844191ee940f2bf794f995b00a765c6b9365e88016558a0e97a4264fc30acc","ssdeep":"6144:Q42jB35CuTlmHax3Yegn+mSTMLHAO3sn+gKq4D0tJijYWIm9+:DMB34uTlm6u+jTMLggs+gK9AtUYW99+","tlshash":"aa5423f0fa3b61789db48de4e58f510d1d093286dcffca1308b6ebd158092616a594fa","first_seen":"2024-09-28T07:14:26.572025Z","last_seen":"2026-08-10T03:56:53.644769Z","times_seen":126,"resource_available":false,"data":null}},"time_used":2395,"timings":{"blocked":631,"dns":0,"connect":0,"send":0,"wait":336,"receive":1428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/e47329d8-e85e-4dd1-ba75-b49ff52198b7.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.999Z","timestamp":1786324426999,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/e47329d8-e85e-4dd1-ba75-b49ff52198b7.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\netag: W/\"818e9bfcea16dac5835837230918913f\"\r\nLast-Modified: Wed, 28 Aug 2024 20:32:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143321\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6v4GxJOZ6%2BNlFDiSC5IIEVXQ8DXyCN1sFZ%2Bs7EbngOQADmE5vuClzB3x8IFUN15c4Xh5xoBZ3mFxa4TqY2aUdNUZu%2BSfzSGW0d6WcYtDNQU0GkrfNtuXnxydXdxjHJmU5kN%2BGj9Z7cRaQpMDcuZZ15o%3D\"}]}\r\nCF-RAY: a27d78fd1ed70512-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bc16a3c6e\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13253,"size_decoded":14468,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"818e9bfcea16dac5835837230918913f","sha1":"8c4edfbaa2f4daf030c9085b7dbd715a8a68366c","sha256":"1eb3a57d348a5f1754497f73ce7f06963fc3de33ff17ca475680122d9f56c6a9","sha512":"af266ef122f60b793fa9bef055d16e9fb26d9e05ca2ecdfe38e964bc92699268cd7c7194f5e67b935cfcb05633b90a93699442686edb42bfbc19efe5dc2b8182","ssdeep":"384:yj3mqgdOv0prnL6xBgzCPqgoFFS4Auq8hH+IjZfRl:GWqgdOv0p36x6zCigoa7nEFtpl","tlshash":"5652c14354c8782992630933f8fe625188a37fd7694fe5066eb979a082332ff539c0c2","first_seen":"2025-11-01T17:14:36.302545Z","last_seen":"2026-08-10T03:56:53.634846Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8492,"timings":{"blocked":8089,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f8306425ea0731361b69124f50f76fda6f8ad1e77e465683107b3","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.008Z","timestamp":1786324427008,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f8306425ea0731361b69124f50f76fda6f8ad1e77e465683107b3 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: IW9BAA/4RMuVBNWpZm3iq6bzbSuxjDW4IqwQxZ1GmDhhExYzlec25uVDdFCHPYd7aThDED0SvghzsZ/gwK9jOotescJ2vp3sQZco8QAxNKjP6Ov6K0Md0rDgZg6mz+ESxsPBb+y2JJJ+3itmR8ziZou1Ieb6R7zXcGnv/v2u/ZI=\r\ntimestamp: 1786324427005\r\nsign: 31v4j6u66h3cgv6j\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: TQpcc2TMaDRwiE8wi6x2pW85FFX7Hj3E\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:23:47 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: ac9f50be2bbc49c29a388dc6ced3877f\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba318383f\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127,"size_decoded":1160,"mime_type":"application/json","magic":"data","md5":"f686df7269ef2b7477b51fc91906ce72","sha1":"9290d922b79a95d9cd6f998a98068f109fbca3ca","sha256":"0a7ea88bdcfb7729e747c9b5ffca9a99275df7b457b4f0e7f8524540d755e044","sha512":"6f30f4c4d89ccbf1c7192fc9a6a5eb81dd479a35838a4b4c336851dfaa7c715870a968181242071354023db701b4fc01a1b4ec251eea2fdc4c0daa17a41783fc","ssdeep":"","tlshash":"49d0c0bb5b3d4fac8bf033f03035454247f11388d6b0154886bace7b26e5c84109c80a","first_seen":"2025-08-09T20:01:46.120305Z","last_seen":"2026-08-10T03:56:53.677769Z","times_seen":115,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":308,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_9883229b-22be-4ce1-8199-dc6174c643ed.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.346Z","timestamp":1786324427346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_9883229b-22be-4ce1-8199-dc6174c643ed.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1106\r\nConnection: keep-alive\r\netag: \"dda1bae06401cba623dd6c27f3fb381c\"\r\nLast-Modified: Tue, 02 Dec 2025 14:06:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ztj%2ForcvuaWfg1q0Qcoq0xJ1hH5cFOYbUa6%2FeW9%2FQ5rqoZVkGpwpM%2FGudQGNSXlRTF02d4C%2Fv3Bl6w2AzU8CvNqJcmYbYTFzL2aj%2BsIbkglUIKqeFidcacK2xZdcfIuVJHWthZHmLZYNAdvgKQN3rvw%3D\"}]}\r\nCF-RAY: a285f9920fbc104f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nAge: 54163\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb0063864\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1106,"size_decoded":2271,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dda1bae06401cba623dd6c27f3fb381c","sha1":"b1c7eb4c439859c0ed092f246e4deb0539e38609","sha256":"993df39d87aca83781d65d57fb5798df471d80abdf05f1abc25a9393c889c07a","sha512":"9189dbd8d5339e87d3570e89fb1891a1d2a5f92871d963f039b0dfdd48a532f38e9463348fc84f19da1832953cfa4d7ac94a9abfffd9af57b5b765278bd28f01","ssdeep":"","tlshash":"cd11f988d9615000fdf3ede875c7e04a109a1183a04e87d939b69415200c3e5e2931ed","first_seen":"2026-05-02T01:47:16.000719Z","last_seen":"2026-08-10T03:56:53.667538Z","times_seen":23,"resource_available":false,"data":null}},"time_used":3610,"timings":{"blocked":2545,"dns":0,"connect":0,"send":0,"wait":1065,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_7f760e34-ebbd-4cfc-bc28-666cc8a6234f.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.405Z","timestamp":1786324427405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_7f760e34-ebbd-4cfc-bc28-666cc8a6234f.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 44494\r\nConnection: keep-alive\r\netag: \"693c20ba4107f736124e16931ead8d60\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:27 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144603\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdGOZgUVoC75lyCcOSLGvpA10H5JZrT157zMd%2FPSwDjX%2BPQndaUAONHe%2FEhSmxiSB1oDuL8tdthb8MVBXOlGAuRi2IRk0e%2BiYDR2alt9brRFODAwdl7wZ3A5NSNaM5Tbt2vTFvwO8WjbLEjGzp7k300%3D\"}]}\r\nCF-RAY: a27d59adaba809e4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bbe355ec7\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44494,"size_decoded":45649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"693c20ba4107f736124e16931ead8d60","sha1":"6a247e864c0c0a9c40bb5be357de99524abf3e2e","sha256":"342bf65608ae9d71296ffcfbbfb4580c00ba782557c802be6496ec374d5fad11","sha512":"ae136a2a5baba143d5afd3fe4270a5ce2bd0a96655f2f56a65f2d9ea26ada4a90c63b36c96b6b79adb32dc0ac9f118040f236cfcdae958f82c05f3f600dc79da","ssdeep":"768:ssqja8OCwQkPOoS4nNgT3p8tZgn5DVWGgNS4RipleSQ6c5xlGY89B:JVQGS8A+wn5D4GgrkKKc5jGY89B","tlshash":"5a13019a26762833b187c36d0030062c1b78b89f3654c54ea4ed7924975f09ec7eca6f","first_seen":"2026-04-24T23:10:16.7563Z","last_seen":"2026-08-10T17:58:48.502096Z","times_seen":1116,"resource_available":false,"data":null}},"time_used":7271,"timings":{"blocked":6852,"dns":0,"connect":0,"send":0,"wait":366,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/45540.1781011881923.25dfba7d.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.891Z","timestamp":1786324415891,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/45540.1781011881923.25dfba7d.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-37ff6\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324417=Ptzdt+FUuUNHZKTtlKr9SiHGktL/FNC6JMSTgGOX59JwdiBMJedi69SsGhwJjdF5psDMb2A1yYaF8EUvxF6vE6rbfHtIwGqZXJnqACd5VcbRw9c2RGR4Ni1cQLqRHspedTtDRTdulNygSPBsYxB8wKLyo3uVv5HB6sLvnaxq7c8YpHm1WnBXJ1hcT6Ikg22V\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b7d6a3c02\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229366,"size_decoded":65835,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7983a109fba451279f84fe7b75724983","sha1":"9487dc955240c6083cf3497e806dff89bec2061f","sha256":"80bb5c781336a9095ee3e8ae99d724f58a409c7f3c159bf0f320a9c948afe030","sha512":"ddf49f5cfb4721100ef951228391607209e248a8733d48229ff5196fd8a32fc3e759d90c1040dd591b1c0bd97ab83a1c8baaffa70fa96bbe2d556af2379478b0","ssdeep":"6144:1YD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:1YD4wFsYiSAKNH3TY5","tlshash":"e724f894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","first_seen":"2026-06-12T19:29:57.328205Z","last_seen":"2026-08-10T17:58:48.593862Z","times_seen":1100,"resource_available":true,"data":null}},"time_used":2491,"timings":{"blocked":1782,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/sport-resource/search-jsons/matches_zh-CN.json","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:43.811Z","timestamp":1786324423811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /sport-resource/search-jsons/matches_zh-CN.json HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:44 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYE6rETrDQw2ZiKcbY3hScjkNZ4NItxp7j%2BhQmr%2F3u8a9Kn0iL3l2u3JoIiCctsMXStgX9OO1rg6GMd3pkZz%2F4bBV7F0w5Uz2SRdOWLN8hmA5f7jEpt2fraFdxQJhT4cj2eG2ViZWxKEEuNDl1essgCavydsmkqtSQQ%3D\"}]}\r\nLast-Modified: Mon, 15 Sep 2025 14:27:18 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: W/\"c5b2408cf9f2513ff9aa946efccf5fd8\"\r\nContent-Encoding: gzip\r\nCF-RAY: a28b23c2edb90901-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324424=A9f4PzbcOSfzk3eoVr+XyprszbLnN8kKps9fCrMbYukDVxxxKuebTymsGe2NyTQn1UMiFYdUxSLMwyxRo78aLkU9+7rB2BHAmCY4fJIGUYy32JHMArlxp8rhi2Rh0G4ZnxGaGKrzE1zMgNwgZ1uy84a5X39Yk+GBzgWRxE5uT3XtQjXMAE+xGCbUGwjOE39c\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b95e53c3a\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92517,"size_decoded":40285,"mime_type":"application/json","magic":"JSON text data","md5":"fdc9003bb7c1eb79d78624fdd5fbebd4","sha1":"80ecefd4027fff216b2e05eadc57b50c74995fc1","sha256":"b3246de1e6b7764366b90540f16faa306472fae7b8042ee8c51b27600f9587cb","sha512":"336be7c42a38686902c55c1bfca1c09906c7bd2b495e0abf1e500ae068e1d478ac1ee4eb9ff96853f0fc79005fdc98928de37ed2eba752acc16a2c0aa231dce5","ssdeep":"1536:up3TmYKnUJWpJJWD++t4up5+Jk5QxlilJV56wVbI48/l76fiantOo8dK/di7MBOn:+OjkDLy7k5QvwO48/5uiPrKHBOUUHvh","tlshash":"4593e9590adfcb7a0801152e648b2e83a09d47ddb06d62f0eabafd7d5d1d3eb435890c","first_seen":"2026-03-16T03:26:21.213662Z","last_seen":"2026-08-10T03:56:53.666445Z","times_seen":38,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":789,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f8306425eba6e0167bcdb25a31b67ec8f","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.827Z","timestamp":1786324425827,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb25a31b67ec8f HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: u2setZ36/ZBzVhuvjsdh5pYU1izrN4kH5+h5voAyr9C8ytPwlG0hHPzP493lcBKjEOIpTXFdcdX3juM5KmYrbi69jxOimieYTb3biWW5q9EZ/YjmjuucSYQnrGglURrWlrgCF0gVxmjfiYjB9QnKZGLpfmd8xkxybo9eG5xAX/0=\r\ntimestamp: 1786324425820\r\nsign: 4e28767j3n3g164j\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: xNTSktWcceYFE4WMBMapQGB72HWhkPQX\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:16:46 GMT\r\nCache-Control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 6d1fd6dc9e334c76a5f21f896fa13d8d\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93ba03d3c47\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4073,"size_decoded":5106,"mime_type":"application/json","magic":"data","md5":"f9d4f5071bf008534f9b7766517fca22","sha1":"1dcef8a63d3c147ff7f5081c0497eec60c580eee","sha256":"f63f31784e38a9fa7272b1e1c45d4d72306ff27f982720ecdc91593274aa1318","sha512":"deeb0139c4b75d286f4b5662a95a3e1cb7c87fc11d674ab5881602fd43ee00a919153cb47f1ac3c0e58d64382b8d63701f2378508339123b36b1a53d0fe9a68e","ssdeep":"96:eOGS7hTEAzTzef7EcsXxUCQA7Gx4jJ1onRw6THKH8DquGmJINFfHtBD/Rj/FcpZu:VP7Sa+fgcUDQqGqjJIj2BmJIxHXNbFD","tlshash":"48d19ea91241b324a13663fa585c4ec54d8513eaf8f7ea11c20574bbadb208ff69fc12","first_seen":"2026-08-09T17:07:43.0188Z","last_seen":"2026-08-10T17:58:48.461665Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":766,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_13f1f273-ad7d-4854-b9a3-7f3eb8823296.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.375Z","timestamp":1786324427375,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_13f1f273-ad7d-4854-b9a3-7f3eb8823296.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 78902\r\nConnection: keep-alive\r\netag: \"5cae9008e22ccc62c09f38e52e664de6\"\r\nLast-Modified: Wed, 10 Dec 2025 11:49:58 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRcb%2BZNBo%2FIgpwNGU36y7oryf6rSCDRBGOkzlOALwYHEO5VnEK5x4PI0i3ONYotEJ%2Bekcf56obUouWAHfsyMJzWd7eS%2BHHwqSbr4L0BWxzrYUPsnTyMntk6XayJ4Z7r4ZjW07s6H3xREQ40r8OmG0jI%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nCF-RAY: a27d59a7cc43854b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb5a0386b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78902,"size_decoded":80057,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cae9008e22ccc62c09f38e52e664de6","sha1":"a1f17e80566874fe9706d17a46a2d46f82bb4334","sha256":"3148a6d8c30b8b20d81c8e0873dc24170d6be114b7e3570870da05e12202d770","sha512":"49b2777a4621bd265be1b02773561be3504f5d1dd0c104f8ddd0781e36791a1f12be3093743baa2a7d21c70766e76f7d5d475efe312d725a1959acf4a1625551","ssdeep":"1536:blYjfVyd06MgAmxW/kYHFfuwKFhzwOxl3juR+GfDIroclZ:bc606u75s1wMGlfTclZ","tlshash":"5673012aa243088ae0f71039184a6be7f90d11a1e7e85fef84e7570bbe0df413d65e50","first_seen":"2026-04-24T23:10:16.877965Z","last_seen":"2026-08-10T17:58:48.563135Z","times_seen":960,"resource_available":false,"data":null}},"time_used":5028,"timings":{"blocked":4081,"dns":0,"connect":0,"send":0,"wait":923,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/hls.1781011881923.e2564250.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.889Z","timestamp":1786324415889,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/hls.1781011881923.e2564250.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6d374\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324417=Ptzdt+FUuUNHZKTtlKr9SiHGktL/FNC6JMSTgGOX59JwdiBMJedi69SsGhwJjdF5psDMb2A1yYaF8EUvxF6vE6rbfHtIwGqZXJnqACd5VcbRw9c2RGR4Ni1cQLqRHspedTtDRTdulNygSPBsYxB8wKLyo3uVv5HB6sLvnaxq7c8YpHm1WnBXJ1hcT6Ikg22V\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b7d29381f\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447348,"size_decoded":120517,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fbc8180c513457c408ac636f0520bd80","sha1":"75e0852addcf99be60c5f9c21fd5a6ece00310e4","sha256":"2671321388c721720b1957e436d203ef5a4f61d2a0a10baea60333526fc422c7","sha512":"2334e2099976fe885e3f2b9a7c54b5759800b7ce45562aa09d2226b1011ad2aeb2be89f8cce7d16991278d78e66af32763af58ae06c43c2c304968bf50ca0a53","ssdeep":"6144:UckAO+G0MgADb9d+yGzAHFVtMcNAsIK2uOiYEqB424cRjvyIGCcbHmVf0gBhL3HQ:afBnlNT","tlshash":"1394f955fb5072bc5f6ba256a42f1126933e1892204c9c74f27afda19ef0984f03d9bc","first_seen":"2026-06-01T22:17:32.419527Z","last_seen":"2026-08-10T03:56:53.614007Z","times_seen":23,"resource_available":true,"data":null}},"time_used":3041,"timings":{"blocked":1709,"dns":0,"connect":0,"send":0,"wait":502,"receive":830,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/13575.1781011881923.cda1d494.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.892Z","timestamp":1786324415892,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/13575.1781011881923.cda1d494.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2f964\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324418=B/NV+WXMCBvPhYUDNiUBVX0iZtuMbGLWLaYPqvS106sdQFnEiHVAu/Q3Z2ZnI0nyK/mbDBjuzYZXUl5Igpo1qRzngWOto80aBVQTgKARHZ9D2JO4MYdAj/0XKLJJfc6M2yZRJty3XYT40sFpP0+i6hktrA7Fv8e7EsiKRrbxESLnSEvx9k8iw5SUfssJVL92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b7de93f2d\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194916,"size_decoded":60169,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"65e5fffbcacf52710ad963a4aeede3be","sha1":"f9c16a3c86649aeacf18e736faacff0cf78192e7","sha256":"36f42498ee253b0d1d5e7ec8bdf406f05c4c91e72f64169b1ff67435d2069099","sha512":"96e8263c115ca75ff63f6ce70ba8ad5af370662f86c2f95a8960a5aa5a30ce4134fa01d7fbd1694ce37f111b69e3e418f0542a7ab1bae4cec570c8c3d8d08986","ssdeep":"1536:917BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:7jHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"23141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","first_seen":"2026-06-12T19:29:57.266361Z","last_seen":"2026-08-10T17:58:48.576135Z","times_seen":1099,"resource_available":true,"data":null}},"time_used":2622,"timings":{"blocked":1908,"dns":0,"connect":0,"send":0,"wait":420,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/83876.1781011881923.7ce40e6b.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.893Z","timestamp":1786324415893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/83876.1781011881923.7ce40e6b.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4007d\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324418=B/NV+WXMCBvPhYUDNiUBVX0iZtuMbGLWLaYPqvS106sdQFnEiHVAu/Q3Z2ZnI0nyK/mbDBjuzYZXUl5Igpo1qRzngWOto80aBVQTgKARHZ9D2JO4MYdAj/0XKLJJfc6M2yZRJty3XYT40sFpP0+i6hktrA7Fv8e7EsiKRrbxESLnSEvx9k8iw5SUfssJVL92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b814d3820\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262269,"size_decoded":77907,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"abf84df30621edc23a82d05ff0b8a83a","sha1":"e727ad94ce5d5f5b8fabec0e0b5a966fb6e6594f","sha256":"c3b02d056ac034939c3ff75a10a2da23f5f05f96a36ca1e5cea2157ce0fe12be","sha512":"db2a2a00f51cc6f75cfcbb6d988df74403fae93255982a054710e5f87a2d8407f4f8f02fef8ef1a0e5edb289736296b2d11a3b77cad6c6d9089bb831cda45be5","ssdeep":"6144:0/rOTU2/xB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:0iUjytgPJPT3p2YpHrrL","tlshash":"2f442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f265f990be7555c927fbfc","first_seen":"2026-06-12T19:29:57.272405Z","last_seen":"2026-08-10T17:58:48.318569Z","times_seen":1092,"resource_available":true,"data":null}},"time_used":3891,"timings":{"blocked":1926,"dns":0,"connect":0,"send":0,"wait":1258,"receive":707,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/css/home.1781011881923.38488e2a.css","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:42.288Z","timestamp":1786324422288,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /css/home.1781011881923.38488e2a.css HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-163b3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324423=xUk7eJS/uPqUk2PK/oTTEAvlv+nett/m9//2QebifEE/YbJzxs0oQ3OI048zP7K/BzlyczLulVwv6wku/pGsw5XoO2DLuGYcqP+HeikooFaLJznAJya/TVxEmT+UOZ4VMvxApoEsfeD/6WD4A6Vlzrn2+L35yMIdQIn+nLUVAkdIG5kuQWiYxk/Uw1Ny//WV\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93b945a5e8b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91059,"size_decoded":33286,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"e74f15d7fec8fd844f3f07595fad8d36","sha1":"6b072e1cd8db98eabc09e33e5aaecec0fa1f385a","sha256":"e0a518c123b57bf6db4c12b779cb9414056760733b9d1d59ccd160d4ce0f08d2","sha512":"74d96ef5f45097c02d494946f446bb8a1d5fb7b89389543f9c278b5b93678e4b50e75ae534fa8ded5c2b377381acd47403d8baadcf01676bed44d997eae44d1b","ssdeep":"1536:fwRzO3RM7jufawS2d3a8WiLKbzGhbG9jpXdNdp9khN+sJ/:fBiuSJwLUK09j7p9khN+C/","tlshash":"20933b76a610253db427ca72baf05bd8b524c846d7634a3df2537e25cbc72f21236394","first_seen":"2026-06-12T19:29:57.241174Z","last_seen":"2026-08-10T17:58:48.319435Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":1664,"timings":{"blocked":495,"dns":0,"connect":0,"send":0,"wait":1135,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/32542.1781011881923.e967ca7e.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.756Z","timestamp":1786324425756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/32542.1781011881923.e967ca7e.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-5fb6\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b9d4d3f44\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24502,"size_decoded":3703,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24288), with no line terminators","md5":"b6632464b5db99b7cf6b8ce495440c13","sha1":"1e9152c90f0af648525dd5d361ed45686a6da85d","sha256":"1bc2b74ad2dbf29c416aad5462702cec6a6bbc276e5b312d16d64c3218f2b426","sha512":"6857cc1e3cd9ea0bf4fe283637a2147840d68d3ad9817c05e11cb107bb42ffc80defa35872f3b231555a15dd653a63a051aac7719235e9c2a0d253a5b0c7c3f7","ssdeep":"384:IZqxG7HnUen7QA/O65KjWYUAoT/9KcIWHOgpOTfISdk:BxGb9KjW/","tlshash":"bfb2d50ecb8cc2d9be211fac421d90610650e8f7e58759ec95f6ad09f93c60e325fa6c","first_seen":"2026-05-02T01:47:15.946252Z","last_seen":"2026-08-10T03:56:53.623394Z","times_seen":26,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/sponsor/sponsor_web_3.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.822Z","timestamp":1786324425822,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_3.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:48 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-9faf\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324428=DSyzgCHhjF4Bg4+7k5rJvoHFOnpQqlFDlme+jAyCtDmh3s22hqALMnpdwVfEDsoRwnJVA+/xQ7R9kAejmeCCMMeynpeUFkCdYda2AN5yGZRnqp4GGY7NdDfKivBo+ufcRNfj5EhEFrHx0XF2/cDI8EHdRugYloTaFcYshDZfxIKU3hKC7B0jklMJxKP96M9F\r\nAge: 144599\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba76b3852\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40879,"size_decoded":41252,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"c26161f438986f6e2d677c34d653285e","sha1":"faf6c47a013a9944bb8cac197688908422992039","sha256":"58d11e173550b3420b35c4e4be3eeb76b59ac790d9fb59b535ffe55d3b470fa9","sha512":"97649de556447ef6aa6cdd7d0bec46837cfb328335daa3b862cbaa5e23ca5a8f2af296703c9e961cbad02bb797ebf1f99ced2d1d245fbbb3a428e39d26428c76","ssdeep":"768:ub+4OMIuYE3McXMuDR64Q7sRFKJdsCA1Hunj5tyKxGGTVtkDGlT2oTO:uS4OMXYODNDR6XsRFisCAk39t6oi","tlshash":"db03f108254f2d4466ec90bbc7a1e0f7ee1d103dddb7e30c35a685163e46ca559fa0e6","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-08-10T17:58:48.577131Z","times_seen":2346,"resource_available":false,"data":null}},"time_used":3623,"timings":{"blocked":2606,"dns":0,"connect":0,"send":0,"wait":683,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.832Z","timestamp":1786324425832,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: 1uK2QwobpJFZFaZvcoIe4k+y9NEvLMO1miB2ePWVwk6Z/FyKLaYNUO1OlVjVjw8t4B1PH/+vgdWK+oR/6dScsoaG8lmUCcGhhJeJkAQiypYWmpI4+MHdPhZ6p93jbvrpmU+MVOM1HN9WzETSwcND70e553dnjtjwo3swZL1aGP4=\r\ntimestamp: 1786324425820\r\nsign: 4v1b4t6o1i2t3s5u\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: AXkzZcFPwaaxKbwCQkZwTkGdKD8WQeWY\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:23:47 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 1fb9b9d7ff254cf18c60a749784c5d88\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba40e3844\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2132,"size_decoded":3165,"mime_type":"application/json","magic":"data","md5":"106f3945cd190686105ca0cd9239dcf7","sha1":"4927425a7bfc7d8d5704f7b06d983eac99322120","sha256":"ad07685e82847edea088e3b846e367d2e00ca38fa0b60e4e3c46a841ff5c16dc","sha512":"dee3e3dafc2cd7d934e2a2e436586120668e49671866650cdaa6e3b8c050264033aa4b0b1932ffff50e71b735ce45ca462b6d27a8eb05dfd2829567c3648faa1","ssdeep":"","tlshash":"bd613b176addf316da1a8e75c5328de9691cc329775df8e3c5904f2086eb342306d650","first_seen":"2026-08-09T10:14:04.765752Z","last_seen":"2026-08-10T03:56:53.620631Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2087,"timings":{"blocked":1044,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size656x844_f676ec47-4b6f-4d37-b476-fd69f2381a1a.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.388Z","timestamp":1786324427388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size656x844_f676ec47-4b6f-4d37-b476-fd69f2381a1a.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 31452\r\nConnection: keep-alive\r\netag: \"2c3c63fd994d8d3c68a43ab204dc29af\"\r\nLast-Modified: Fri, 24 Oct 2025 10:14:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65lbwtQ9Yd47rRflgqljvf53h1ZsVvuI%2Bz6wQQJHUmNCDCse9SUd1dmBmGRbvyS5HSjghkDqwsC6nEZmN1pxhIQW%2FzAu3XJrKmyI%2BtVKUu4XaA3d1eUbkm6Fw%2BvdUw5dv78Pf4aMalYnw3YNekRaEvI%3D\"}]}\r\nCF-RAY: a27d59ab8f6bf9ad-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb866386e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31452,"size_decoded":32607,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c3c63fd994d8d3c68a43ab204dc29af","sha1":"f5da9ac11b57d67e7b0a21bdf3d2d5134eae1e2b","sha256":"b38e08c497bfb9faec2e112ff1a093f8938984e5c098484f7eca99900d1e1c72","sha512":"e83fd01696f5a79d5b2ef7ad13a442455c94977c810bceb5a6a656e08927f8a160a5b6be8e8e04bf10c0b2b721254319cb5fe15982a7ae0f7272a25a61f56127","ssdeep":"768:JXiQbj17p1iaPPQUz4ATG+Qkx5UL1ot3u3QO3xOBiw9urQ8:VdJp1iuPXECXUJ6e3QOBRwYQ8","tlshash":"74e2f1f968c3c9342ca43ed546ff15d58dd8b3d475e60863eb222d049137822e9c9e2d","first_seen":"2026-04-24T23:10:16.870222Z","last_seen":"2026-08-10T17:58:48.385085Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":6064,"timings":{"blocked":5379,"dns":0,"connect":0,"send":0,"wait":347,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/css/m/index-399e2569.1781011881923.adb439b6.css","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.878Z","timestamp":1786324415878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /css/m/index-399e2569.1781011881923.adb439b6.css HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:36 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-9d8f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324416=wJN/YjCzHxoo2k1yl9XvHYteNyhust0JoM3QzzIPXC74oYImz+kZDV3rg/oGAkvuRagLG0MJZaySknEMi+fhIkT0CJeS+hnKVuW4XRmlZVPqty8HJobQG39Uf3bEzc9E+XGWLYbuf59RY8RKDBQTt+41VdO0BlkFS45g+vvGgj+F0fadT/Io8tljcV2HJf8U\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b79073f29\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40335,"size_decoded":6725,"mime_type":"text/css","magic":"ASCII text, with very long lines (40335), with no line terminators","md5":"2d6be5c2107b1f6c20b1ca4ede5f944c","sha1":"52dd97dec91c988d518a1afbcc78db4479af7131","sha256":"f4390e6bc7737b8ef2edab3d46559df41c6cc15c90895b78c0abb0c891491c62","sha512":"ef05a7f64e068813e00a58472d2ec2a40b8b526b4c439a72811dd3eaef81e68f20086eb44f1be92454f4fccdb1ff21c5f5944ec12b73ebeaf070ce13b8710c83","ssdeep":"384:mWYLVDSKjoiuudqHkSn2APiQKwKOTDhMnWk:mWYLZsNPtTDhM","tlshash":"e703f137b161132862d75985975432a4a13ac40bb7139bf9e38dbf2f9acf687127018f","first_seen":"2026-07-01T01:07:30.876006Z","last_seen":"2026-08-10T03:56:53.695843Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1083,"timings":{"blocked":-1,"dns":0,"connect":337,"send":0,"wait":397,"receive":0,"ssl":348},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1260x1156_03543abb-5967-4969-b0c5-87347b24c4d6.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.321Z","timestamp":1786324427321,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1260x1156_03543abb-5967-4969-b0c5-87347b24c4d6.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 148768\r\nConnection: keep-alive\r\netag: \"2c43663cd3eeae27a4e751556307f507\"\r\nLast-Modified: Sat, 06 Dec 2025 06:32:06 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144599\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yW5vD511JPx%2FkjRPPFwSNGkRJgFyei7JWt5vHuw32XQefWe2aperopVqfBlim0tBumT9umj6ZRIxP7HpSMWFAx2cMGTchXpxI8CzRqLhQqCYrgVdqFi7wdKlox4PlXxi8sRBUv3WtFZrEvQZWx6OpfE%3D\"}]}\r\nCF-RAY: a27d59a50f54ed89-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba9833856\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148768,"size_decoded":149918,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c43663cd3eeae27a4e751556307f507","sha1":"231f268ff0432bf21cea23c1a2cc12003c10f7be","sha256":"cdd625ad600403b36dcbcf589300926ee189bf9d47b2cc2c0715f91c5f6968a5","sha512":"d9ba3dcde4fcd162ea361339bce1c4b8313875af3fe94297a7a55cb8d245e815421dbfb9e5017c19e6a6d50b5ca654e02a326190c2e300b0fd369aa245726567","ssdeep":"3072:IgpSjBxCU8A3MroXYq21tKxGDaxxoyg4KtBHs7T8YMA4q8B4:IgpSjBGYuOYqGKx7ygoBqT8Yln8","tlshash":"3ee313b7f29017bdda91ca376b9f02f832041f64f4077e34a5509801839daada2bb572","first_seen":"2026-04-24T23:10:16.7755Z","last_seen":"2026-08-10T17:58:48.207258Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":2211,"timings":{"blocked":1635,"dns":0,"connect":0,"send":0,"wait":349,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1164x872_0e80d399-2c93-4f64-89db-61a96d3b05e4.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.338Z","timestamp":1786324427338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1164x872_0e80d399-2c93-4f64-89db-61a96d3b05e4.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 112700\r\nConnection: keep-alive\r\netag: \"62970d9f3c6d5069ad898724c19a4277\"\r\nLast-Modified: Sat, 06 Dec 2025 06:28:28 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144598\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBYsWgC56QpeC0ry0zmSVsI38u0PEJgTbwC7ppp9UlL1mxM29OmKp%2FCrx13UKsKuseOBbfAkzdLfGeIhzDvkqpI7ysE6VpuWOtp8o082U0rFLrZMgs7AYjXinPJmEDhMDafESLr7bsRQiXoXeMEx0pw%3D\"}]}\r\nCF-RAY: a27d59a909a9dda1-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bab5a3859\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112700,"size_decoded":113850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62970d9f3c6d5069ad898724c19a4277","sha1":"2b378bf8f829167d47bea58444d399fe47052617","sha256":"7b17d39fcff43e49c7a9cfa070a2e9ad41f466c464e347b7f2a91b705f6b5161","sha512":"00e247d65514ff4a5e8032c591faf83e4af220acd25b5b2fb5883c3f85ec349284e1609489cad86537bcbdc7718e2bc956f6b2c9bfef0cee09b54f036b9b495a","ssdeep":"3072:2Q4KKXKBHjDhDCq5qNrHMlyp8Rod8oucXQUEyr:DjBHRCqwNM4dw25r","tlshash":"e7b312dd1216b6b4a8b027fb23ccbd8944cd2ef64e787e96d8a9c8513545b2f40f4d42","first_seen":"2026-04-24T23:10:16.754484Z","last_seen":"2026-08-10T17:58:48.208532Z","times_seen":976,"resource_available":false,"data":null}},"time_used":2554,"timings":{"blocked":2069,"dns":0,"connect":0,"send":0,"wait":371,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b0506ddf-52e0-4b2d-8f59-16f795505312.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.371Z","timestamp":1786324427371,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b0506ddf-52e0-4b2d-8f59-16f795505312.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47302\r\nConnection: keep-alive\r\netag: \"69bae2574526d5faae2cab421295d6fb\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:22 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144623\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCLJcu6iH7QHcc9qoc%2FQG3taFKPCi0YFVUcKwPlIpzO%2Fi%2BPX%2FWbZ0sVxtqyzqZi4JSxHImNj4YxQt51hoTiVAnYoLPsKuIMiMACjJltdmxLi9GErCfqRHNrQoaKSPmmPZR0aDNOG2N%2F7odkj%2BrHIArw%3D\"}]}\r\nCF-RAY: a27d591918c70399-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bb1fe5eb2\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47302,"size_decoded":48461,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69bae2574526d5faae2cab421295d6fb","sha1":"9fbb080feb70d0129b259ee1836a307e2f43a7a7","sha256":"24dc34c37f47f8b318cd186472dfb0aba29bc601bb589497d9131322abf3f12f","sha512":"b6b43f6f2a27bf41323dab6e956cf9e581be28a51078e3ec6568b79a145135dba1644d3e3b8e0a5bb8e7c8fdc132ea34c5002e2c81fa15a9e29e581767b9ad00","ssdeep":"768:3ZnM3sRPLsymAdeJz26xNEyuGpVt/5NS6xUdP8Hx3JZa1pASN7ZWjcTH:JnusBypuGLZnStl8HcjASN7ZW","tlshash":"6223f2c4856c2f711255d3f8ffa06b48c6783940bff8afb69f360a65186d2d2c90a44e","first_seen":"2026-04-24T23:10:16.805393Z","last_seen":"2026-08-10T17:58:48.448423Z","times_seen":958,"resource_available":false,"data":null}},"time_used":4159,"timings":{"blocked":3701,"dns":0,"connect":0,"send":0,"wait":402,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b82399e1-d771-428f-9811-f7e15cda0f21.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.400Z","timestamp":1786324427400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b82399e1-d771-428f-9811-f7e15cda0f21.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 103194\r\nConnection: keep-alive\r\netag: \"f704aac32ea52a31d6fc3ed2cf265934\"\r\nLast-Modified: Sat, 06 Dec 2025 06:26:28 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144623\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dv4yjYFQN4oWxBFJ4%2FXgwHzLNKGj6yfQUdkP5pVLXoP5iOsqpCWootlfW%2FCHrbZLNuOenMmcIuenSLSjuXGzlOuYMP7iwT7ZT%2BdHIRI3HEM5nHJoAmkYtFodD6h1YxMC0iF470cLCDFMrYOm7fTWGQ4%3D\"}]}\r\nCF-RAY: a27d59267e8b6aba-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bbc1c5ec3\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103194,"size_decoded":104348,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f704aac32ea52a31d6fc3ed2cf265934","sha1":"45282832d890a7ff431a3e080bf45820996e1377","sha256":"0177775ecd75f420bfdca35ff7886a7e7c2be56137652084986057b7e1566a09","sha512":"6f0b988c4ffe01ea848e549c9856a39d00f127a59b0bee21b29601f055eb98ef5fd349d6b7290257bb3845ecc7ea55a6d103173ba7e689c1d4303fe1c0e8ff9e","ssdeep":"3072:CgsNR4fWsUvdSDU+qlX2KtmzD/CbIGM1:Cg8R4fWSVKYibIG","tlshash":"1ea312850993c5f1bb7598259f7acb20a51a7d70f392ef21cfa94f3ec0b50799a14242","first_seen":"2026-04-24T23:10:16.761671Z","last_seen":"2026-08-10T17:58:48.453395Z","times_seen":1107,"resource_available":false,"data":null}},"time_used":6852,"timings":{"blocked":6315,"dns":0,"connect":0,"send":0,"wait":368,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_73525908-fb7b-43df-ab6b-ee9a1274a74c.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.403Z","timestamp":1786324427403,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_73525908-fb7b-43df-ab6b-ee9a1274a74c.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 26068\r\nConnection: keep-alive\r\netag: \"da33ad9a009a89e0bc0c508e6f690949\"\r\nLast-Modified: Sun, 09 Nov 2025 14:20:32 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144603\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjIaEuYB7hoT%2BXMK3CH0sOFzYBivVLPrPsBrBXfW37eMW2yqBS9iikvlrpaeH2mttDUNwl9y6ERrmv0w4ukgBNRBb%2FI3zsHGNTuhoTMXZ06j9qhWE8NsFAHTGJpS4YW%2Fta2mnjwIu31IwDVAV58HYr8%3D\"}]}\r\nCF-RAY: a27d59a7696209e7-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bbc3e3f6a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26068,"size_decoded":27221,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da33ad9a009a89e0bc0c508e6f690949","sha1":"52521f6667f933538fd61fac097ba79db283c0cf","sha256":"12889485842cb12ca8c77f0a9c71ac3098cf3c9898b3cdc299145280170962d6","sha512":"a254ca97846b0d3216994f8db6adfee226b9b2c6120a33c1ec1f0a635f658f99e6b2c2407dffcbe79d5dc65aca0869aff746d751347eaf9780083b0e25103fe0","ssdeep":"384:+w9CBmVKxqlIavZBdogyHrWz/1ope325wQBJKn5QahMi7HjOMdOdjawQJoYh:+yYmV5Vv7WZLWhop42525Q0M+HujawQ","tlshash":"e9c2e1c2bd2de50a9b37c27e24a6c30f01c497808faa2c677736129d4d365abb56900e","first_seen":"2026-04-24T23:10:16.863494Z","last_seen":"2026-08-10T17:58:48.221039Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":7060,"timings":{"blocked":6351,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T01:13:30.570Z","timestamp":1786324410570,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /m HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T02:55:35.911989Z","times_seen":17829037,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/api/tenant/domain/list","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.720Z","timestamp":1786324426720,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nx-request-source: https://x39p.top\r\nXign: BfAXEoWwVoIViiivzP/+GayNQlYvby2OlYc9+qW2IN8SPNTsvViQ5HyTxYz7MfcDmLXCKKqV66NS/r3JI+fRHyDPmMDxzMM0/VI1/qxdZMCF5Vr6bsIzn4yinf6GfaIhT4vr6Y9ozeYnHPdo5Yy045734gtFX5qa6kc0uFBPE88=\r\ntimestamp: 1786324426717\r\nsign: 4d186s64594i4r3b\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: TQpcc2TMaDRwiE8wi6x2pW85FFX7Hj3E\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Mon, 10 Aug 2026 01:23:47 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 3617bc9c88c8485d9c533d15146139c3\r\nPragma: public\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93ba2f23c4a\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108,"size_decoded":1825,"mime_type":"application/json","magic":"JSON text data","md5":"5d9e96bd132a2c24281ae50f2b09efe4","sha1":"503ea18100d0f1573baa195933355a1372e93841","sha256":"7f205b18b5deaae96622989dbc8ad73999a9616e96ef26d909f19525deadb328","sha512":"ab5a589dc81944d2fe05d656777e9e490d42a2fd68c7e577387cfdd47c9b0c5276ca2f91a3868407c373e500d00bb5360a5ae035c7c0cb1addf47f20755a268b","ssdeep":"","tlshash":"fb11c6101c6f12c8d6e8d29263503345388d8b76056db91b69d6b74fae0583a32120a4","first_seen":"2025-08-29T11:05:53.144028Z","last_seen":"2026-08-10T17:58:48.488784Z","times_seen":2669,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":570,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bdd30f19-a4d8-4eb3-b2d5-d24180d2e353.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.363Z","timestamp":1786324427363,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bdd30f19-a4d8-4eb3-b2d5-d24180d2e353.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15228\r\nConnection: keep-alive\r\netag: \"6a267f5e09a632be650a3775bc739a4d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:16:53 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144600\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTqO0MU3ldz3FWn95z28xvYkRK2vMzA9wnywgpg6itDs71Lua6WXQEm2GM9RaTLINjtcVUoK4qqx86TDaMLP0gWf8beL2s0ARTzvrjC6QQOvmHAHIjpbcZBGqYdwBZA4f29AY2oBiHMObG8TGKmwvMk%3D\"}]}\r\nCF-RAY: a27d59a46f6cdda1-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93baf9b3f5e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15228,"size_decoded":16375,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a267f5e09a632be650a3775bc739a4d","sha1":"5289878ed6bc3c5b6b06a9986ec15a3c6946fcc5","sha256":"88151c14f52fcf8359fe0a5b86c3a14bee6df5f37cfccabd75a86a559e3737aa","sha512":"0c3f82afc7a20b69b90d2ca8d6d00e07c5c097353a5a81024069fb7ed724ee50c335e9fed0860cc92d1274939c0476cbf8cc49b058813775df45f96a3028af3e","ssdeep":"384:1jnjswfCwfOcnPcxsiO8JvyITPiO3BBBJRqn0Rf/dzVPC1D:11fCwFnUl1uwRqnc/dxa1D","tlshash":"e862c1c96f1cf1dabc9c9d3c7a944d369d0c4472a4d804e980b69d2bf98eac78501f2e","first_seen":"2026-04-24T23:10:16.724806Z","last_seen":"2026-08-10T17:58:48.52438Z","times_seen":956,"resource_available":false,"data":null}},"time_used":3494,"timings":{"blocked":3087,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_df036cfa-66a5-49f7-b863-3c22d1a3d180.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.378Z","timestamp":1786324427378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_df036cfa-66a5-49f7-b863-3c22d1a3d180.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 120978\r\nConnection: keep-alive\r\netag: \"1af718e662844a31716cc9bf3248f8e4\"\r\nLast-Modified: Wed, 10 Dec 2025 11:52:31 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2Bj9IboSYzLtohOt%2FlUx9uSpz9AQ%2FS7krrJGO3OXtmc53cI2z8CAWcpnfgZvwhSJk42TvLNY2XoL88LFgIxX028Usw0RbsqYn4BgeBWkRYA88XRgnxSyAm3HuPskRhagvv0qnR8xRUF7TpLHnNvbhcY%3D\"}]}\r\nCF-RAY: a27d59a8cc3c04d4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb584386a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120978,"size_decoded":122132,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1af718e662844a31716cc9bf3248f8e4","sha1":"e54b87093f05f4d0c5d96fbc689f0ed37ffcbcaa","sha256":"670ccce96c9f21fc7364791b4870e1915788e14fb105a16cae131cae271279b4","sha512":"93a7b9e3a5b4438343a8f1abe967cf1b3d21a347b42526dd8604da5f9c953c14ad2dc83bcd7e3f340a9b3b90b9a4c98f90ec88c689875b8e2b0536f0b9ca7975","ssdeep":"3072:nO0/MDrjGP/ngyzlMkxT730AhwPBv78vHWJ8AxCsDozmmeYj:JgrA/nnKBrpvovHWLxCqImE","tlshash":"a0c312ee7ec309b8e112676d12dd07968e16e06f482b0d959e2f40392b02716ef7dc5d","first_seen":"2026-04-24T23:10:16.785822Z","last_seen":"2026-08-10T17:58:48.449122Z","times_seen":978,"resource_available":false,"data":null}},"time_used":5380,"timings":{"blocked":4642,"dns":0,"connect":0,"send":0,"wait":345,"receive":393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/m/index-a3dad144.1781011881923.e6ab9b18.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.895Z","timestamp":1786324415895,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/m/index-a3dad144.1781011881923.e6ab9b18.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-565f8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324418=B/NV+WXMCBvPhYUDNiUBVX0iZtuMbGLWLaYPqvS106sdQFnEiHVAu/Q3Z2ZnI0nyK/mbDBjuzYZXUl5Igpo1qRzngWOto80aBVQTgKARHZ9D2JO4MYdAj/0XKLJJfc6M2yZRJty3XYT40sFpP0+i6hktrA7Fv8e7EsiKRrbxESLnSEvx9k8iw5SUfssJVL92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b802f3c0b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":353784,"size_decoded":114359,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562), with no line terminators","md5":"d337aeb01788561f9ef1881849ddec70","sha1":"364f854098797338ffd05e3eef17d5e5c1790b21","sha256":"36552adf11a80e25925974f590f6fcc5ff2b1206cfa355b2087dd2f559fd60ee","sha512":"3f762deda433bfda5f1449ac84462236344a5a1223c0d8c16259af5a0b0f841e650ca2e2507673ef969913a84bc0e31bdf3dbe3ef1b85e9207228cfe1871ed0b","ssdeep":"6144:RQbhFOufhtRykiG5LHEY/TJ/Pm1lVs4h+Lg9uKYiwEqLD9q5f:OzBHRykiG5LHEY/T5u1lVs4h+Lg9uKYo","tlshash":"c9741be1f76ce1bd434e59ff7a22d094d01d2b41b0c86e49c25e5a44ba6f385eab04bc","first_seen":"2026-07-01T01:07:30.821451Z","last_seen":"2026-08-10T03:56:53.652045Z","times_seen":18,"resource_available":true,"data":null}},"time_used":3305,"timings":{"blocked":2492,"dns":0,"connect":0,"send":0,"wait":424,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/sponsor/sponsor_web_2.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.821Z","timestamp":1786324425821,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_2.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-a049\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nAge: 144600\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba9ca3857\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41033,"size_decoded":41402,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"66036fddf71ff69f45c146ca63883070","sha1":"4b3076a271d5042ef1b6cffc2ff49f421a819f08","sha256":"93c59a52fe04b0050dd4552a135177533afbe2dec54f10c516610b0dee857e0c","sha512":"29c2fc65e144e5d13c011e4897e0bdf771c7b4c249875eca4fa25589625696c71ec015e7e8ef3a5ee45f2a6ae9df3663da0bb736a6fb13c9628f0d0957827c71","ssdeep":"768:6eyNeN9huVfPKv0KhazApErcA6cFKSkS+pbTCx81TxUqIUgYWxDHc9wZGbYGniRl:6eXXh8KcQakywKK++tTCi6xD89HbxiD","tlshash":"b003f15c4c413e7777f19baae00ac84224d11fd4fdd5e3e61a8bc659a843a68bc2540e","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-08-10T17:58:48.36254Z","times_seen":2361,"resource_available":false,"data":null}},"time_used":3605,"timings":{"blocked":2436,"dns":0,"connect":0,"send":0,"wait":1140,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/img/default.4c1c4cca.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.823Z","timestamp":1786324425823,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /img/default.4c1c4cca.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-226ed\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324436=SewwZXC5o77Q8hpIdkD415QoaGmibdD+KUGaWm9kKVPJU76cjvZ4ABfwgLqXlPnM6LOvkP0RX+FoH+/HJDIOQJTgS1FZNmj0riGJnKEEsoq1GeqI8lZS8EfVERvXxDKCBVtpn83xvQvcWPGr+/l/zvoL57JxjIvPnsywmebz0UF2I/vI38ZeHbpo9HvCByHl\r\nAge: 143323\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bc44b5ecc\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141037,"size_decoded":139979,"mime_type":"image/png","magic":"PNG image data, 750 x 848, 8-bit/color RGBA, non-interlaced","md5":"0da1064c2f890988592b2c9dbd1606b9","sha1":"1fff321fe2f34d76d0bf1eff3dba9b7729af7a81","sha256":"57774d708c26faf719595ba197cfb34c4a18a107f6d16cc27de1a06aa475fe48","sha512":"b858be1a7049d23a55340a49a1a7fd7bff961b1770d8af9334c8a1ccf923b730f5179a4b56fab0bd504f509d13361b0189815affa0716f3811a60b4540a1ae8c","ssdeep":"1536:YIsrWBCNcoophEwytA6313pr/+ke8c/kjDaBKn2d4Gxao1w+Z44y2XrHKlajWDxx:Y3raQ8D6313pr/d7laNqWFiwcVIW/b","tlshash":"0fd312e7aec1e2dbcab9fc7f099c689b9096cbd5afea4f472e15b900cb41014d505d01","first_seen":"2025-11-01T17:14:36.311047Z","last_seen":"2026-08-10T03:56:53.638823Z","times_seen":47,"resource_available":false,"data":null}},"time_used":10582,"timings":{"blocked":9994,"dns":0,"connect":0,"send":0,"wait":365,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ad0ed5ff-8fa0-4231-a619-ce0616ad2a8d.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.369Z","timestamp":1786324427369,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ad0ed5ff-8fa0-4231-a619-ce0616ad2a8d.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43980\r\nConnection: keep-alive\r\netag: \"fe9109b6cf4f5478cc8e8fa2df5009fe\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:15 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144600\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnePxTC%2B6wgBuZCiJVx7PdxSLwh4Gq8P9ZnQEezwsWk6cRggY2n5RaQuruM%2FYFFj73LCT1A3p3SzLxmVzZI9hHm5IaJaI6AmTIEDZpHmi0R1D%2BxirkKSRhBgDURIMqdWGDvD4yVXJ4ShFCHLAppsekQ%3D\"}]}\r\nCF-RAY: a27d59a87d0a09cc-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb1423865\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43980,"size_decoded":45133,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe9109b6cf4f5478cc8e8fa2df5009fe","sha1":"c379459affae382d1bb8ebcc637a880c0ccc284f","sha256":"8a0f41c270d457f16992ae4d9cfdacaf31bc2e03526f377b557111ceb90bc056","sha512":"4d95fa57a6e2175f2e11a07e15ef45187a3d5e44ad567ec4634bdf5e35c37e1c88026663fdd6a583cf0e1d665f0fe8d12cbaa535af6189cb88977228ffd3c5ab","ssdeep":"768:mD/LEFkjJ0uG775vp9Y25iMxn46PWKhqrJ0bAbhtI0iSRXbs6nuxV8fnxO:mDD9jJ0p9J5iKnQKEriAbhtgcbspx","tlshash":"4c13f180b6ebb93680296123673378eef9c47a6fff44872aff82464699133743119d15","first_seen":"2026-04-24T23:10:16.768892Z","last_seen":"2026-08-10T17:58:48.49412Z","times_seen":954,"resource_available":false,"data":null}},"time_used":3939,"timings":{"blocked":3554,"dns":0,"connect":0,"send":0,"wait":345,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/18936.1781011881923.c4835433.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:42.285Z","timestamp":1786324422285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/18936.1781011881923.c4835433.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:42 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-13e5\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324422=8dxcc8HeWQI+7CybPz1DpXyiZzA/cXoJNbMRPQKqmVTq0EdnC+OHlGYA6RqWFF0dNy0EdA/9hOhIiVGjkRVOX07yuE+xmvv2KlR8DZZcgP2LDF6kVNkL5cMMSZk6Si8vyYweajkpMKadx9n5rVr/00fJMcWAAjcQzs1b+B9JD3yZrWsSL0q0cYhO+Fru4oPB\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b8fb83f37\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5093,"size_decoded":2672,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5093), with no line terminators","md5":"ef933198ad34a7c7161b09ebc222fa1a","sha1":"dfe195c35c6ec7eb06f6b74d0913dc2f1744644a","sha256":"72d500e30f9bf8e13269348c415470f37f645001ba9d85971caf568021f75b08","sha512":"6d5838601b1a70df73169b6a4ca0242d346d2e390f23345426526934da5f17381d789723790cca2db384ebba800ba6819ee4880e4299cafeb6a11e76a46f478f","ssdeep":"96:0RIRXZ6PHCVBNlteeU4D+XuNSvUPPVor0Wvhl8:0RIRXZ6PmjGeU4DovUPPur9m","tlshash":"59b1fd8cb281b07007af2674862f155bf23f9890a58df46ce1b1e5d07ef151a827be69","first_seen":"2026-07-01T01:07:30.802598Z","last_seen":"2026-08-10T03:56:53.618114Z","times_seen":18,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/undefined","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.805Z","timestamp":1786324425805,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /m/undefined HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93ba0215e98\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24671,"size_decoded":11470,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"886080ace6e341d83041fb9cab6fe765","sha1":"5a574ce85ecd12df0e7dc823f625a419835f5ae1","sha256":"e3be735996c2a43a47a27cf9f5f0183c27628f24e496e6469cadd77113e67a89","sha512":"fcb22ed8a2bd6c818f4997b3d4b98b2c43a200919d365a29f9e3d17a2f356ad4585f093f1d20183eb2617d34b41a2483dcc6ad65af1ce3bd8c0097d9fb663c42","ssdeep":"384:21ERlxqNBPJ82VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJ8iNYiKop/E6wkpcu2llz","tlshash":"c3b2191a9df3497a2423303a1f7fb20869b0d0134309ed403e4de7594f95aaa56f7bd6","first_seen":"2026-07-01T01:07:30.836706Z","last_seen":"2026-08-10T03:56:53.619183Z","times_seen":19,"resource_available":true,"data":null}},"time_used":1117,"timings":{"blocked":756,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.835Z","timestamp":1786324425835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: 0Sg9lkyaGus7FtiUiDoPu7OQ6xywVatyL5my/9DWmN3/mlv9vVlVEfP3TIcqKjABvnyBUchZgdFzRcDojrpoW+AVA/PrFuJj31RhmrMaXTDD3pfcsiglio5j2Fs/HYpV8o15IsOFWuRtIslt1hYT7uRk7/Gyw7yMLGmZ2AJCtiI=\r\ntimestamp: 1786324425820\r\nsign: 6r3q5t2o7a4e6973\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: TQpcc2TMaDRwiE8wi6x2pW85FFX7Hj3E\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:18:47 GMT\r\nCache-Control: public, max-age=300, s-maxage=300, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 1a941ff0af944fa8bbdc528ee723d031\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93ba18d3c49\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35443,"size_decoded":36486,"mime_type":"application/json","magic":"data","md5":"6b437feb47c3df5b36d438a985ccca68","sha1":"5c2306a9659d19da35f89b303bd478b38b04071a","sha256":"371e66767004a9a574f2ff1b73c46f3c58146d59d34818dc1096fa5fd05ca156","sha512":"1ac9babd16bb51b2f8f5bb6c0a5582b6ba940eaf074f1ab248b6e89af1cd15dbc4a4d095b88262b24853d5b5970ea8508fbcd0122eafc9b6a4e09d7e51987c6b","ssdeep":"1536:OUgdUYl9mVsFfw264RtwwcSFtC57T8HgEDAyv9utD+H4Le:BgdUYCVh4RtwBSFtC5vAAU9utD8se","tlshash":"bc33e1145222f3709276f8f76a1642d442116f84b6d7fdf1d620d6320ede12ea3af9c2","first_seen":"2026-08-10T01:06:43.875669Z","last_seen":"2026-08-10T01:14:22.953593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":1100,"dns":0,"connect":0,"send":0,"wait":343,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/public-resource/holiday/23/h5_zs_jr.png?version=1.0.0","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.948Z","timestamp":1786324426948,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /public-resource/holiday/23/h5_zs_jr.png?version=1.0.0 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"a741c84c326d6f7abd541fae692d93f9\"\r\nLast-Modified: Tue, 26 May 2026 12:06:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvBev2mKKjI6Ita5xQ%2BsEtWBh3sGUx7%2BeJVKb4w6H%2BiA4ktkcxGq1cjVHk4ebry1yFpquQtu1BxwOljIrcVHfzgs8SGYkooucjEclNqF%2FzA8mmg5m7gxwbmMXu%2BkXWfGm3mq9ebKU8jPLt%2BXWWVc54S7VXcfV24nAqpn\"}]}\r\nCF-RAY: a27d78fa1f64dd3e-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nAge: 143320\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bbe3b3c6c\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13954,"size_decoded":15151,"mime_type":"image/png","magic":"PNG image data, 240 x 130, 8-bit/color RGBA, non-interlaced","md5":"a741c84c326d6f7abd541fae692d93f9","sha1":"59f38866cbd478797bde7c93e1a717c4a3b451eb","sha256":"048b9ae98a56d711d0a7c3d4269fb1b4f9b1e8ef9e8a164e524090ed407cc2a3","sha512":"bc573e013ed031fbded977176df2db61fc5dce252fe0092959604ecb0e59cb7c985137d805eea6ac6d93e444bed9273817ac5846b336aa1661767b2476beffa7","ssdeep":"384:KPlEjEiWgaKSZG9vaReQA/p1pomTpbOGPO:glE4iWR2MeQA/pToUlm","tlshash":"3c52c0769f9c6c76ee1d83d96020d17290e4f1e60483be833e16861f6eb0b73a972553","first_seen":"2026-07-05T14:43:49.734301Z","last_seen":"2026-08-10T03:56:53.639478Z","times_seen":17,"resource_available":false,"data":null}},"time_used":7745,"timings":{"blocked":7324,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/public-resource/holiday/23/apng_top_jr.png?version=1.0.0","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.319Z","timestamp":1786324427319,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /public-resource/holiday/23/apng_top_jr.png?version=1.0.0 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:56 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"037bd284278a3732fd473b95a97b4541\"\r\nLast-Modified: Tue, 26 May 2026 12:06:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGB6XA7tGEyd01E7tDqeF5%2FKlh8ByWcOlphEyVVG2lPVU5DX71niWTW%2B4IohIkZrVokchSM%2BrI5GBdUfClyjUprhYjw%2BO57ogBBnX5gyWXbg0L0Pldu%2B7%2BFOg8ZEGlBcihgH0vMpY1tY%2BayWqGLo7wjXt1%2FUDuDA4g1G\"}]}\r\nCF-RAY: a27d78fdae9f5dda-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324436=SewwZXC5o77Q8hpIdkD415QoaGmibdD+KUGaWm9kKVPJU76cjvZ4ABfwgLqXlPnM6LOvkP0RX+FoH+/HJDIOQJTgS1FZNmj0riGJnKEEsoq1GeqI8lZS8EfVERvXxDKCBVtpn83xvQvcWPGr+/l/zvoL57JxjIvPnsywmebz0UF2I/vI38ZeHbpo9HvCByHl\r\nAge: 143322\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc4d33882\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381776,"size_decoded":382888,"mime_type":"image/png","magic":"PNG image data, 330 x 130, 8-bit colormap, non-interlaced","md5":"037bd284278a3732fd473b95a97b4541","sha1":"f3281286aac6e24ad859c6b9128a44efd43e02f5","sha256":"c7ee2d5e1b4c7fc2ac2d8cdcf8a25379eb976f7f65c4a44123a2fd95ff9558bd","sha512":"b4508c2077a2183952dd75794478ca4127a413594f989943ac5e242954d8db76cb1b263caf60696741391139d6af01a11d32e42311c69c075731c774466aa634","ssdeep":"6144:kRtKen6jLkYQKoPkVWEF5nMpm1mPh6wNZ4Dh1J8e2GHMyryA3/n5azd8:kL6jyTkAE7Mpm4Ph6wWt1jXryA3/54K","tlshash":"218423da94b37b93cf2f0a30d4955b475a3b90c2ea4403c2dee48de05af9615797720e","first_seen":"2026-07-05T14:43:49.684656Z","last_seen":"2026-08-10T03:56:53.633375Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9415,"timings":{"blocked":8614,"dns":0,"connect":0,"send":0,"wait":371,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_188684fd-5a0b-43f3-8a6e-b9c558e44ec4.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.334Z","timestamp":1786324427334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_188684fd-5a0b-43f3-8a6e-b9c558e44ec4.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 79930\r\nConnection: keep-alive\r\netag: \"bd7f8602db8e332117b1715d58aef000\"\r\nLast-Modified: Sat, 06 Dec 2025 06:20:07 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144623\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIk4ZphH60ebhQM9VLogs%2BNhKreJmilaG0vXvBV%2F5D%2BuNtGtNWg19lX3NTL2VLq4DlVnIui5iiHYZaryrx2qtripB3%2B42vs8qg3CsnhuSP1y7e%2FUAcUK20kjBoqdxOGefPXNT4ICN%2BAxF%2BpfRcpLrwc%3D\"}]}\r\nCF-RAY: a27d590f3eba0397-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bab2a3f58\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79930,"size_decoded":81091,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd7f8602db8e332117b1715d58aef000","sha1":"7e5e353a2493869ab29d7087ed6854d05eaa1dbe","sha256":"289cf0eaed99d77e8ca59df43b5dd2e5a2e28fc8efbf2b4f918bd33293c6801c","sha512":"b3493bc56d6f778167f81e32ba77c61328584255960ca10373c2bccbe8f13b9f886c806142bd05e1e116ccd835870db787ae4225843b1aced6de971e177f90d8","ssdeep":"1536:1Vx1HKbkHPxLc4OWZ0+j0j8R+dWMIFtCTbYgw:1Vx1H6kHZTOWV0kMGsTbNw","tlshash":"cd7302a40e4e35b3dc0bcb7fb59c8e7606fb9be3251da9c00d55674adad81ad13a10c8","first_seen":"2026-04-24T23:10:16.741634Z","last_seen":"2026-08-10T17:58:48.39897Z","times_seen":976,"resource_available":false,"data":null}},"time_used":2742,"timings":{"blocked":2040,"dns":0,"connect":0,"send":0,"wait":370,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_4d4d0270-e129-42d7-8f6f-0802c910d540.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.352Z","timestamp":1786324427352,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_4d4d0270-e129-42d7-8f6f-0802c910d540.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11920\r\nConnection: keep-alive\r\netag: \"013c35e9baa4c707701c1a2cf8534d3d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:51 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144623\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pH404AdMa2Vr9E2haUD8vCm241un70ZV6zKUJ%2BV%2B0sHOaJS9JYHJydYu958V1pKYgQLkvUhwnweMPD0mZA9POpWHRABzFoPm9G8wlIDAi1%2BBXc8JsT6j%2Bf4lHK2YI7tUqdCkwbflPqcjY08ky9MUvtQ%3D\"}]}\r\nCF-RAY: a27d5912a9e6ddc2-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bad48385e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11920,"size_decoded":13075,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"013c35e9baa4c707701c1a2cf8534d3d","sha1":"2139b155d847e1eb2d17fc298760cb039598f89b","sha256":"f1d2851323d84d5dde72bf02ab6ed8f8f55eddc2a9607799e1ff211e0ede29fd","sha512":"e80a60ee340f8de57181fe71da391673d3bb834b91b622b5032c3674e8b85ee3c1610574b1b1d883b42e94d94a45823a63657a90cfa2062674776ebe9637c8cf","ssdeep":"192:H0RkcJGKX9YQtzAe5IIq83lxzCfVJGpYWrJUcm1aTfRbuArP+UcJaYrR5Vc:UXGjQtzAxILj2tJGrJRmETflDzcoGR5V","tlshash":"ec32b065c3da9c54c4027bfdab0239f95c5e7b45783bc7de68893d150288f90be218b1","first_seen":"2026-04-24T23:10:16.764405Z","last_seen":"2026-08-10T17:58:48.518609Z","times_seen":956,"resource_available":false,"data":null}},"time_used":2890,"timings":{"blocked":2549,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/home.1781011881923.a94e73ca.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:42.289Z","timestamp":1786324422289,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/home.1781011881923.a94e73ca.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:43 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-319eb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324423=xUk7eJS/uPqUk2PK/oTTEAvlv+nett/m9//2QebifEE/YbJzxs0oQ3OI048zP7K/BzlyczLulVwv6wku/pGsw5XoO2DLuGYcqP+HeikooFaLJznAJya/TVxEmT+UOZ4VMvxApoEsfeD/6WD4A6Vlzrn2+L35yMIdQIn+nLUVAkdIG5kuQWiYxk/Uw1Ny//WV\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b91683f38\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203243,"size_decoded":60718,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64174), with no line terminators","md5":"7ad9af47a2c0c93f65e42ff84b45dad7","sha1":"eed3b4bd1191c75416f457ee41317595880f8635","sha256":"c9d64aef33c7a35945a5963b08b2bc3157f403dc91a5c9c9463c82a0d4075af6","sha512":"757a63f9b96bc8a36491424f8e0ae9fd6813983817ab2da87bb3455e18b5cb5f71d5e682919941194e4a588bea925c790888e4d27f8531ee03c777c1e2c92678","ssdeep":"3072:T5daS9tSIMcewi8uJBuoMfqFf2GMkvVJuhxffj7TEOiGRlc:T5ES9tSIMcewiLQqFRmzffjAGHc","tlshash":"93141880b5f0e275575fc2a7d7371025b2271786d0ccac60e1f66b187e2879ab236db8","first_seen":"2026-06-12T19:29:57.277471Z","last_seen":"2026-08-10T17:58:48.463887Z","times_seen":1045,"resource_available":true,"data":null}},"time_used":1019,"timings":{"blocked":515,"dns":0,"connect":0,"send":0,"wait":406,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/css/84222.1781011881923.f5f1c06a.css","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.702Z","timestamp":1786324425702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /css/84222.1781011881923.f5f1c06a.css HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-8943\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93b9d275e92\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35139,"size_decoded":8998,"mime_type":"text/css","magic":"ASCII text, with very long lines (35139), with no line terminators","md5":"eba2efdcabb5831d3f9aae716725157e","sha1":"4d8870c6f72e0dcb0239b0eaeb930fb5894dff7f","sha256":"f366b8fcd1e8c8846e8d84d538dcfa12c023ccea417a811ab58e4ecf13a14ffb","sha512":"48f52201e688e7e5e7edc516e623d6002fc54fda193c73cc58a5f456398119ce6a661329abec836500bd4bd482bcdffb9f8eb6474fc1c2207cdccd5ecb952312","ssdeep":"384:DYCKpsUIc1F8l1TANI34yQyqPPQwmfzIfRbHx6+OhCcbakzeYaTOlUbeNsbzZ+Nf:DYCKpcPE64yDqbHbMisnddqdK","tlshash":"86f2c6a9a294b53f6d1fbb34a7c5a1ecb1399450df630e69f3016a38c7c3af1011626d","first_seen":"2026-05-02T01:47:16.014955Z","last_seen":"2026-08-10T03:56:53.669397Z","times_seen":46,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/public-resource/holiday/23/h5_zs_jr2.png?version=1.0.0","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.950Z","timestamp":1786324426950,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /public-resource/holiday/23/h5_zs_jr2.png?version=1.0.0 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"3a5a81da5b86d0bc3ff758ab681b4bcf\"\r\nLast-Modified: Tue, 26 May 2026 12:06:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3in5Uc40e9%2FbN6cVehvr33sH%2FmY%2Fa3qSyrFCOvttPwI7Yv9nMAPt%2BNZR%2F5ZJe5bTMFwmjr3hQUVrCwRZzttBphYCuyXOqag0NRw71BGD6INhmhJQbwouV2QTONfay%2BKN5grNo1BbjufnkAyBhB2so%2Bg0VJzoXg2uHpy\"}]}\r\nCF-RAY: a27d78fa88cc855a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nAge: 143320\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bbf0b3f6d\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12897,"size_decoded":14094,"mime_type":"image/png","magic":"PNG image data, 240 x 130, 8-bit/color RGBA, non-interlaced","md5":"3a5a81da5b86d0bc3ff758ab681b4bcf","sha1":"efbb9a6f2a5931d07f51cd2f82eb56a32febf1a9","sha256":"aa1e40429967b4620059b5ec5ac5ffd850ed64ef9cafabc332761aeb4f956c96","sha512":"112bf546018e4b73ec750b5b8d465354401e10c8f2da4ee8d1a665cee7856ba234f0bbd8f41d16f7c719829aa213eef1bd8de32d7d5942c7bab9664ee2e9a775","ssdeep":"384:Koss9J7YP01ZOpSkcTvqNBlOH68zZajqE8:J6M1ZOIzvUBlOHZFajqT","tlshash":"b242c0b3160d1772fc9ca62712917224623b53ffd7a9ba9c8c9711a36a3d12ec3d1483","first_seen":"2026-07-05T14:43:49.743712Z","last_seen":"2026-08-10T03:56:53.636834Z","times_seen":17,"resource_available":false,"data":null}},"time_used":7892,"timings":{"blocked":7516,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_50b16c20-cbfb-4c4c-ba8a-249055c85af3.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.355Z","timestamp":1786324427355,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_50b16c20-cbfb-4c4c-ba8a-249055c85af3.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 18518\r\nConnection: keep-alive\r\netag: \"aa3d869158cd9f4a691ab5256b366ce1\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:39 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144600\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ki35D4JXatyfGjYugAnwk7d6wbDcA%2BcJ%2BfeyH%2BLkQ%2BSd0WSCrTKZw%2FcxkjT9ChnL8GaMChNr8v2wNMGH1QFAO0F2%2BqiBtnXbgjNp8stWHzZHJaSSp8vDuTOAPo4NUMWA8EyyWMrBqrTV4f8zW8okFTI%3D\"}]}\r\nCF-RAY: a27d59a5cd441c66-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bae003f5b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18518,"size_decoded":19677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa3d869158cd9f4a691ab5256b366ce1","sha1":"46a9a87daa6c88e7055d5286cbc30e5a30bf34d2","sha256":"cacdf3b3bb35cc05bcdbadac055a705917d7ef2e422198f081e2482ba755eb5b","sha512":"d791059c03544004a3eb112223fdc6f44828e2ac740fc99c53aec39007ab4af73c6bdc3af541c57cc2805993d9f938bc1aaa46b1252c28c55d68fd135ac89ead","ssdeep":"384:+/SrnnTDDsTm3Dgi6CrYqpWrWrM5LW7A1zNb+EIItGXfeXCq:+/SrnzsS3zJiK81hS4","tlshash":"fc82d07a08094e73b16953616be5e8648b174f58100da7bf3d0166c9e32de6f74b80bc","first_seen":"2026-04-24T23:10:16.832516Z","last_seen":"2026-08-10T17:58:48.428344Z","times_seen":946,"resource_available":false,"data":null}},"time_used":3095,"timings":{"blocked":2702,"dns":0,"connect":0,"send":0,"wait":389,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_0cac9b57-bbe9-49fd-a7b1-7b0f1990cd37.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.397Z","timestamp":1786324427397,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_0cac9b57-bbe9-49fd-a7b1-7b0f1990cd37.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1114\r\nConnection: keep-alive\r\netag: \"609f81a9f56af80856dda73fb6087024\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:03 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GOVHY8OXkhpotiQCCId0NR5V43Zr4hTvPHy7aPn2BipNhZWPXMRm2R1JJWLAqZDL%2B9lKmgzTMhDZMw92r5M72l2Qc6HIpfdFC%2FDRM3ZeSPtwpbhOwaDc7vbFU03oWbbc%2FlyMlM2QnZvhnz8i4B4Xj0%3D\"}]}\r\nCF-RAY: a285f99419c18065-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nAge: 54166\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bbae13f69\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1114,"size_decoded":2273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"609f81a9f56af80856dda73fb6087024","sha1":"ba7188befbc38c2715a5654ba50153b056d7a211","sha256":"033b4e34680b5dc130a9a56e8e159ca582fe41e5ca04a07d8791b8e7dcdfd991","sha512":"b1d68c173d6b71a8ed571fd4e11c314aa161e01b93e8a9e9e2b089200403a574113fb7ce28ed3d0cd8c81e12629e4d239bb422f3aed00d855234d77803d6f577","ssdeep":"","tlshash":"8121c60d6de280e5fd33fa1625e6b4bc1d8e3ec178124ac0605b9428d504271e26e7ec","first_seen":"2026-05-02T01:47:16.038229Z","last_seen":"2026-08-10T03:56:53.578501Z","times_seen":23,"resource_available":false,"data":null}},"time_used":6351,"timings":{"blocked":6006,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/configPage.js?v=6/9/2026,%2021:37:10","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.871Z","timestamp":1786324415871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /configPage.js?v=6/9/2026,%2021:37:10 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:36 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 949\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:20 GMT\r\nETag: \"6a281710-3b5\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324416=wJN/YjCzHxoo2k1yl9XvHYteNyhust0JoM3QzzIPXC74oYImz+kZDV3rg/oGAkvuRagLG0MJZaySknEMi+fhIkT0CJeS+hnKVuW4XRmlZVPqty8HJobQG39Uf3bEzc9E+XGWLYbuf59RY8RKDBQTt+41VdO0BlkFS45g+vvGgj+F0fadT/Io8tljcV2HJf8U\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3319fe93b765f4426\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":949,"size_decoded":1622,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (917), with no line terminators","md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-08-10T17:58:48.47216Z","times_seen":2885,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/undefined","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.764Z","timestamp":1786324425764,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /m/undefined HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93ba3403f4f\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24671,"size_decoded":11470,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"886080ace6e341d83041fb9cab6fe765","sha1":"5a574ce85ecd12df0e7dc823f625a419835f5ae1","sha256":"e3be735996c2a43a47a27cf9f5f0183c27628f24e496e6469cadd77113e67a89","sha512":"fcb22ed8a2bd6c818f4997b3d4b98b2c43a200919d365a29f9e3d17a2f356ad4585f093f1d20183eb2617d34b41a2483dcc6ad65af1ce3bd8c0097d9fb663c42","ssdeep":"384:21ERlxqNBPJ82VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJ8iNYiKop/E6wkpcu2llz","tlshash":"c3b2191a9df3497a2423303a1f7fb20869b0d0134309ed403e4de7594f95aaa56f7bd6","first_seen":"2026-07-01T01:07:30.836706Z","last_seen":"2026-08-10T03:56:53.619183Z","times_seen":19,"resource_available":true,"data":null}},"time_used":1969,"timings":{"blocked":1587,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.610Z","timestamp":1786324426610,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: xzQ1N+Ou0q2o9qukxxoDxpkmlCWEy2sn33nLFj3J1byI+S0tE50Vxb7cnzBxabYP9oQ3uV8H447zohb5TeX01Oriv3CjXJYPhpdUjs9gL2ByS8tkPDmJSZdbXTVy1yRToXTNWNmqy/dO5ajifu9VQFtuN+z4ZXJ6TLVVoR6wvuI=\r\ntimestamp: 1786324426605\r\nsign: 1ps141r71ul96h46\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: TQpcc2TMaDRwiE8wi6x2pW85FFX7Hj3E\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:23:47 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 7034704e4ffc4a4e885e83e2e0047512\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93ba1c73f4d\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6691,"size_decoded":7724,"mime_type":"application/json","magic":"data","md5":"c3b8092d2a5b882b3c20d23747a8c5cc","sha1":"c5bc1fe9407ec8a605a2702c89e8b6b22590a2b9","sha256":"3b343d208d84a98d763c336b5b718f62d991a45b549c30b360a885f4a24d06db","sha512":"2dc95e7f84e088eaeb9680638f6ce30997cc977c96c0e526e6f101a29935e74ba608b27efd4202bc195bb7d86d78b6bc07154a1fe5401a23bb131f5e6e3fbbec","ssdeep":"192:V5XaHYhgBhWN/DlxL4jiiSGv3HY5rocxrLI4irw9bdWagTgAGa+:jqHY6hk/DlriSGv3HY5rTBw4dWa6Ma+","tlshash":"2222bf970b52e7a036cdd5fca1221cc12aafa2cc40ac9bd5e37480a42eaf750b4cc4b5","first_seen":"2026-08-09T10:14:04.690484Z","last_seen":"2026-08-10T03:56:53.615766Z","times_seen":5,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/11248.1781011881923.e1f6c133.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.650Z","timestamp":1786324426650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/11248.1781011881923.e1f6c133.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-57eb8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93ba2f35e9c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360120,"size_decoded":83355,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c0ea54ffece6554702ecd697d75be341","sha1":"255162d2085739d6bd522f44fbc8f92892b5e505","sha256":"45b3be7b4d4f736b262bb3c096dab61a44469faccd8539b411629cdd09545f39","sha512":"770ec2e41680a50b32e332029d6c22126935831c82fd756e1f1d5ce5af916987528943556fbf5bae1060f99b1c442a230956b213e3c14ab10d5a76b8d144361f","ssdeep":"6144:Hbpv8K84/78+971hTnvyUVpRwekcdNtTCuOCX9:9tbyUVpRwekcdNtTCuOCt","tlshash":"29747249e3407134cf96a146402b2435962e5aa6028da964f33df55f7ff9f883aed2f0","first_seen":"2026-07-05T14:43:49.730319Z","last_seen":"2026-08-10T03:56:53.676953Z","times_seen":17,"resource_available":true,"data":null}},"time_used":1153,"timings":{"blocked":631,"dns":0,"connect":0,"send":0,"wait":391,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_465faf5d-2f6d-44ba-896b-8d6bffead8bd.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.359Z","timestamp":1786324427359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_465faf5d-2f6d-44ba-896b-8d6bffead8bd.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10758\r\nConnection: keep-alive\r\netag: \"1be21ba94f35a4ac4384d8d158cc42f6\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:05 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144600\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKsBvF1vvJLtyuc322X5WK2irM7Ej%2B9SiFQVSN0jLGGSrCLcS4qz0dAQyl9siGyNfMi0%2Ba6Qxcwddd7QT22%2FZf9YUsV1GVLkJfByvC7M5IAbwlKGKDSd8sNBAeZRjCqBCcbK1Z7k5lxxBQ9epFa6%2F3w%3D\"}]}\r\nCF-RAY: a27d59a3598909d0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bae9d3861\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10758,"size_decoded":11913,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1be21ba94f35a4ac4384d8d158cc42f6","sha1":"3dc86d6c7bd530771ada51859a6c47c39258402b","sha256":"e2322e5c3f299528f388653e9dee3d3ca69e9f0006d1d0530cad7062dc2c3cbb","sha512":"40ce1b1f21df22b5ff6df16248f358d1cf0eb862f764bccf75cec2bb7cebae008ed8452e6fba25c2e091fe61c36fd30d25e6d3b46fd107985140debd9dacb09f","ssdeep":"192:jQnnxvnAz9rf9dKD/x0vFIcyKAY7MLUnEpeiqd6ufnQD4rVdg9NpEDy2lc:4A9r76/xEycyUkLuID6Hg9zey2l","tlshash":"dc22c09b145b3135fc1664bdbd5e5b0250ad8cc102b886290cbe44ba808f9caadbfb05","first_seen":"2026-04-24T23:10:16.865837Z","last_seen":"2026-08-10T17:58:48.24175Z","times_seen":947,"resource_available":false,"data":null}},"time_used":3218,"timings":{"blocked":2880,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_f26e0b0b-19a9-470f-90cf-ab38984671ab.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.376Z","timestamp":1786324427376,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_f26e0b0b-19a9-470f-90cf-ab38984671ab.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 96286\r\nConnection: keep-alive\r\netag: \"a7ec31389e5a634d92383c733b498506\"\r\nLast-Modified: Wed, 10 Dec 2025 11:50:21 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144623\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2QL06wq%2B0Iabk6a6nokpZWM4bF5%2BQ79c8gHqC3kpJByCdmR2%2FwroSf298T%2FOMxA2i6yrybN%2FWkbhiJfzVWe30ahMdfUCC9zvL3uAOVY1vyFttxUNGyEpZLXgH9WeIuhaSpOtYQF9E2d%2F7VEfEm1h%2Fs%3D\"}]}\r\nCF-RAY: a27d591c4ee9a985-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bb4283f63\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96286,"size_decoded":97447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7ec31389e5a634d92383c733b498506","sha1":"4386adc654865c1594ba0ac604ac3a4177a84b7e","sha256":"978643b0ac1ecb3edf679a74610a1a0fdaebb02505e0dc607a15e56b1bd5212c","sha512":"222ad2805e8bd8957e696920a81cdb86bbf7a0bd6720b2cb67ae89758558331b6842fcdf208560ba355a522bcf0b177a7b124ff3d2c4db25c1fd8b4eebe5c74f","ssdeep":"1536:s9n08pg3G3xErU4qzJYMDLc0OzGR5AGsSrbY4V9SrXLDoJgG4oaUHG0S/F:knptxviMDCzGRyXSrs4VQDocoxHNS/F","tlshash":"079312e74a42ba67f808b1319ea01b6ef3d7b43f09ac1a6d47599a7c4831bc4458137f","first_seen":"2026-04-24T23:10:16.718761Z","last_seen":"2026-08-10T17:58:48.452657Z","times_seen":976,"resource_available":false,"data":null}},"time_used":4808,"timings":{"blocked":4289,"dns":0,"connect":0,"send":0,"wait":368,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_b219e889-d34b-4c28-b534-674fb2e77fdd.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.384Z","timestamp":1786324427384,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_b219e889-d34b-4c28-b534-674fb2e77fdd.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 105348\r\nConnection: keep-alive\r\netag: \"e55c87e5077d7d737d02e9a373cf6a5b\"\r\nLast-Modified: Wed, 10 Dec 2025 11:55:39 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144603\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0FDmD%2FjD4af%2FaFkbvyGWMOSLb%2BrQD3E%2Bm5SKMoCfg1uwzWUMm1R9QzfcEVj%2BWPTZMA8PhKGoGXTuHLXHdz9kP7Ucw%2FDzKxKSvMWID8BFZVkctYIJJzvfGICVw0mxrDmGdPQ5rOvK66RrUmJFK%2Fpt8o%3D\"}]}\r\nCF-RAY: a27d59a4cbedddc5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb9df3870\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105348,"size_decoded":106510,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e55c87e5077d7d737d02e9a373cf6a5b","sha1":"21898eb8dc994254eb1a125a5f6310fcf94b08c2","sha256":"e2a9d5843140eddeabf22fd2e092ea761500c7b0cbf432c3de4f0e5fda23d2d5","sha512":"b17785a3c181a357def9c7bdf608f2ceb1df6b17339a0b2756e8fef4930f04fbc2fc70d2a4f22cefec30adafa5d9d1b0d259594b97dfa6a7c1fd650322e27f41","ssdeep":"3072:aJ/fAaUQyCHbeJiOjCkW/cRnU/xMT2Wfw//CVX2W:a1oaRyCPYCJe2WfwoX2W","tlshash":"42a3123992169346e97329aa30f80f4dde9874557e26204d78c8d64e45122f2fe78fca","first_seen":"2026-04-24T23:10:16.778762Z","last_seen":"2026-08-10T17:58:48.494977Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":6550,"timings":{"blocked":5107,"dns":0,"connect":0,"send":0,"wait":1003,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_6ba5f6e7-0a03-42b1-aae6-3de33d838c71.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.372Z","timestamp":1786324427372,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_6ba5f6e7-0a03-42b1-aae6-3de33d838c71.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72698\r\nConnection: keep-alive\r\netag: \"8173a97e42cbe83253f569868015813a\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:44 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nv4l1deFb59BcWj%2FmfqYJrqR7EU9ExEM9jVLpyaX3Oc99XheX00ygu%2B%2BXagxEl%2ByWRS3FSaM%2Fx9DtrvmoFmP%2FEBVjFhiQavaFAWdHCV%2FNjEl5YoI2oDYr0CvWTK7hUFeo6G4rU7QGblnKiDN9Xxa9ys%3D\"}]}\r\nCF-RAY: a27d59a2eb1b0723-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bb28d3c5e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72698,"size_decoded":73859,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8173a97e42cbe83253f569868015813a","sha1":"42ea560648d24b5b2f7a2707de2db0bdebc8f41e","sha256":"b6bf9777cb024d6afd79cdfab403bf54676a54ea6065abf0e8d02344a42bf8fd","sha512":"619c7b0a75af0e07e0929b087fda0183eae617910500da47727ff8b6d29e6dc98846c2e19a1fbe6d042c648c32aa24db9e0cd047a55f7256ca565e66376edaa8","ssdeep":"1536:ZYxIgPfY+3lbLKrfSQK0ds+ePjygtx4Ifql:Z0vfY+3lKrq4ds+QJtx2l","tlshash":"3663020b5a1dc95a0ae20441673a5bdeecc72324e27535c5a075fcbffad3f75414281a","first_seen":"2026-04-24T23:10:16.700652Z","last_seen":"2026-08-10T17:58:48.379412Z","times_seen":949,"resource_available":false,"data":null}},"time_used":4671,"timings":{"blocked":3882,"dns":0,"connect":0,"send":0,"wait":433,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/sport-resource/locales/keyboard-extras.json","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.229Z","timestamp":1786324425229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /sport-resource/locales/keyboard-extras.json HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:45 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuKOqNAd8bYcocbgii2X3xjDy8MTJVbHjGbj6zRBJp9kOA4NFvuzgPaBEw0KtZR6FbN7aLGJbMRMlANkKxZjiTw2WzjfPQQIYp6lMxSLwC0NaboLtnP%2Fm3AHzp7pG404hAdFkOVMj%2FX%2FJqUvjcpzTfrF3angWapYQMM%3D\"}]}\r\nLast-Modified: Sat, 11 Apr 2026 13:19:36 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: W/\"676143a58c2bf17ed03e7ab0ae83cac4\"\r\nContent-Encoding: gzip\r\nCF-RAY: a28b23cae87161ec-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324425=hIUHXVwWhkwfe4KJ8+ag7MlzledQEjuyOFw0S8GJs8rkFiJaM44MKSvvYUtPFYXYKDeu7M5plmF5aC/ACZaP2cOejYk98utIkL4xKpKP1SDG/2alQYVGL3A3ZgxYZdqmQPU2FtycrwiswFUlepWhvOKI1Y+/fZZ5+wFkbmU35J7dT13WkE6GKd/Ief4ukc30\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b9ae13c3e\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2441,"size_decoded":1286,"mime_type":"application/json","magic":"JSON text data","md5":"676143a58c2bf17ed03e7ab0ae83cac4","sha1":"dc0ccb792f2d2f34a972c0ebf678178facfa7e68","sha256":"f75dc4af402e777551838552e26875a5fd226fa998536a4ef73acfb99d9fcbb4","sha512":"1670af93d5d57af8affbc47e3b16682b4c73d24649f80228c68b0f236f4abe1b3b52647f1a6656c7662d93637620cf794dd3253f1fe5f5d9484201b25e91c5ad","ssdeep":"","tlshash":"015154709532c8a7734165b12ab7954e3264228f9ad4bec8b10debdc6f5ec18c9671c0","first_seen":"2026-01-31T05:42:11.017195Z","last_seen":"2026-08-10T03:56:53.652696Z","times_seen":76,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f8306425ea0731361b69124f50b66fa96f8b71569c26a6a0b","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.831Z","timestamp":1786324425831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f8306425ea0731361b69124f50b66fa96f8b71569c26a6a0b HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: oakGi98R6JuoXOX5A1/10WS/Z2AfCxFztllW4OdT0hebKzbkiJ7UhIMgc1wZxPHyh3N8T5oP3LQuhwekDcxldUKJd2tR0MNr/BvvZGx0nZZv0Hg//zkSoh1EMn2MbTu9b/tYHunm5MSjDX9gpqKPdCprhR+iG4o0sjr7TQjvlJ4=\r\ntimestamp: 1786324425820\r\nsign: 83232242l207f470\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: FwEsHSExbMQCppFPAYWcca8pExJ2Brjw\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:23:46 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 59416778331441fcb40f65e5e925e246\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93ba0663f4a\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4499,"size_decoded":5532,"mime_type":"application/json","magic":"data","md5":"5c05b9bed1eab86e8c6ec7b9eff61948","sha1":"9129dcafa0767b0e3e7ee361777e6ca5c2eccb19","sha256":"eea3ef2add4fa4c0b292ccdfd2711411a9cde9206edcc9c45713b907ae911b57","sha512":"28918d8855ae0210a8b48c8d094a30959bf578fcef86515209f63f9be010dc14b9e944ce766184c5da44498fa1bce20c52236020f1055f78c83059e660d7c3a5","ssdeep":"192:VbAYRj3n7jitDdIJ8SR7oeRMU5mtiEFrjGGZjPCB2YyRrn:l5Zn7jiDdWR7FRhwiIabBXA","tlshash":"65d19dc3574467f0c76e2ed4237a35c06b286188eaee9f14e1d870e464783a9fb2cc40","first_seen":"2026-07-30T12:33:47.008672Z","last_seen":"2026-08-10T03:56:53.686346Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1158,"timings":{"blocked":805,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/css/46431.1781011881923.bc5df1d1.css","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.877Z","timestamp":1786324415877,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /css/46431.1781011881923.bc5df1d1.css HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:41 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-552d2\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324421=6X5vFz8ju6f1n0953QfqtaVAhatIEpE+IJRBCQpkH6YRnEoXis284GpxdqaV1yOCNaEMuCcTlH6kEwSq+sEqJZoabGLXum/rWTeqiVViMFqGoObmf6zQcADG31jydPXwnVfxSaYPdAe8USMRZUQj3GiMYv5ihYmqjhPEuLvb3M+wBQhe5RUaCMQ4HR+LLIxe\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b8a283824\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":348882,"size_decoded":87418,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"93f90e3733fc4af32a4ef4b34416c531","sha1":"bbe0b8f50268073f57565c76a1ac45b46f6c668e","sha256":"ce07d563179018eb4ccfcaf005a871d6baee3ad2ac4400e6e4768a2d35c5aa1e","sha512":"664e0ea56bcf02d80d7e148c8c999493c6501c5b8b6138fb0c5a05c0c0a9c3b5facac9d711aa2ce216eb335328be867456dbbbb2864f99531faffa5fb74eaade","ssdeep":"6144:z4+4r0H8Tu4+4r5cRlGuEQUQ929srbnpTP4T:z4+4ZTu4+4yaT","tlshash":"b774fa6caf1030ae15a7cb27b660f5199c36a443f9bfde9af3e53d580789a510623c13","first_seen":"2026-05-09T01:34:22.507922Z","last_seen":"2026-08-10T17:58:48.580622Z","times_seen":1202,"resource_available":false,"data":null}},"time_used":6300,"timings":{"blocked":-1,"dns":0,"connect":354,"send":0,"wait":4850,"receive":718,"ssl":378},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_ac59a48a-b78a-4a12-ac3a-190673b67906.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.316Z","timestamp":1786324427316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_ac59a48a-b78a-4a12-ac3a-190673b67906.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1122\r\nConnection: keep-alive\r\netag: \"435602520a5d82a59e051bdf2eb6f6a8\"\r\nLast-Modified: Sun, 09 Nov 2025 13:40:02 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCJKCDKx7S1TyX019vBsAVHbZvkOvGyHdT6u1cFXZY%2BcS%2Fxete0RWS9wi8dbMslaPEmUwzqjKPmgbSC4N426N8sMz5OPl78tNlY1BVvaVNI5ZkDavK3xdt4L%2F33jt6F0f7YTN6o185kendiXoCI3C1g%3D\"}]}\r\nCF-RAY: a285f9916cbbe2f7-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324428=DSyzgCHhjF4Bg4+7k5rJvoHFOnpQqlFDlme+jAyCtDmh3s22hqALMnpdwVfEDsoRwnJVA+/xQ7R9kAejmeCCMMeynpeUFkCdYda2AN5yGZRnqp4GGY7NdDfKivBo+ufcRNfj5EhEFrHx0XF2/cDI8EHdRugYloTaFcYshDZfxIKU3hKC7B0jklMJxKP96M9F\r\nAge: 54161\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93ba86b5ea4\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":2281,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"435602520a5d82a59e051bdf2eb6f6a8","sha1":"860c2945fc86e2e96fb26c4a57901c0344a43b25","sha256":"26c4964465575d28162a72415cab7df5d0547d38ccb82415de8a43a084e59817","sha512":"d4e29ddc5e2a7e87516af32949b94e9f6bacf7a096cba8dffd9961c3af18eb6a0733099e2d53f7f9bcf272c55675f3a7cb37b6085d583daa3b1e3c4cd7e8112d","ssdeep":"","tlshash":"4921c6189a555098f667f21c78e7e4b14a5d4e630848150010a7193189011bbbbcf9bc","first_seen":"2026-05-02T01:47:15.959072Z","last_seen":"2026-08-10T03:56:53.583352Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1698,"timings":{"blocked":1357,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/m/index-399e2569.1781011881923.3af63572.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.896Z","timestamp":1786324415896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/m/index-399e2569.1781011881923.3af63572.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-7aba\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324418=B/NV+WXMCBvPhYUDNiUBVX0iZtuMbGLWLaYPqvS106sdQFnEiHVAu/Q3Z2ZnI0nyK/mbDBjuzYZXUl5Igpo1qRzngWOto80aBVQTgKARHZ9D2JO4MYdAj/0XKLJJfc6M2yZRJty3XYT40sFpP0+i6hktrA7Fv8e7EsiKRrbxESLnSEvx9k8iw5SUfssJVL92\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b80b43f2e\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31418,"size_decoded":14813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31418), with no line terminators","md5":"dc20724c56846e36ec0c5a6d71bd9cd9","sha1":"00461d0ff2e4ae7c7c9696e710f673451770884f","sha256":"d29610263458856bc7eec5c5388fdc9ab1102e33dca30cef80e5e403ed2ba2d2","sha512":"59a8049736fe4614b348873da59fa744b059298f40bc0878231f88cb1fe1603ed7570f0cade60e43811e7c9d9f286fcb252d7ad7ebc0ed7819fcd83171e66bcb","ssdeep":"768:zWQ1rEMRCpgZWd7IUML4oXTzM+AOpULa+6lKtZ0NyRCrCA5FY9AfXyU5VH:yQ1rEMRCnd7INZAOOLabK/0NyRC/5FYS","tlshash":"43e2a5e23382bdacc54f9277f22a64ecd93fc185c31fd4fcd155be9478986059a81680","first_seen":"2026-07-01T01:07:30.795214Z","last_seen":"2026-08-10T03:56:53.632551Z","times_seen":18,"resource_available":true,"data":null}},"time_used":2992,"timings":{"blocked":2621,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/40621.1781011881923.7917fc2c.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.694Z","timestamp":1786324425694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/40621.1781011881923.7917fc2c.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4ab\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba3ff3842\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1195,"size_decoded":1268,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1195), with no line terminators","md5":"e1524ffa63773d045b5ee1ef23ff2cb4","sha1":"99818e75bc302a7fb358b88c8daa91b9ecd039e5","sha256":"b5e9948cf2e7405662160113ffec7d4d382653a0b0ee74a4677113dd7f302699","sha512":"a1696d383e5596b95cb3fe65bf7b5958ba114c22bf38d5486798c80ccca1b3b0c63a0780602d20cb87f37dd1b707911f405568bfebac2a52e6a8ee0b1c0a5389","ssdeep":"","tlshash":"e9210f69f6a17274537b2aad463f2a8bb1774561e9edf098d450e6a02cb430c4432909","first_seen":"2026-07-01T01:07:30.832873Z","last_seen":"2026-08-10T03:56:53.581047Z","times_seen":18,"resource_available":true,"data":null}},"time_used":2210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/96039.1781011881923.63b98ab4.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.762Z","timestamp":1786324425762,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/96039.1781011881923.63b98ab4.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-61df\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b9ef03f47\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25055,"size_decoded":3507,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24811), with no line terminators","md5":"9dce5ce231d5aaf54edb8735f07f2b2f","sha1":"96bea019adcdc6ab245f3a9f83031f96bfef07bf","sha256":"8d7be78dcfef436963944a61905ec8457dc5919a2c436354f25073596cbeed2b","sha512":"a2015eda106c752e446fe33273652167cee95c1eb7741ad110131d4822bba08dc359bfd86cacf3188345e15fb71e350ac8c56e3949d9ca182cd1d1000471eb8d","ssdeep":"384:/Z6PQGjHnUen7QtlObS3OIkjoT/9KzLO1IY4pOmO3QOqyR:EPQG+9KXi","tlshash":"84b2910ecb4cc2dabe711fac421d90610250e8f7e58759ec95e6ad09f93c50e365fa6c","first_seen":"2026-01-10T05:58:33.943445Z","last_seen":"2026-08-10T03:56:53.627646Z","times_seen":42,"resource_available":true,"data":null}},"time_used":878,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/kc523-1/common/usercard_vip.png?1781011825626","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.818Z","timestamp":1786324425818,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /kc523-1/common/usercard_vip.png?1781011825626 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:48 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-97d\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324428=DSyzgCHhjF4Bg4+7k5rJvoHFOnpQqlFDlme+jAyCtDmh3s22hqALMnpdwVfEDsoRwnJVA+/xQ7R9kAejmeCCMMeynpeUFkCdYda2AN5yGZRnqp4GGY7NdDfKivBo+ufcRNfj5EhEFrHx0XF2/cDI8EHdRugYloTaFcYshDZfxIKU3hKC7B0jklMJxKP96M9F\r\nAge: 143315\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba566384c\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2429,"size_decoded":3160,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"74a0be63544159603bd852171f9d1565","sha1":"ea2c4c230d2d460cab94c5add34e88ee4576eeb0","sha256":"769e2f5382d8626445534d8100ee76eefd8f635c373a1a2981f83c3dfbfad2dd","sha512":"6d775c39b1e52b08d19ee749d71501c58a9cf933458e042801fc5dd952414240bd0715f453e5d6b857b1c4fbb687bffc236e363190dc882fcd3f9fa8a7db746b","ssdeep":"","tlshash":"02415fdb439c5d6ec52a3c3dd904fc16781b349e48f422c41db04a9474989db3786f75","first_seen":"2025-11-01T17:14:36.300709Z","last_seen":"2026-08-10T03:56:53.620213Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2429,"timings":{"blocked":2100,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/public-resource/holiday/23/icon_btm_jr3.png?version=1.0.0","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.953Z","timestamp":1786324426953,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /public-resource/holiday/23/icon_btm_jr3.png?version=1.0.0 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"a3c26af2c995bbf9b9c4ada63e9e2180\"\r\nLast-Modified: Tue, 26 May 2026 12:06:45 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3pabUmk2h21UuOYiBMcfYgc6GKLqLDxDGf0%2Fg0l5LmzIjkt%2FNRbrGtxpuUtSBLt8wOHTVuEIU%2BCg13vVAtsmlWEJlZQKGVkH9fDvVIfpEKzqwbByW%2FluDpdDiq1CIH3VAckNKbB6F0tJqkCLx1wFzC%2BuNJlO%2BtszrEb\"}]}\r\nCF-RAY: a27d78fa9de0abcb-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nAge: 143320\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bbfe63c6d\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11334,"size_decoded":11734,"mime_type":"image/png","magic":"PNG image data, 600 x 180, 8-bit/color RGBA, non-interlaced","md5":"a3c26af2c995bbf9b9c4ada63e9e2180","sha1":"c474610ebc685eea834ffb4b47b0c6f3e3da3dc4","sha256":"d8610575c3ab24a0e12b256072b838b10294097c3be15f5e7bf24cfc0e01c63d","sha512":"443a2f35004711af29ccc7163fca57364601f41a725ea491dd8fd1d6f3de826d2c6826cb2fc3c0d93c6c43e4909b72312d2151b8de026cdc62342831cae5a6bf","ssdeep":"192:W7/orfwRvkJvZMptBnz7k9b5hEyC+/NoRBlzomUJ8lMq6dTii2Ywe3Pv58yZA7DN:c/om8ijGb5z9VSlzomUJ8lmDHwC58yeN","tlshash":"e0328d36e7fa5cc72c4d8323354bc182c6ab9db617b25a5732dead26059b51043f2d32","first_seen":"2026-07-05T14:43:49.719623Z","last_seen":"2026-08-10T03:56:53.683037Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8137,"timings":{"blocked":7743,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/656acea1-d6b9-4400-a699-6a8a084b874b.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.003Z","timestamp":1786324427003,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/656acea1-d6b9-4400-a699-6a8a084b874b.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"733ddb8c3895dbd07ffdb7d1467a3d2e\"\r\nLast-Modified: Wed, 28 Aug 2024 18:03:50 GMT\r\nVary: Accept-Encoding, Accept-Encoding\r\nAge: 143321\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqnY5461pLT869TwCXFkSKAn764q2zWS8qmwGk88ZKHVpZVtqa2M0oDpwVQATv411cgSTEyhWFVrz97FZZIp0Bau0CKee5ZB%2BNskhvoKw4QcMMWIwy5ewV8%2BFLDzljj1JiYXv7WYT5Y7vtA%2BHDLvwYU%3D\"}]}\r\nCF-RAY: a27d78fd78518470-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bc2d85ecb\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18596,"size_decoded":19826,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"733ddb8c3895dbd07ffdb7d1467a3d2e","sha1":"18b78278ba2b82bdd7fdda42c9278e6713d13d3d","sha256":"c5f95dd9b26d1c5f7c53af7a0ad789ed28e8f74e8889d633a410fa34f1f9d336","sha512":"d7cc99aa0b3121d3b999ade44a57742718d3de28baaf20ce5245751ca988f1ba651355877d363a722d6fa72bab24040b660060cd202e151b73a335e729433973","ssdeep":"384:yMenAbaq+Ftepmf3eTwyWr/i1G2HeDWRoqRVRONC1esg8JgzE:je6uMu3EbWrL2H51VIC1Z9JgzE","tlshash":"1782e1aaa4c9e10e44adc3f774f843796fae832a46231b531428c3566f3ca435584c43","first_seen":"2025-11-01T17:14:36.299052Z","last_seen":"2026-08-10T03:56:53.616807Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8815,"timings":{"blocked":8445,"dns":0,"connect":0,"send":0,"wait":366,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_79864bfb-d71a-4513-a524-8823b86ee01d.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.380Z","timestamp":1786324427380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_79864bfb-d71a-4513-a524-8823b86ee01d.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 69284\r\nConnection: keep-alive\r\netag: \"1f023b2fde7cad748f40bc1d26f7bcf5\"\r\nLast-Modified: Wed, 10 Dec 2025 11:51:05 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144623\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWg1DwAwbydLEsZtfl%2FOwN4%2F4DvH%2BxVGsjPT%2FhX8kRgAUBF1Ida%2FwTKCFI8QZ6L8qxKxDerzCZExafivtLCcywLj5gSpFX2qeIwXq%2B19u9hqnqVaBehoYEGSXCCHL40pkg47IY86KO5zaZDWoMaQNak%3D\"}]}\r\nCF-RAY: a27d591f88015098-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bb62c3f64\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69284,"size_decoded":70443,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f023b2fde7cad748f40bc1d26f7bcf5","sha1":"b6f87014c3efd309dd208adbde662efd12ed1630","sha256":"37500d21d34445843f3857ddc61970168d68b86f1f37208f3e0b05b5fe1575ee","sha512":"afc994859a75b3a91939974cdd03b6973f68d7e5be316f8a67ac60412782cb748d7ad3b7b7f62d931496e61c198098e6ff42f280ec5c5ed40164f5351dde15af","ssdeep":"1536:LQyDg35QNQHWhyCUVgapIL88bSxgjfxjgS1xnVluzXj1/7qLE0rOFXrb:8qm5MQvC4gapxxgFjgQn7ax/kE0rSH","tlshash":"d66302cf2367021ed8f7a779922a46dda041f25ed16a73acfc919d45f88221726ec09c","first_seen":"2026-04-24T23:10:16.798872Z","last_seen":"2026-08-10T17:58:48.429203Z","times_seen":996,"resource_available":false,"data":null}},"time_used":5272,"timings":{"blocked":4807,"dns":0,"connect":0,"send":0,"wait":365,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_2cf32c0e-cd2d-4274-8e00-d67d14e5086e.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.387Z","timestamp":1786324427387,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_2cf32c0e-cd2d-4274-8e00-d67d14e5086e.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7390\r\nConnection: keep-alive\r\netag: \"f111a1ab6243183e54c8c152a111da67\"\r\nLast-Modified: Sun, 09 Nov 2025 14:10:40 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144602\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQArQdZYg14V0O6%2Br2qe4XUTUFNwI57J1i2%2BqO7Rp3vFlKZyTWHpQZSPUE7cOmiUdmJga6KZ5JL9zXgu0gXeIMyFRzPhPyQdZWVqxJ8wGUSp37MzQqv9KCwb5g2SNmKXzxfuldhqxicu%2FbFHpQoCYYY%3D\"}]}\r\nCF-RAY: a27d59a70dd05df5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bb8103f66\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7390,"size_decoded":8542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f111a1ab6243183e54c8c152a111da67","sha1":"64384e28a720752201bdef5fb2d779e3b9c85f09","sha256":"5cc2cf8571b6a9483514b5a6a4624cf867c12addfcffa3ed0ca5b24a2354dda1","sha512":"38c484611e089f275c9cad39c3978fde5cc040959db3de91ae8744ce33f66b4ecf40b01f464e2081395aa408bbbc6a6c7bd845799ae892a8611b04c24c2198f6","ssdeep":"96:0UX6jHvysggvfrPtYvuy3/9Ic5G1SB2P80d2QWAqhs0ufLIbqvfgJ965FkBYUU:vmqsggvf5Uuy3lQ1Yues0uDlngJY","tlshash":"4ae1bf2cec9e39805c1c3cb8a451111c6f08688cadcc8cd55915be29f277beab5d6e41","first_seen":"2026-04-24T23:10:16.706864Z","last_seen":"2026-08-10T17:58:48.401951Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":5642,"timings":{"blocked":5271,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_96811f47-5a2c-446d-a8ca-696df160de09.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.398Z","timestamp":1786324427398,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_96811f47-5a2c-446d-a8ca-696df160de09.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/webp\r\nContent-Length: 46184\r\nConnection: keep-alive\r\netag: \"c0ef8343c60fc9c02bde9fb0823e1ef6\"\r\nLast-Modified: Sat, 06 Dec 2025 06:26:38 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144605\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BylkDaJXZjKMbvndTeYhKFi8yB2CjFQgGNfd%2BymERRVhmuI2ylAo8fEeh1uQr9nSOgcF4pL6rgZXXDT8%2BiEMTbRrDJWdMsixoZS2C3xsoTtqeYxAHm71WiQY1AQFzVRiG8CMD%2F41KH86w1Uy2SHfbF4%3D\"}]}\r\nCF-RAY: a27d59a5dd66854d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc38e387f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46184,"size_decoded":47337,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0ef8343c60fc9c02bde9fb0823e1ef6","sha1":"3a5e1c7a0e16e4df0a591749d4a8a1d01b381277","sha256":"1042e3632605c2e70706209ece9e2b341695afc4e57d5512818e458078c55040","sha512":"950b59f182c21e7d78ac56d6c1cb0f22a295ede2a579f9513c69166b2c227d5ebc4a8e16d5528f530488d5c36d8b88d9c29bb251820627d596156f90445a90f6","ssdeep":"768:fs+YB8yjw8RTKT4uT+QCkrgAEnaCA/RE4qehyRcQsII+IYJxT8sJk2RaA2b:fsDjxR+LT+vkrgAZ/R1hyqQ5IeJxTbR0","tlshash":"182302b81bd5a7b7cec731f89ce2890a4d17c2d5e183b0667d686bd6aa114c1f4c0ed1","first_seen":"2026-04-24T23:10:16.848247Z","last_seen":"2026-08-10T17:58:48.583718Z","times_seen":1116,"resource_available":false,"data":null}},"time_used":8619,"timings":{"blocked":6063,"dns":0,"connect":0,"send":0,"wait":2516,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/theme.config.ef94991b.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.880Z","timestamp":1786324415880,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /theme.config.ef94991b.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281706-1a62f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324419=G0aRnobVgv5Ruf+x4A68pPtHLi2iBdgP4LFU9iaF0iujhFxme/tWkJQx/AFTy8U4zIPtwhoOUf2WKKhGcr7vSgwYJaz2BumgL1klAk4f+bpKJbSHV7toRNgkL1eDE0D8SAx+l9ivxfn/bNyujkLZMqz9zwFm4WxNheuzsseTEdOVFwS8h5seFyvCvWO3P2oa\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93b82243f2f\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108079,"size_decoded":16737,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38260)","md5":"90d279a2980268d2835cec593c23d286","sha1":"4374bf6da5cbdf8f025434137487bda68077cddf","sha256":"1679f19badc24dea0edab376edfb8583714645e18f705fb849037af6cf0b3ff8","sha512":"362ec1b73cebe1ad224a5b745c9ceebf2b86301deab27e35d6517d499499328b34c24d76a72e5b348d623e64a4d17bfa0ab08d2aa012f02af23c6a72df51817f","ssdeep":"1536:D2JREobVmtlIRM4Sb2mcTa2mnzyJog9CcHWHA:qEtlGu1Jnz45HT","tlshash":"c0b3bb7ae20c963a6177a8bfb46ce111d12f9c0c9b1d5fdef03e60a25710669c831de9","first_seen":"2026-06-12T19:29:57.324936Z","last_seen":"2026-08-10T17:58:48.222981Z","times_seen":1111,"resource_available":true,"data":null}},"time_used":3369,"timings":{"blocked":2994,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/chunk-init-c0d76f48.1781011881923.0f397bb1.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.886Z","timestamp":1786324415886,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/chunk-init-c0d76f48.1781011881923.0f397bb1.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-275ca\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324417=Ptzdt+FUuUNHZKTtlKr9SiHGktL/FNC6JMSTgGOX59JwdiBMJedi69SsGhwJjdF5psDMb2A1yYaF8EUvxF6vE6rbfHtIwGqZXJnqACd5VcbRw9c2RGR4Ni1cQLqRHspedTtDRTdulNygSPBsYxB8wKLyo3uVv5HB6sLvnaxq7c8YpHm1WnBXJ1hcT6Ikg22V\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b7a5e381c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161226,"size_decoded":53264,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"815f2acbd0918250f25d4f71409219b0","sha1":"d5778078df7eada22b3175f9182b8b22e828c433","sha256":"12a61f287da39190db34dff1de7188c3d8b76ffbd1c11290962db88fd5e2ab46","sha512":"5ba4adaf4b36b4a402c30c3aaa5be5f02e292391d79400d353a5ca6c61405cb40e5179858abddb1af6dad243899e420111e49004d01d339ce9de23d8f522c379","ssdeep":"1536:zG5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:iQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"5ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","first_seen":"2026-05-11T06:12:53.502908Z","last_seen":"2026-08-10T17:58:48.424501Z","times_seen":1105,"resource_available":true,"data":null}},"time_used":1926,"timings":{"blocked":997,"dns":0,"connect":0,"send":0,"wait":496,"receive":433,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_91f2d885-8341-4928-bace-352c8c691bef.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.364Z","timestamp":1786324427364,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_91f2d885-8341-4928-bace-352c8c691bef.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11602\r\nConnection: keep-alive\r\netag: \"5b6551f12b1b84f1734c1a1990de36e3\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:32 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144618\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKBIaj0E%2Fv7tFjqy2dxQx3Cppmqymw2wf54IF9Ro3D9dpkvA3YWH9HIcHyrbsns9OO8OzmHBydJxMF%2F1Xtwu8C6JdZ1Cn4uYSPbAenTTTG1ULNH8cTbfbLc12cZXrZsO1ILqBQxrcr5wmVJhLdiEdxo%3D\"}]}\r\nCF-RAY: a27d59373e9004de-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324431=NYxdNJYZ+h3uk8iTq3QxErFPJoAG4wtjQJIzH3ajQVuVAnF1OB90fOT6h0zIgyQeoHM+IbKniO9KSsaywmIOEaxTKgUZDsojslxmwe6SpQoCerhs287rvvfUiaj5W4//fV0Ya47hlfdTelaF9zpF0M+94Rgp+rZ2wd/h/l0QPR/WqsxhR8n/783F8Y9zNd1n\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb1fe3866\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11602,"size_decoded":12753,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b6551f12b1b84f1734c1a1990de36e3","sha1":"4a9abbac21133dee3830561cdd3803655c193744","sha256":"fdf8c30716a64d0ba082686010f70ff0347eb4bc57f861ff9ca67ef41700059c","sha512":"c02da03187076f9921fd89e31f1d92cc60c78da95d5b35e179d76d11842191eb9f52431e4a7322e0a9c5d6d54b8c484aa6dea6d6f653557818f3383300b97f61","ssdeep":"192:U9/EwHQZEoeKC69DzEtpjQM8dUNCtSyj2OG5hSutqwILUXr/mt/XqzLYKHiifMfi:4/EwwZpe4Y3MMqUN/Qlw84IL4/M/an/H","tlshash":"0f32c043a66ed2fab717ab660556d304de22e0d468553406d7ebd43a302effeb180d0b","first_seen":"2026-04-24T23:10:16.72574Z","last_seen":"2026-08-10T17:58:48.573211Z","times_seen":948,"resource_available":false,"data":null}},"time_used":4081,"timings":{"blocked":3128,"dns":0,"connect":0,"send":0,"wait":953,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/35142.1781011881923.1d227afa.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.691Z","timestamp":1786324425691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/35142.1781011881923.1d227afa.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-530c3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b9d143832\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340163,"size_decoded":94183,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64894), with no line terminators","md5":"8325235b613820a57b71043f360e5b36","sha1":"925ff977edf9892e868d43915f93d29e6feeb113","sha256":"0c505f39a463b09ece16c213b7ead75186dcdc26d25ee02dcba5a62cc0dff7c6","sha512":"efd16c9b7ff0f806890ae77542e8c0d4e954f8c797ff21b8dcde3f240e4940ca3c6d0fe75ee2fda35bf53ff5d0eb691fa7e38cfdfa82c0f231b0cd57458fbcf2","ssdeep":"6144:N0hEyLkbJDb7w/1FOAmBm7cene7Ancbt8sbyAkKJwoSlt5MMjmlHGwwzHUY9SroE:N0hEyLkFDb7w/1FOAmBm7cenaAncbt84","tlshash":"8a742b94b290b17883af86fb731a91a1d24d0e9460ccace4f27e6e407f15746b8775ec","first_seen":"2026-06-12T19:29:57.248751Z","last_seen":"2026-08-10T17:58:48.558753Z","times_seen":1045,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":508,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/34683.1781011881923.ffb73e4b.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.758Z","timestamp":1786324425758,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/34683.1781011881923.ffb73e4b.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6e59\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b9e993c43\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28249,"size_decoded":3584,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27961), with no line terminators","md5":"8638a4a1d03e84802b6628538bdb8ab6","sha1":"3363f78ac45a6df0103483a4b2c5bf23e13ac5ca","sha256":"fc4609af11785458bbc690c9efe0ca9c652ee5cf7f2b42e5d3df98ca7d61a6b2","sha512":"46f12783ced7b2726d4912395925792671d106897cbedb29ff0ccd6cb17969960c9ce603206ff04163c4b8bed0f7209bc96fa18ba72cd75bde714a1145be559a","ssdeep":"384:BZ6POG/HnUen7QCMOp7Qe5O/b3reqRw9KXGOVSOMkgzIk:SPOG+s9KE","tlshash":"84c2a20ecb8cc6cabe211fac431d91a10250e8f7e58659dc95e6ad4ef93c50e364fa5c","first_seen":"2026-03-29T15:00:38.365713Z","last_seen":"2026-08-10T03:56:53.676388Z","times_seen":19,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":421,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/4cdaec65-2460-4b91-8926-e120c3b215a0.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.995Z","timestamp":1786324426995,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/4cdaec65-2460-4b91-8926-e120c3b215a0.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\netag: W/\"075437c0929b2ec23be445aee5a25121\"\r\nLast-Modified: Wed, 28 Aug 2024 17:18:38 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143321\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wp%2FeF6lBT2Fu4lWTQJjjY8HmRTywIXeOVO4qPjW12t0fbBch5kMajpsadEsojJUxSeH%2BMEjyoqDda5WPG0OgylOdCrZUj5NsAJbcGh4QnNpMxmzgSX%2FtbrwyVNAbeSPIphbO4lBpyRKycFCZBGgonMU%3D\"}]}\r\nCF-RAY: a27d78fd0b931095-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc363387e\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12001,"size_decoded":13214,"mime_type":"image/jpeg","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"075437c0929b2ec23be445aee5a25121","sha1":"e94ff3b9f85917b1cf666eb3f8910b0814ab4cd3","sha256":"cea5ccbf656162cb4a50aaeee2dffd2212e4c7d337ac568931f0d5f82cb2269a","sha512":"37704511220005a63574603f3228d92ebff69725dad6e1c6cfe08fd22a525320e81b5771b97c284ef3a74307c2ffa7181fe3a66d2a094630c286cb393c0ff994","ssdeep":"192:HS//ZBcZZm6eQhNNQ+ySxBkb7hsdKTSbSu+588ilr/DLUU5esHtTn7Y6G2hx1CE:y/EZA7o3Q5SUb2dblfr/fURsJnMl27Z","tlshash":"5742c0c6946665cd05ce592281c70b3cf443acf1e741a7f5a9803fb76200afa252bdf9","first_seen":"2025-11-01T17:14:36.3371Z","last_seen":"2026-08-10T03:56:53.660432Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8950,"timings":{"blocked":7966,"dns":0,"connect":0,"send":0,"wait":984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_ce6f5a12-ce60-4931-b7a7-3cfa94c956bf.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.365Z","timestamp":1786324427365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_ce6f5a12-ce60-4931-b7a7-3cfa94c956bf.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11070\r\nConnection: keep-alive\r\netag: \"9d6366dada143310062f824e5f7dd46e\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:23 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPscsay854RyUSgkhFdROrjclH5QHBs6KDAOnNihS5drsB0MUzOBsDiQpEPzKkm1WDgu5f4YD1iyTWyQqOSs3K%2Ba%2BRH1TC0WqDRc5Hv5WiQVM%2BUmn3xivhnO6Eyi9t7QCxbV2wQMFtLFB72uoBgjXUQ%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144598\r\ncf-cache-status: HIT\r\nCF-RAY: a27d59b0e9c2cb25-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bafef3863\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11070,"size_decoded":12223,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d6366dada143310062f824e5f7dd46e","sha1":"def0e81d351b0b1c8cec0603c0dfe6955438d059","sha256":"10b2cb9f1220e8ece8b47ee11eae49d1c947eec915c13165c241a59f1c8105e6","sha512":"afc9daaa38494954719bc7ef5f87c1bf6020e2d098b690a55d7f6ebcb26d463f6cd890941446e0c4cfc64771e8e7f74035e362c347f17818b1ec2801a2639f14","ssdeep":"192:6HWhsuhcANwPA6DmRamGZOxPCHE775EhPDR4oETR57jX:kWZhsDG8Olz75u7RsTXj","tlshash":"fa32b07de235930096a34cbecb5be3304bba629233b0b58cdc459df12597cb42e70926","first_seen":"2026-04-24T23:10:16.712242Z","last_seen":"2026-08-10T17:58:48.513034Z","times_seen":945,"resource_available":false,"data":null}},"time_used":3554,"timings":{"blocked":3215,"dns":0,"connect":0,"send":0,"wait":338,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202607/_webp_size656x884_9dd88971-fbe2-4c59-b6ed-834b4a01d4ac.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.366Z","timestamp":1786324427366,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202607/_webp_size656x884_9dd88971-fbe2-4c59-b6ed-834b4a01d4ac.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43480\r\nConnection: keep-alive\r\netag: \"d4c1684204e7688eb1e597c220210eab\"\r\nLast-Modified: Mon, 06 Jul 2026 12:02:36 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144598\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4mp1wj0I0tqMjcF13fiJRiiAHCwP5gIVHfKkAvth4EDEspTJvAp%2BJRnurXw8jNJmhrbBTjdaayz2Q71oT9rgdgMfZPKOar5CCIqBE3ZqooI4QLJC5bgALqeK%2BUf8%2BX4wePL0e31cwG%2Fk99F1NZ0nNg%3D\"}]}\r\nCF-RAY: a27d59b10f2c11cf-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bb01e3c5b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43480,"size_decoded":44635,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4c1684204e7688eb1e597c220210eab","sha1":"740bdfd6b8755abb7e48a0e1ad00cb564b6166bc","sha256":"a7adbec5ee5a7cecca8489c103edddd0ab12a5dd4fe44a55c1d3c7727e6c50af","sha512":"c430a7c8147db2a2232bb2b1fc1488c172c7fad20802427d0e99cc983f3e45c625dec5c1b9996a672cfca13bc146f1de99adb5ff2cb4b03ff142ae26923ec465","ssdeep":"768:WDe9O0nm9HMggyXN0devNsUd8uWfvlDIXojlYRSHM2btoc06i:1I0n8LN08vNsJ1fv+ElfHMU06i","tlshash":"cf1302674c8731b1f24667fc6a82333ce88159877c97a41c721c8922174af576f1f675","first_seen":"2026-07-06T14:57:55.472099Z","last_seen":"2026-08-10T17:58:48.317631Z","times_seen":443,"resource_available":false,"data":null}},"time_used":3883,"timings":{"blocked":3235,"dns":0,"connect":0,"send":0,"wait":459,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_2028a026-1ab0-4300-945c-8247e23d1198.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.401Z","timestamp":1786324427401,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size80x80_2028a026-1ab0-4300-945c-8247e23d1198.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1128\r\nConnection: keep-alive\r\netag: \"94293c29541f406bd27f0e85ec159cf0\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:16 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 54166\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7diCQHizMJiKqruLTDzLHh8OJQKa2ThqqNdkkP9lmm7ua5U%2Fez%2B8Qc6wGcDNPIOqhuhBYKNng0vBc5oopYG86l4ipiAlUa4wo%2B%2FcPdLiEcyMARACgI1FZQYwEgGpEY503vFPaP6bpuohONHRECHbtk%3D\"}]}\r\nCF-RAY: a285f994cfc61c66-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bbc223874\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":2281,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"94293c29541f406bd27f0e85ec159cf0","sha1":"99d018d830f620b119a026b7ba7f9edb0a5bc2c4","sha256":"d527a61f9e3942ba8c8374016bd204edfbefc24b550dac917dddaa746d5b988a","sha512":"03bdc1c8b5b565f17b55899b9a1caaccd64334577eecdf4e22d3dd408f089b6454af8f606b7c90259e0d01ffa3859c09592bc72bc8c52301bd13c92bc753c906","ssdeep":"","tlshash":"2521ca54a5fc046fbe97f92f38dea4a508cd1766804509883c4971b44940171f36d3e8","first_seen":"2026-05-02T01:47:15.992451Z","last_seen":"2026-08-10T03:56:53.603971Z","times_seen":23,"resource_available":false,"data":null}},"time_used":6662,"timings":{"blocked":6323,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/css/40621.1781011881923.0ab0fca2.css","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.692Z","timestamp":1786324425692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /css/40621.1781011881923.0ab0fca2.css HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:46 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-1439\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324426=Av6UXq+6/oKoqY99P3wqXnyJxeAlbL5iYTwLqQFu9FlH5jdjtYLlwVk1e9Jl74bCPqhWfGBp5mgZS0Rx6d1jnaJegJ8zAWkh1LAih9YdsvNmh0NJjcbUMeoOHe8P1vMsAnaFUguZeyvKBxfVoqi8aM0+UAKZ7DWBmgCJYI+nLMDH9+sY8Q13VWkKokAMiXA+\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93b9cff3c40\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":1961,"mime_type":"text/css","magic":"ASCII text, with very long lines (5177), with no line terminators","md5":"a0ef4268641ef0b005737ce8cc0c4b44","sha1":"9bb50b9000a419e7a701392b0d7d6c992cf585bb","sha256":"f64c7a7e6ecd620d1c7f8cc67e1eda83a0a115a8d86f3954efdaba3c09d62e66","sha512":"07605ebd7e16aef28f0ad5ed406f29ea9b77e8ba6b2079c810aacf8faf0b4a8d18d4f7775c62860cbf6d4379729a60076103a4daa833c860ddebeee3793ccbe2","ssdeep":"48:ZSPkOO2s2L5Pukasq+nArLkrL4QuQKhUjUkM5P6CdRDRWURcWaTHR/:iOvyP2r4rEDFP61LR/","tlshash":"d1b1412f01703349641bad6807dc67098325d8b399eb37da259d2a0dcbc3f861eb718b","first_seen":"2025-06-26T16:31:28.933081Z","last_seen":"2026-08-10T17:58:48.386077Z","times_seen":3740,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":488,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.608Z","timestamp":1786324426608,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://x39p.top\r\nXign: Y3chQUTiYkH1TFoex6yJgZuo5VpK2QpYJk4H3WC5e407D1u8nJf8GTJyelZ8WtxpsdvbZu9JUGT3NbyUpbcUP6C9ziQzH5gc+mAYQbjequL1F5rFBigS3aKYJbO8cEeHW3+3qeawdWRBki+pBBdpzAy7b2/XBHSwTMoY7yi8Rwc=\r\ntimestamp: 1786324426605\r\nsign: 2i966o6og1nf966m\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: TQpcc2TMaDRwiE8wi6x2pW85FFX7Hj3E\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Mon, 10 Aug 2026 01:23:47 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 101a5176f8104527a64e063303944d84\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324427=Ae8P0Vx6qIl/uJqrwgZ9u1v/fVpyDMxwh3JrDQ61ZwpLtnVBy9Bm1sZGS4fIdAt7Qtl2eZcRXFG1mUOUHqH1t0UCjNYlyXCztsRcVS5Ell5kOULl+MTnaXUbu8jzIVwWms1jV18ytApkSmyMlcXKTrb88COQnFlLZz7vGcQKGnx52NzZ3iKuhVKa1VQFlsIm\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93ba1ba383c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":854,"size_decoded":1887,"mime_type":"application/json","magic":"data","md5":"ff86bf3357cc5a85b1f4547228362f0f","sha1":"7d184246768ede6a96355be4e232c4b5b43931cf","sha256":"3cd1c578313f11a7b9e9dfec1dc4cc0bd75ddb93f83ca0033a641f4315dd485d","sha512":"6afc468b676963ffc896dcdf460a1f478358b2bf9e5012906bef57e972d46ef1760db7ad1fc2219c5ce619fbf444c61f91bded49e23aeb6305f7dfe712af718c","ssdeep":"","tlshash":"f02198902102de45a61563512017d1c2ba7323882adcea60c291e512ac61d5b47df677","first_seen":"2026-08-09T10:14:04.739911Z","last_seen":"2026-08-10T03:56:53.616308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":364,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/71823.1781011881923.47c7ad12.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.984Z","timestamp":1786324427984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/71823.1781011881923.47c7ad12.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:48 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6eecd\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324428=DSyzgCHhjF4Bg4+7k5rJvoHFOnpQqlFDlme+jAyCtDmh3s22hqALMnpdwVfEDsoRwnJVA+/xQ7R9kAejmeCCMMeynpeUFkCdYda2AN5yGZRnqp4GGY7NdDfKivBo+ufcRNfj5EhEFrHx0XF2/cDI8EHdRugYloTaFcYshDZfxIKU3hKC7B0jklMJxKP96M9F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93ba6555ea2\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":454349,"size_decoded":80022,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65402), with no line terminators","md5":"af8ceb14b1c853510a4d4e956663df6c","sha1":"4d4c26cf35a97605e575e1bd7ac4b089ac747a18","sha256":"bb095595646240890498994e6b5dc6c50c1a5a1df023c4e18ddb338881c1f2e0","sha512":"2ebff77b16164a6d2301ac57434b854aa58e961390c9d37db1bd491c6ddc38c09fabdd328331a6ecd449657d75b201d850c5a8480f479d482d3259423252d935","ssdeep":"3072:EWNlVUpxqMXPca/DIonTGJwB5Vkqfyp9L80isi:EWNlVUmMXPc0DIoTGJwBbkqC80it","tlshash":"7fa4a4f4c244d6edea04ce056e7d6f2d50723786f6ecabc046eef8465e82827245c4da","first_seen":"2026-07-05T14:43:49.729057Z","last_seen":"2026-08-10T03:56:53.672143Z","times_seen":17,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":409,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_491b2cc4-5fc9-40f8-9c43-0efaf2041eb2.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:48.021Z","timestamp":1786324428021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_491b2cc4-5fc9-40f8-9c43-0efaf2041eb2.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 30510\r\nConnection: keep-alive\r\netag: \"c376313551c1d29a1d76ab853fb2e6ae\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:31 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143320\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqdQ7U2sVKDzAG3yyPUfFGCPZIq3TZ5DHA9q%2F8n%2BLhl6iAhf53jksVPfc3HruXy%2FXbASeVq4msKJDVYxZSKP7mvh0hMuvI4Rd3KcXPFjYk3mfavY%2FZ4YUuqN%2FsK2mWW865%2FMbD3zxswjCPXLuUZzv%2FA%3D\"}]}\r\nCF-RAY: a27d79072f6b1372-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324436=SewwZXC5o77Q8hpIdkD415QoaGmibdD+KUGaWm9kKVPJU76cjvZ4ABfwgLqXlPnM6LOvkP0RX+FoH+/HJDIOQJTgS1FZNmj0riGJnKEEsoq1GeqI8lZS8EfVERvXxDKCBVtpn83xvQvcWPGr+/l/zvoL57JxjIvPnsywmebz0UF2I/vI38ZeHbpo9HvCByHl\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc6713887\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30510,"size_decoded":31671,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c376313551c1d29a1d76ab853fb2e6ae","sha1":"7448d756474f14ad23753cdb201e78a249f38b2b","sha256":"920c6e18a256b540e1b0390ebbf409a60e4b16f80c199692c75c9c62c252583a","sha512":"83327d94f850950788085094b5e9f1b608badc96be538b210f62d51eb42abfccc1b11a7d8933a0b920ee0c7a7d059a5c473285a9f88d83b424a72586c95cc71b","ssdeep":"768:2mD6nFHYr2hkRGAzkYS1oHFkhKhInh9hmBgSiiNTIhJKOEcvH8LP:uFHYrrYAQYSsb2dy5IZvAP","tlshash":"61d2f1d254d846385f8ddbd91b9e87efff84876009b2623c04d56d01acb113a0c8b6ba","first_seen":"2026-05-02T01:47:15.971713Z","last_seen":"2026-08-10T03:56:53.625702Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9021,"timings":{"blocked":8360,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d991353f-39ff-4552-be18-848fc3fabfb2.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.344Z","timestamp":1786324427344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d991353f-39ff-4552-be18-848fc3fabfb2.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47886\r\nConnection: keep-alive\r\netag: \"ba0be3142a5adac8fdffb8c21b319dbb\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:09 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144598\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSAL1OW1m4wlBAWB6Dc8PzchxlkZ9AzqSr5FvCUfXxrhAZrMuc8wsno44PuYgJLhDF6X8M0ZYPKvqNWrjd0lmYiwimxNjaB%2BmMC0rvhjUxoMYEsJd8j88QoClT9wFLTZfb6pQPfhfqv9tql6AaUBmiM%3D\"}]}\r\nCF-RAY: a27d59aa7f26bc74-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93babc4385b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47886,"size_decoded":49035,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba0be3142a5adac8fdffb8c21b319dbb","sha1":"86a3734ad3716c5ecf67412f804a881fc9eaf4ca","sha256":"c3d9e9184bc542699b269037e068dd63803352fc1feaf06695ec888185f77bd0","sha512":"da43e90eef8c8f0aa5daf006910fe64bb579b9a0083df3c06b0f21c8f175d5dacc0b31009365ec391f0482e62f0b8449b98407b5a2423c20fc021aeead097296","ssdeep":"768:zpFTQF6ySs7gk0G8b/lE4qxGPlMt63JKVB/JmKjmz+0N2pqQg6yQV:fpyt7y/y4qoet63UbJRa+Fqwy4","tlshash":"ec2301147718d91012a1a6dbebcc1b6d6cae4947a4457a338d8770ccc7bdc9ee53ce82","first_seen":"2026-04-24T23:10:16.87696Z","last_seen":"2026-08-10T17:58:48.384026Z","times_seen":980,"resource_available":false,"data":null}},"time_used":2573,"timings":{"blocked":2185,"dns":0,"connect":0,"send":0,"wait":344,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/config/initGeetest4.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.872Z","timestamp":1786324415872,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /config/initGeetest4.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-3a7f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324417=Ptzdt+FUuUNHZKTtlKr9SiHGktL/FNC6JMSTgGOX59JwdiBMJedi69SsGhwJjdF5psDMb2A1yYaF8EUvxF6vE6rbfHtIwGqZXJnqACd5VcbRw9c2RGR4Ni1cQLqRHspedTtDRTdulNygSPBsYxB8wKLyo3uVv5HB6sLvnaxq7c8YpHm1WnBXJ1hcT6Ikg22V\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93b7a17381b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14975,"size_decoded":5043,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-08-10T17:58:48.514407Z","times_seen":2042,"resource_available":true,"data":null}},"time_used":1405,"timings":{"blocked":-1,"dns":0,"connect":1375,"send":0,"wait":451,"receive":0,"ssl":349},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/public-resource/holiday/23/h5_zs_jr3.png?version=1.0.0","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.949Z","timestamp":1786324426949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /public-resource/holiday/23/h5_zs_jr3.png?version=1.0.0 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:54 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"e6d8e5adcfa6735a60de9f3c62d1d347\"\r\nLast-Modified: Tue, 26 May 2026 12:06:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nM0ZDYH3FHJLMgOhJV7o%2FEl5MoDAC6GZ0k20KZswf%2FmtEvZ3GsXRbFYO%2BY4%2FbJ8we%2FParQeyRGtyuGg1NMRl6BN%2FcOqKIz8%2FGa4aigUhL7dUBaa9mVWNbP1Uu%2BBfBcQGeYeYg4dwp8a35zPC8YPCXW6nlPg5nR1OBlxa\"}]}\r\nCF-RAY: a27d78fa8cf30965-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324434=qv8K9uE+o2qUBRy5ZC61pX5+AVSWE5hWeD1nFeFpyz7bVwbfXfJQ8Dz/lsNdlgVPTWT7C/tM0WXsCxPQQDXgW3Hz5bIZQ2Oe3Ti//gkN0bzJRUQbc18jh1rQ59IU++L5sDAivoBRhKyJlp0Dxq54qBLIc1s6/QClt/kVtuTIkLQfvPMy0zlfy8Nt+5vXRw92\r\nAge: 143320\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bbec8387a\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13854,"size_decoded":14781,"mime_type":"image/png","magic":"PNG image data, 600 x 130, 8-bit/color RGBA, non-interlaced","md5":"e6d8e5adcfa6735a60de9f3c62d1d347","sha1":"67b83f34410dca87ade6d71c1940b7f4f905275e","sha256":"0eb541e570a532b2d452737a3fa8e8ba493dc8b2179e674fc0cf6015172be2c7","sha512":"c96a199d47294a4b6a436875a7ea381b5b79d18326426e5f81e86cd488eb932622e923c04fbe07dc3efdcd2e4ddf04fe3839f98299191b24b44900e9bd6a65d7","ssdeep":"192:iLCrzhZjJ/xGEk4BncuSX3kQfQSWktFdLZYnWKYDEeJXG3HPbX00Z8RuUIerFA7l:FX7Z+3MSXr8I4SXG3HL9SkV7sm","tlshash":"fe52cf55687bda6e70250618dd933d0a866c9697fb133a40e481d9af33f39760cd9f08","first_seen":"2026-07-05T14:43:49.683015Z","last_seen":"2026-08-10T03:56:53.566293Z","times_seen":17,"resource_available":false,"data":null}},"time_used":7800,"timings":{"blocked":7457,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/public-resource/holiday/23/icon_btm_jr2.png?version=1.0.0","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:46.954Z","timestamp":1786324426954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /public-resource/holiday/23/icon_btm_jr2.png?version=1.0.0 HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"3d25771bc9bf76304452411f24cf285b\"\r\nLast-Modified: Tue, 26 May 2026 12:06:44 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ut4dWfUjwdl7NIZL3xFjQDSNGe%2F2DVJXm2JJEk0zgMPxOlU1lU%2BidRLoVVCA24ssfQ4CAg7iE3bsIEtAnBBLQwUhpX9Q2WLQswIAwKbcLIlZDAqnaQpWd9saCkaqfcSgWYLYio4Gs3%2BQdxYhK8BUE3P4X5nr7kjTjvdB\"}]}\r\nCF-RAY: a27d78fabd021483-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nAge: 143321\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc258387d\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36158,"size_decoded":37352,"mime_type":"image/png","magic":"PNG image data, 240 x 180, 8-bit/color RGBA, non-interlaced","md5":"3d25771bc9bf76304452411f24cf285b","sha1":"39360f88aa6af7ca09f23701e474fc3e5173a824","sha256":"70b13d82d3d6d923dff702d51aa42403bb53ab0806c0d811aab2076383db4a4f","sha512":"2cd45f6d1560614c946592c468a5da1bfcdf7803936ddba0a6a2d07e8b306bebaa8d165eb8badf2e17d628043f5fc5c149d1fcad9ff117df89639c7e55765f2a","ssdeep":"768:TL5FFXaE36tTCEPOhGTWlRk3zNW942OdYh+IxVF8o2o1xr:f57KaKrO0TWluNW9x9xrEer","tlshash":"97f2f1226ea55f9d9c7893ad056d5e4c8787472fa7a81fc1801a447b372319b8ecb30e","first_seen":"2026-07-05T14:43:49.765858Z","last_seen":"2026-08-10T03:56:53.576263Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8719,"timings":{"blocked":7800,"dns":0,"connect":0,"send":0,"wait":912,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"x39p.top/m","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":80,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T01:13:34.506Z","timestamp":1786324414506,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /m HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 10 Aug 2026 01:13:35 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://x39p.top/m/\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324415=DAZX1KjeqtVOsALxy8Zlk4GKIigQNM8LCcwmEZJ9/+p5s657JnDjZWsFTtZ5mi+MrDdsoE2YHiWVXswW6h3L62gImnU/vaCuXxP9hgAXek6Fyp4+GPQknwM1I4Gr49ZIxRmIL53bvOSvH0vt4jv6/QPHkN/EgHwX4VB5UwROGqK+dCnKaqw6tOmVZ1uxZm+s\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3c19fe93b724646d2\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T02:55:35.911989Z","times_seen":17829037,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":3,"connect":320,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/img/system_2.e0c841e0.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:45.808Z","timestamp":1786324425808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /img/system_2.e0c841e0.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:55 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2f28f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324435=Tu+FstLLt10XbKs61eS6+QgYOSbPb5eelQEvzxwqvMSFtQaDqUyWsmr+1SEdlNwzmZGvbrtyd/eHwZ9Tp72SseGSjbGHM6v2zR/sJtiJpb/oQJEtEi/cPUTQmsbonYvsb4FrkYlnAlm3/wQGutdziIhtFStxN0ZMDjqFAQ5kwZew93h2pDE4IJjL9DIlyWuT\r\nAge: 143322\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f4219fe93bc3033c6f\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193167,"size_decoded":193374,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"60f811ab77928bf5939ee250c9ffb122","sha1":"33e5e99db67e35a4f87fd66a8dbbb824ec039246","sha256":"7b77e81d75aeb6c14eabd0bc2d3986c85b3cc14d346cc6b9a6841978b7a7134e","sha512":"dd813baa955cc7fb93b094ea013a01b48fd8b4c4b33c0464a04bd889edfcba7ebc1420aa5a7ad9b1ff2da48ab6045fa373cf7a160dd6b8c5dc4c81f3ca3e68e8","ssdeep":"3072:hh4+UNWmcu0bTP0uO13H2FYpmhKDil8fawKgu5vSu9YwNRroy+R3wc5iRHx:hhwcXMua3EYDilea55KQYwNdodpB5iRR","tlshash":"2214226310e205b065f5a166da392e914f109db4849ef32be0578e73f78baccfe51a31","first_seen":"2026-01-18T07:00:48.013603Z","last_seen":"2026-08-10T03:56:53.664743Z","times_seen":24,"resource_available":false,"data":null}},"time_used":11131,"timings":{"blocked":9687,"dns":0,"connect":0,"send":0,"wait":425,"receive":1019,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_1d28b817-0c00-4339-b666-213943a7b1d3.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.376Z","timestamp":1786324427376,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_1d28b817-0c00-4339-b666-213943a7b1d3.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 91938\r\nConnection: keep-alive\r\netag: \"d4f654e067ee701e55c386cad6b53574\"\r\nLast-Modified: Wed, 10 Dec 2025 11:50:44 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144601\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=44fvZ5xmWQrRJPxeAUdYEcj%2BCuH4UWoGNF%2BjLt%2FSRWOl%2BEg6pLqBbMlOqzEaZt6OdAVs%2Fn1YnSsGWN%2Bb7HVl05h%2BXczMfjZlWLENFwJntO1UYugf95Dd%2FqiY%2BTM5L9z5gm60oFDuQ3GqHCIrYqVpXy4%3D\"}]}\r\nCF-RAY: a27d59a8efdeafed-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324432=LleS2L9O8stRbBbZcQIxsOvBIHSZfAFe/IAnJYiXzSBcbGpVZf3BHOTArJbEe4NnSAD2HS7teq2szi1sDFB49RzEY36D5/S3p3zqvTvUm1kEfOhRrNgPsOTfPETOLVb5ZgN6YS6uwssV89zoQXZ+4p6l4p6FhntLB+ADC8tpbW2WrSld/5U/ZJd2HkPQ3wHx\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93bb5df5eb9\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91938,"size_decoded":93103,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4f654e067ee701e55c386cad6b53574","sha1":"a0f6315ed37b1a5d5da601adfbcb44cad2d9f5cb","sha256":"cd9f33e85a633a73214e9e94255ec27a3d272cadf2389345b6d240d4e36c53ab","sha512":"701a8be639fbb3dbc5670d9789cf01c3175d632a7902e3cfbb769e80fff9f420c10befecfa030adcced409dd26c2ae2afa1fcf617c7371bc6984b378685d184a","ssdeep":"1536:XsUxLKKnLpw8UtfepacmJUm70Cweits6VTpJz39R9s8dBmdEbi/pS4l8KjVIVAMo:PBLpw8UtfqyJUeueitTVbFs8dpbQSvK5","tlshash":"df930205f84d4f1dd86a31e6e142309c9472e0a83213cefb25b3f53997935d52ea6f48","first_seen":"2026-04-24T23:10:16.740253Z","last_seen":"2026-08-10T17:58:48.460985Z","times_seen":969,"resource_available":false,"data":null}},"time_used":5240,"timings":{"blocked":4159,"dns":0,"connect":0,"send":0,"wait":930,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_de72e240-4300-48d6-8f6e-b9cb363e7924.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.383Z","timestamp":1786324427383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_de72e240-4300-48d6-8f6e-b9cb363e7924.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 81300\r\nConnection: keep-alive\r\netag: \"4a30c16256a637de0e38e326aa6cdf0c\"\r\nLast-Modified: Wed, 10 Dec 2025 11:51:47 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144602\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uq2Ri%2FxaS0JQxQj9h0PrXkpDLOU%2FbESO1cuJLXb3g1BGVof0EOceW6dh86WnpUAAfAR4j%2Ft4FimPTDGxmLRxNwqll8zgS7wR7kFwCJLCUtq8InFg9Jvcyqv72g6IQndpZ7nuLhrxszhng9I1Rq7imiw%3D\"}]}\r\nCF-RAY: a27d59aabf4003db-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bb958386f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81300,"size_decoded":82453,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a30c16256a637de0e38e326aa6cdf0c","sha1":"083a8e24d12a329c41bc5271ff2ee57570a6ff1d","sha256":"2e9e6d8b511c612cae6e20caa233846b723fe3f3c899d19eb8389073f0ca8047","sha512":"2cc3551a276966a3615edbf590ce22d06779e40c371e54737fdd0033faf900483fe32a33fcc86327fc2e3098e5ee02a88d6e7c60552a4ebdeac5ed66a47f007f","ssdeep":"1536:rHYJZl7vtdLMbrX1zS7hmZHerpnyjI79AYRU6kzu0MRsIelVbd:rkf1dLMvl6MZ+9nyjIinjuxcbd","tlshash":"7b83f1603172ed83bd9eb46081883156f984d84473298ff72a779fbd93128e9973970e","first_seen":"2026-04-24T23:10:16.828064Z","last_seen":"2026-08-10T17:58:48.406Z","times_seen":999,"resource_available":false,"data":null}},"time_used":5980,"timings":{"blocked":5027,"dns":0,"connect":0,"send":0,"wait":928,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/m/","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T01:13:35.189Z","timestamp":1786324415189,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /m/ HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:35 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324415=DAZX1KjeqtVOsALxy8Zlk4GKIigQNM8LCcwmEZJ9/+p5s657JnDjZWsFTtZ5mi+MrDdsoE2YHiWVXswW6h3L62gImnU/vaCuXxP9hgAXek6Fyp4+GPQknwM1I4Gr49ZIxRmIL53bvOSvH0vt4jv6/QPHkN/EgHwX4VB5UwROGqK+dCnKaqw6tOmVZ1uxZm+s\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3319fe93b73b64424\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24671,"size_decoded":11470,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"886080ace6e341d83041fb9cab6fe765","sha1":"5a574ce85ecd12df0e7dc823f625a419835f5ae1","sha256":"e3be735996c2a43a47a27cf9f5f0183c27628f24e496e6469cadd77113e67a89","sha512":"fcb22ed8a2bd6c818f4997b3d4b98b2c43a200919d365a29f9e3d17a2f356ad4585f093f1d20183eb2617d34b41a2483dcc6ad65af1ce3bd8c0097d9fb663c42","ssdeep":"384:21ERlxqNBPJ82VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJ8iNYiKop/E6wkpcu2llz","tlshash":"c3b2191a9df3497a2423303a1f7fb20869b0d0134309ed403e4de7594f95aaa56f7bd6","first_seen":"2026-07-01T01:07:30.836706Z","last_seen":"2026-08-10T03:56:53.619183Z","times_seen":19,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/js/chunk-svg.1781011881923.7ca9cdc1.js","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:35.881Z","timestamp":1786324415881,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /js/chunk-svg.1781011881923.7ca9cdc1.js HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:37 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-72eeb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1786324417=Ptzdt+FUuUNHZKTtlKr9SiHGktL/FNC6JMSTgGOX59JwdiBMJedi69SsGhwJjdF5psDMb2A1yYaF8EUvxF6vE6rbfHtIwGqZXJnqACd5VcbRw9c2RGR4Ni1cQLqRHspedTtDRTdulNygSPBsYxB8wKLyo3uVv5HB6sLvnaxq7c8YpHm1WnBXJ1hcT6Ikg22V\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93b7a1e5e77\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":470763,"size_decoded":90048,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"2e885a50d7dc711be337a96fe33f0c2e","sha1":"8c767dd1bdcbf35f2577bd215ff6fe495cbd0f43","sha256":"603d14d58a247671742688b96c517d62e9c636443b960bc421af5352df4c01f7","sha512":"09289e06b0db84915693f0b78ab40149972b29693d0d6b1e66e4fbe9bddf00380f5f4e8e78961512d91a132226494572994ceade62d3d8a878126fdcdeb8fd95","ssdeep":"3072:/8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:/8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"c0a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","first_seen":"2026-06-12T19:29:57.244213Z","last_seen":"2026-08-10T17:58:48.519231Z","times_seen":1106,"resource_available":true,"data":null}},"time_used":2150,"timings":{"blocked":928,"dns":0,"connect":0,"send":0,"wait":543,"receive":679,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_95e34ac6-aa0b-4d3f-9ae0-451b7e2983d6.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.343Z","timestamp":1786324427343,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_95e34ac6-aa0b-4d3f-9ae0-451b7e2983d6.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72760\r\nConnection: keep-alive\r\netag: \"f3567ecc873ade2418801f0f5a4a755f\"\r\nLast-Modified: Sat, 06 Dec 2025 06:17:08 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144598\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qh9n4rV0Q6GnaMzlqeSopmCsYE%2Bhqjmbhkj8DoPRmdG9XB4SYu%2FiTJqNuodFi08E3r01s15AlKZnT7YcTzxqLM4gOBbgZt46GXQwUVM3o1dvwEH8qp7HZZM9U0%2Ba7dIp%2FPaxLOnZ940W4H%2F7%2BsNoW54%3D\"}]}\r\nCF-RAY: a27d59acce9e07ae-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324429=XVodu24Q0X985PFhlqT2EfkfFLGjpScqtEDcuO4Y9D2e5f5695/WTfLDsNddMzGbcY2t+r0GMTJB2/QLWuPMhU6EVuxeavu5oBdBDFPLnZKpCHK0Fubg3rZd33LVl+/uXYsTJm+DQXTb1lKjtVR+CLcS7aomHIkfrxr/To58ih35W33KL8RlusW7q5PobHjI\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3819fe93babc45ea8\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72760,"size_decoded":73919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3567ecc873ade2418801f0f5a4a755f","sha1":"e8fc02b34bd284bdffb53faea4cf595658b0313c","sha256":"4b1a175ed7a2578bee0892a9483844a11bd86070caf612d6714d961747b38420","sha512":"857339772b7cd720df654fc85ac26d103e6cb1ef75e2e1b3dd377b6403b34112dd44a07521fdcd476bdb0b657c3525cb25796ad3ae24a8820ef947c6718d9c44","ssdeep":"1536:GqiacLi4hDdd3WrRvp1BtjWbzMEws521D5kBTVhe3w/PKgXJcuSOe:G71L7hgrhXBtjgzMEF5A+VkEPhNe","tlshash":"0b6302ccd2cc9aa0c4a46cd7f4057b38a962b589664f997303e2e387cac4bd917171bd","first_seen":"2026-04-24T23:10:16.730515Z","last_seen":"2026-08-10T17:58:48.409455Z","times_seen":970,"resource_available":false,"data":null}},"time_used":2654,"timings":{"blocked":2174,"dns":0,"connect":0,"send":0,"wait":368,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202606/_webp_size1298x1156_317f68a9-d367-4c78-837b-bba9a02cccbd.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.345Z","timestamp":1786324427345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202606/_webp_size1298x1156_317f68a9-d367-4c78-837b-bba9a02cccbd.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 104872\r\nConnection: keep-alive\r\netag: \"7225fe319e0063733dc28dc3cc064ba5\"\r\nLast-Modified: Tue, 09 Jun 2026 11:46:19 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144600\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhRoG%2FtFBXSRp%2Fz290HwAucJBUA8pY9hagsxcIQ1to5sq%2FrAPgeoftgAdLc8u3YZ3AzUXZYw2SMpUlMDXGv3M%2FAbZYtgHoXGBDodD73M2LuYcs4yLheCkIaIazv9xZWg3EezUNl3oWnrrNRp%2Bo32iz8%3D\"}]}\r\nCF-RAY: a27d59a75b6006fa-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324430=7HCkHA29IDAVrIIAhs3cirwgi4Q34sAMR45uCIWQ9RthKKPNCM3wU3YxFclVtcEbyDfVf52kV6jFfVhbXRv+Y7A74IQM6ZHC/98Zz0N4furOArGASTe5f13dHQxJWD3oBZ2JmrwfreFPbXF2/BDeAGVl4rhgSgMjTO/2s21ulCAQNWEsKg1GKvv9pyKoJ763\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bacd2385c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104872,"size_decoded":106030,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7225fe319e0063733dc28dc3cc064ba5","sha1":"3ace9d566c5ba5d7547e966b52a7718aba214871","sha256":"8512dfacfdccfbee2dcd4b545bfcf151229cf83d6f5ea6d4762d9fa1dbb52724","sha512":"6fc35795ed02e0af6d9e8593948460d2d159871ef64d68fcdb6c3849e1d04e095df2f083e371ad185dec337852c56fe8772e51ba5c23127db88ca78d2b887c20","ssdeep":"1536:Lbtnypjj4aiFU6CcwUrT7oxzAjzIVbxV6FscOAlMIUZdH6/8JEfuI1Q/QY:J8jpAU6iUn7oxzAjzIVbOVlhUZdH2T1","tlshash":"47a312041207b12ef9eecc769e4f92c16d190c357cde1a676abb74c8e206e174d4e8ac","first_seen":"2026-06-12T19:29:57.257753Z","last_seen":"2026-08-10T17:58:48.493165Z","times_seen":621,"resource_available":false,"data":null}},"time_used":2822,"timings":{"blocked":2445,"dns":0,"connect":0,"send":0,"wait":344,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0b2c7f25-c17b-4d07-adb1-68f1823633a2.png","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:47.390Z","timestamp":1786324427390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0b2c7f25-c17b-4d07-adb1-68f1823633a2.png HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10536\r\nConnection: keep-alive\r\netag: \"83c227836fb01b2cef7c240c8d45f098\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:09 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 144624\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DK%2FraH8aa7N58g7pMO7iuXG4uKGhh3uv5qJAdB1VTvbup4fuhiCxpcLQ5R5dngxCpFwEiXlW1ni50ZjkjBn2SfjLqiyhz%2B6dwz1ByY8kjAn7Id7%2FzNIbhRi7vdn8apup0gRKMrnlZmUW65aGEL3bCZw%3D\"}]}\r\nCF-RAY: a27d5922fb50ddcc-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324433=1DlFwut5YOFOcMhHM3bZO92lHzJoGgOymtUqiOsDaDA6EK9dsiEcbmLWeeeEuaf7kt8K3f6BAWHYtL2MPhLsuGf483a2stLmapWVRKxeApxtJZOf8pHSs2z+Z/MpJaJtSb9l9ZqP+/oMlPJ6cKytiVAS2qpNhvTgw0jPl/hOTRyEBS02wAgdRrf20ShufA3F\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3719fe93bb9783f67\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10536,"size_decoded":11689,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83c227836fb01b2cef7c240c8d45f098","sha1":"fb1e1f8ef0fa166415a743fe004d926e7b040aba","sha256":"54544e3d3311ced9fef367585eb60a15e3bf7d8490ccb2098d7e76d59fbc1fea","sha512":"d41d274ecb2373e9f9eaafe28710226a6bdf54d4c0c8a24c9b04fdd18a6d7fb71611dc0111f54fdd6750929bf002dfbe4a2822fd77f455f850d3406671b6d499","ssdeep":"192:6Xrxa2Dv2+2JgMsTWhgDPkmw0OwIK1AmEIDvWrxaiXFr0NN2uCd16Abhu:aa2Dv2vJmTcgD8mw0ODBmilaiR0P2xJ4","tlshash":"d922b0aad71a5b23ca0056163f7f3476c1567c371b2eeca529eebd0112309e469f9313","first_seen":"2026-04-24T23:10:16.72265Z","last_seen":"2026-08-10T17:58:48.403411Z","times_seen":1073,"resource_available":false,"data":null}},"time_used":6006,"timings":{"blocked":5642,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x39p.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_7994d4cf-d1a1-4583-af8f-0f45b9f310e4.jpg","fqdn":"x39p.top","domain":"x39p.top","tld":"top"},"ip":{"addr":"154.39.104.132","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x39p.top/m/","date":"2026-08-10T01:13:48.023Z","timestamp":1786324428023,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f45m.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:43:16 GMT","end":"Sun, 01 Nov 2026 06:43:15 GMT"},"fingerprint":{"sha1":"CF:CC:1D:C6:DB:A1:23:DF:82:12:B3:AE:2A:29:40:51:4E:BF:BA:93","sha256":"B7:74:6B:02:16:5A:40:DC:77:DB:F3:36:A4:02:EB:A3:A3:CC:F4:BA:93:8A:45:2A:06:B5:48:53:EF:5F:55:4E"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size750x264_7994d4cf-d1a1-4583-af8f-0f45b9f310e4.jpg HTTP/1.1\r\nHost: x39p.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://x39p.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 10 Aug 2026 01:13:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 23666\r\nConnection: keep-alive\r\netag: \"6f0397c598dedf3cfeea8f8a9f48034d\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:11 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 143320\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LswxofD9ECv5tP9BK23Ok7J52Ywhk66fp3hV%2FkItE24k1FaHObLUDREAfvXongdEzuuHclj33nUpUlXa5RymBteTaqN2qZoxpIzo1y1qs99h4G%2BzBlSbn5fGUD4clCpV1HZ6ORftUCi19%2BYf1Uhjj%2Bs%3D\"}]}\r\nCF-RAY: a27d79089f1502c6-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1786324436=SewwZXC5o77Q8hpIdkD415QoaGmibdD+KUGaWm9kKVPJU76cjvZ4ABfwgLqXlPnM6LOvkP0RX+FoH+/HJDIOQJTgS1FZNmj0riGJnKEEsoq1GeqI8lZS8EfVERvXxDKCBVtpn83xvQvcWPGr+/l/zvoL57JxjIvPnsywmebz0UF2I/vI38ZeHbpo9HvCByHl\r\nL-VIA: l1=4iaGgjza0Vwox8nX\r\nL-VERSION: 1785742909\r\nL-Request-Id: 0f3919fe93bc7f53888\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23666,"size_decoded":24821,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f0397c598dedf3cfeea8f8a9f48034d","sha1":"ff4baef46c5c1c47bf23e77a3a05993c0a3ac9e6","sha256":"8f165f6c3412aac6d4b172cb161c554808b47b1dc22475860230fe3942a542c9","sha512":"4969ad8676516f951819edb6a0330845ec147d83fa73d2b5bc500f958009ada566aeb82237ae6f78b2441eb1016c14fc6a648884194fd0c1ff6fa6491eee8cbc","ssdeep":"384:dHEej1HyPqMxet/GDp/MrObIHxDH4DBgXgigClw986nZh60EBIfWadEYfEov:dkYSPHet/GDp0rOb+GgXgi9O98EmBIOu","tlshash":"49b2e0638f04c96f26cad0fa65315991d689d60e7ed32e4f780a38608a4f267f677029","first_seen":"2026-05-02T01:47:15.994151Z","last_seen":"2026-08-10T03:56:53.689686Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9093,"timings":{"blocked":8729,"dns":0,"connect":0,"send":0,"wait":361,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"x39p.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"x39p.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}