{"report_id":"cc6eed08-1cc2-4e64-a2b5-ce2b085e42f3","version":0,"status":"done","tags":[],"date":"2026-06-17T20:36:09Z","url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"title":"ZX2026","dom":{"size":20442,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6853)","md5":"6732e0802f556ac474cf2f06614333dd","sha1":"d79863ee6746a45a28b07a5fcb273b0559642e6b","sha256":"a51a8d938fe6910d283095e56dc429ddc7d11ab5f588755f959a1c33292d08d2","sha512":"30e79131e93661fa349d7d38bcba60f30781c893a4c7c8b0e5a634a483da5ad1f15d09a201ad66b3b9d8d6a6ff3640b3c879f87185ea2cf91114d98ecaea739a","ssdeep":"384:WDWJpEl1YKkBzsju8pk9X+OIjlYAuN4qLeLG1pmS:0xmoXp4+OI+A1qLwS","tlshash":"9892442f1c48542b2223a6996cbbe74971b7d60f894e96007e5c43900fe7d78adbcf58","dom_hash":"domhashc55f6b278b4c0dab27a68e9bdb9d98f9","first_seen":"2026-06-17T20:36:13.449295Z","last_seen":"2026-06-17T20:36:13.449295Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T20:36:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.zx2026.xyz","ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-12","domain_rank":0,"first_seen":"2026-06-15T11:44:16.942028Z","last_seen":"2026-06-15T11:44:16.942028Z","alert_count":20,"request_count":10,"received_data":187187,"sent_data":5674,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xjgch7.zx2026.xyz","ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-12","domain_rank":0,"first_seen":"2026-06-15T11:44:16.941568Z","last_seen":"2026-06-15T11:44:16.941568Z","alert_count":40,"request_count":20,"received_data":2580193,"sent_data":9535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":2,"received_data":45790,"sent_data":1170,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-06-10T20:37:20.512099Z","alert_count":0,"request_count":1,"received_data":116672,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/default-D_BtcVIn.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c839d641e6294a7d2ddb8f71a034aa9","sha1":"ba85684b684af2699ecc1136931b0eb8b4e2294f","sha256":"5425c22588eef08ff2f4adc60270f413e49c9d7574069bf4a037e17bf5f0a9ca","sha512":"2a242d99e80c3a3d1f4dd0767fdbc04fd634f4e36c0fc209e3f4efe8bfc28a14b229bbb42dba9e4a7e469437cf885a49c2e4b0ff6647b86cc84e76371e07e018","ssdeep":"768:glFOPO+POWaFOyfqOD1qkraYOTPOIzaofqOvbOhFODO9OGaIjDidNB0ofkm4FLdU:Ou0wwKkmWdB6Fsxf6gDjNOrhJGo","tlshash":"9723a5815907933fc572da4a484a6482314c6fdbd00cafa6f3f4951b86cac797b3af25","size":47325,"data":"","first_seen":"2026-06-15T11:44:22.059937Z","last_seen":"2026-07-18T11:58:51.244314Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/reg-BwrdL2yx.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e19c9091a020bbaa73ef1a078ade6bff","sha1":"b4020b529a92e38c7e79a56047d75f60971c7caf","sha256":"0c40ed093267d60769dbb623768dea3fb5716e5f77340e0b2625e7167b90b114","sha512":"f131bd7015a93d680519e0a5b6c00e213e62c3230d0945220b8ce21bfa9aafaee2796213719a66f260e66a6313a3f50389d331e61d9b54797161d5d4f6086bbb","ssdeep":"1536:7JQ+CqxezY9ounsvDHdfsolUDF2zDnC+sT2EWd8Rt:7JO4Gm5Ujp5eR2nChKtGD","tlshash":"8db3540cd4f5ceb798b7b64e79078420a16e57ffc2038b26e77c06061e96cd496326e9","size":116335,"data":"","first_seen":"2026-06-17T20:36:13.483938Z","last_seen":"2026-06-17T20:36:13.483938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0c9ff6322979beda3ef6a855d997e662","sha1":"df89e42503ff2198d598b2dc8e34228b5200deec","sha256":"964fce1a2e5fd8ed07a5a3a201b1da9b6d89bae1e63735fdbd3b16a64e3512d6","sha512":"3d71fd18cc92149d5259380581dbf2f3a90e0ada91daa3ebbff45d75ca3e69516fbafa6ceb19b313ead5b02af4ba779667522239adcb6642762963dd1fd227e0","ssdeep":"","tlshash":"10c08cc4a0c2ad00a602645064af74e8a024402a7088ab029c98dc482ea24f48233e98","size":148,"data":"","first_seen":"2026-03-11T10:54:58.02843Z","last_seen":"2026-06-17T20:36:13.489336Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-20T16:10:19.55067Z","times_seen":4548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eb11a5046bb7cafe92c775fe17c4baab","sha1":"86aacc0454104493f2bd4b31ea87f57217e2ef5a","sha256":"8636e3e713a2de989bf94ebbeffca1cd1c9cb96c093ee26eaf80678b1d8511aa","sha512":"39afc498d02ecbf73d8f599900ff3d323ddea637777e12e7d486917b596a962879748008ee96320472cb47fe440ed46ecb3f16995f43df8dc295ad0ee4cf0e15","ssdeep":"","tlshash":"15c080c5e0c62d0056026411157f35d49034441e70481f868cdcdc583d230f45337d9c","size":158,"data":"","first_seen":"2025-09-05T02:20:56.045012Z","last_seen":"2026-06-17T20:36:13.490728Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-19T04:49:37.632348Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-19T04:49:37.633546Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-19T04:49:37.634073Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-19T04:49:37.635049Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-19T04:49:37.635907Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-11T19:56:20.396101Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-08-20T15:56:09.576045Z","times_seen":2772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94d71ca3d432c5a150ba0fec148bec8a","sha1":"f149c8d29e80003d26ed2e460cf5890f8bf67978","sha256":"5c8151446c3fb9fb384c25e941b64d83149cba01d5a7905fd2844d6b4679114d","sha512":"9e345046d828729d97f78fe91cdc987f97e0088d6de76d2171141348aec8b658006105e5172bfb5845491d5782b26c57a8c4245f30fab81daf9bd33adbc71ce3","ssdeep":"","tlshash":"24c08cc4a0c62d001602681010af34e49024402670481b428c94ec882e230b08233eac","size":139,"data":"","first_seen":"2023-09-13T19:31:22Z","last_seen":"2026-08-19T04:49:37.64352Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76811db4a3d5546de19bc46f245652b4","sha1":"065ddba5bf95b5d1f278bb4a908a53fc4f0a41b2","sha256":"237e40d42319f90c108ee79382b7200ea26929d92fe7799cf0bd33efc343ebfa","sha512":"f7d218cf377027fbcbadd061e0a97768fe6955ff69385e531406117b74cd36e368441724eabbcca6f4424131d73e6f50baf10591dde8509fefd6f7cfa727dcf6","ssdeep":"","tlshash":"efc08cc8a0c22d002602a61020af39e4b038802b70485b128da4de483e630f58233e9c","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-08-19T04:49:37.651523Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c9906a60bf176582d9c762184036ff97","sha1":"5c61bc5b5cf5f9f82e45f9ed39397d6543de7e6a","sha256":"f72ccf65db7b64c33731893405e035c0d29bbfc704a4d4ad94d6e0d5a7684b20","sha512":"f922a474f726dceac9a7d8ae699f84be6815d0436ba8e3f514a21bb3d6907058ed6cd5544dfe13e21b701e787959e922df9967a2ea5a936b5ef789fe4848cfb9","ssdeep":"","tlshash":"bcc08cc4a0c32d002612681020bf34e49024402670481b438c94d8482e230b08233e98","size":139,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-08-11T13:06:41.585949Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseLogo.vue_vue_type_script_setup_true_lang-BOG6j9uE.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1974ba942198ea485ca85656d29d2336","sha1":"4fdb7a97db8a54232845e49cf56879cef28fe795","sha256":"f5051ab3ac69aa4fe688a359183f400224afa76ff640f54bae551224fc0b1730","sha512":"136d74ad66df8721347c347a7f8f1a04a655df8a8d31918d3e2fa2b2d0f4e0b46a90fc78456c6bd697323de408aa07ece48ea9ebc0de65a9a5322d6a62fcc985","ssdeep":"","tlshash":"78f0e14e5d6e41fa95a344582f4b908025084e9ec635ab41f2f827356741c59741db38","size":585,"data":"","first_seen":"2026-06-15T11:44:21.923446Z","last_seen":"2026-07-18T11:58:51.247133Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BAKlFBiJ.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b87be0319cd77184c345f2942f252a","sha1":"4368303ef89cc06860a4a1366a07250f4d3ed94d","sha256":"6dcd468436ec5ee1fae0acab5b94bb4496a1ee01e28fc9c993a7e4f405bce39a","sha512":"7dd99a961c1be9ec22411e159a1a9ced4b11738f466b8d2e1a79754e1b6175cc7225d6731eae267514d46edbeeb9d70c469cf7f37c39b9a494c49d3b9c45ce3a","ssdeep":"","tlshash":"2cf0c01c5c11caf9863704453e4610a108580f7e665cba82e9eb18119fe20bc372b72c","size":531,"data":"","first_seen":"2026-06-15T11:44:21.921802Z","last_seen":"2026-07-18T11:58:51.242108Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/ContainerForm-B1GuOcbB.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf3a691eec7906fe5ffc815ad5314d6e","sha1":"bc8ce28a4ce36cfc3372a485c6a419c850d48155","sha256":"9c8365a5a1944b191d2810b48f577933a9c3ed052632315248a37e1e00a0aedf","sha512":"a2851185cb98812628a575ffc46048341ab9091ce97e34b3ff1ef99486a35e93a5085c1feacc3c8a9d0bd56faae6d53d6e57cda93b397b61aff0a73f5abf2d28","ssdeep":"","tlshash":"70e0684cac00e271c061464c21320012e90e3e9a32bc5843606e407a2f2546e620ff08","size":361,"data":"","first_seen":"2026-06-17T20:36:13.472268Z","last_seen":"2026-06-17T20:36:13.472268Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"10e247b1e2fdabc6df5924c7ba030143","sha1":"5ffb3521af2f1de2346aafc24cd370f96eb2492e","sha256":"eecc77cda212e1b84aa604a30d271abf4f89ef8930c7527adb67f3f4e47bfd6a","sha512":"51902aceeb1ae468f85fba2fb32c97f1cd1b3ac9c0a5920ac0f97a073de2974584878855d9a8258bd080d65ee031f548be5238c84ebf1f5186bbc6b0a9b7117c","ssdeep":"","tlshash":"07c08cc8a0c62d202a06e91010bf38e8a038802770891b028ea4dc483e330f48233ed8","size":150,"data":"","first_seen":"2024-08-20T18:12:14.496137Z","last_seen":"2026-08-03T14:06:42.941222Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-20T16:10:19.593416Z","times_seen":7304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-19T04:49:37.632348Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-19T04:49:37.633546Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-19T04:49:37.634073Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-19T04:49:37.635049Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-19T04:49:37.635907Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-11T19:56:20.396101Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-19T04:49:37.632348Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-19T04:49:37.633546Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-19T04:49:37.634073Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-19T04:49:37.635049Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-19T04:49:37.635907Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-11T19:56:20.396101Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/index-DNS8lFo7.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfd560293d130fecbe2248eb6538ca13","sha1":"55c3762444e0a572176da90fb248367f59a74e1b","sha256":"98efb8bae37d714c80bba46f2e7639084b5427e854bb4694f390f3b8be53203a","sha512":"73186ffd1f34dfbcf1d1bdcd5e3531d14a6e7bf1e4db7e07323cd4f9778cedb2fc4e9cd8d0648824ee267482658378a209ec1a0c9c61460de1fb6eeaf79e4bbe","ssdeep":"","tlshash":"a151a66c7cd88934c7ff49d844570552b61f0b19822888f6e4af6d5c2a3e548e23fe38","size":2890,"data":"","first_seen":"2026-06-17T20:36:13.465375Z","last_seen":"2026-06-17T20:36:13.465375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-08-16T11:26:19.734321Z","times_seen":2814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-19T04:49:37.632348Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-19T04:49:37.633546Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-19T04:49:37.634073Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-19T04:49:37.635049Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-19T04:49:37.635907Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-11T19:56:20.396101Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/LangLabel.vue_vue_type_script_setup_true_lang-wZV3jyIq.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b37d555fb89cd8996f381fc68e41c33","sha1":"21c50ef8503e014417cd39d75915493cc9cdaed7","sha256":"fbc23dc31a611ffda10e0e55c8ede2b7a97860393dfab524e01490a080299c03","sha512":"64f3754300c05ff90966c2ab91c2078d727cb1628a239758fa1d29e99d28f45c1e005b666087e1cb16f606759eb9cbc01d378d475a2c2bf84bb57ff4cb71fb14","ssdeep":"","tlshash":"2ff08b6f1c21c674c5b64d183a9b080054495f6f6624ea41e29e5e135fe286db3feb28","size":555,"data":"","first_seen":"2026-06-15T11:44:22.04977Z","last_seen":"2026-07-18T11:58:51.235541Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/PhoneSelect-Cbbf4f9h.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2432cfa78b4f873d4f1930091d922c36","sha1":"c62a2d40f1775e577dab2d37a208edc05a75805b","sha256":"8fc864ee41429526e49923ade5010a5005ff49627112a27539f42c56ea5d8faf","sha512":"f48ba63ec0f4285e511e7ac3a6f75662999225185617ce9345d91f82a096aea05dfab8c7e04737f39e4f4a174f5002e603d6a7993d9841e8146813a3d27c25e9","ssdeep":"192:Sxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFhe0:Sxj5a28wa8H5tnzxaF","tlshash":"6e62bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf136259a00f7b5cb65c","size":15511,"data":"","first_seen":"2026-06-17T20:36:13.47662Z","last_seen":"2026-06-17T20:36:13.47662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-08-20T15:56:09.576045Z","times_seen":2772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-20T16:10:19.569446Z","times_seen":8382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-08-17T07:32:26.025078Z","times_seen":1040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-19T04:49:37.632348Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-19T04:49:37.633546Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-19T04:49:37.634073Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-19T04:49:37.635049Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-19T04:49:37.635907Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-11T19:56:20.396101Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseInput.vue_vue_type_style_index_0_lang-DFsXPIw0.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5470b8aca6ad9cfa20fe41d5f717463e","sha1":"edc56af961bcb8dbb1a8865f851dde4332fe3c92","sha256":"0a472f10fda195065e91e109e0b48262473cd23abcb8d71be3eefd90bfd02f82","sha512":"fe300701497b9ecc9431df05a1be91cf3640102792efe42211a2b956ae916e7e64fa6b45a9694891eb2547f5b356e06356ca56315b775e4ef86047de29d1bc90","ssdeep":"","tlshash":"62516104ec159fb3d6b3964ca9db44a0a05c2bdf85054f5110fa561c2f5ecf8233af28","size":2490,"data":"","first_seen":"2026-06-17T20:36:13.4547Z","last_seen":"2026-06-17T20:36:13.4547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5bd6185639b8be9b5d6a79cf5af2a9dd","sha1":"f1cadfb16d24785897f89d1da75adbd0f028de58","sha256":"8974133640d35c1c7fff7a94f677c866910b8e07e2830473c9ef84da0f01fa9e","sha512":"4b9b0252665f704d49cafca04e04d96d8ffe1f2348946d655d3d0d7780342b865e6b8451bb687c6acb4f2690473c13fec9b10a1b036f1d2a028a8e34c6dd35a6","ssdeep":"","tlshash":"7ec08cc4a0c23d001a23646120bf34e49038402770881b428d94d8482e230f08337e9c","size":148,"data":"","first_seen":"2023-07-15T02:55:06Z","last_seen":"2026-08-20T15:56:09.610285Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-08-19T04:49:37.641988Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/index-AnYuyRDf.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fec1e903d5af9112714c4348534bfc5","sha1":"125eb76a99ab5b632d1896daf7f9c80b9df0d4a1","sha256":"91f5bceb9b9f47d6e7caabdb16f535e2caccd7a2e5919d5f051b2d18f039169a","sha512":"ecb6d8ecf28d090d10ba401de528ab2e07a603e39fa1274f4625c0aebee16fdb402adc8a512f9302910bfe83b4b0d2fadc6981ad04dc61beb632342d707d0279","ssdeep":"12288:AyujiViZv7wNjAR7yazJDGehVcTb4yTlZVPpVo2VyF:VujiV0Y8JbJKehS8ynVhyF","tlshash":"c055a1285a2bf344e419c0dbf9373c84c59de18aa00764d15fb54bb31ba2797eaacd13","size":1336760,"data":"","first_seen":"2026-06-15T11:44:22.088633Z","last_seen":"2026-07-18T11:58:51.297316Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ab19199ea59758ebc6cc75bb821ca68","sha1":"f4e10c7fbbdaee5cc377ee4dbfaf1d71902d81c4","sha256":"71d5e1e564c8cfc5091d0db9e866d7e86c6250550c92c01ed2760e67780d9fdb","sha512":"e0baa231b103bacaeb97ad1e8a593eb4c41bac67c37288ec67da139b44e10d8fd94affd5fffe9685d7dbaf39165de525a737d4647c620e14d925ea9a85c750e2","ssdeep":"","tlshash":"f6c08cc4a0c62d101602a45110af25e49024802670482b028c94d8492e220f08233e98","size":137,"data":"","first_seen":"2023-12-27T11:05:43Z","last_seen":"2026-07-27T06:32:38.504664Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-19T04:49:37.632348Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-19T04:49:37.633546Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-19T04:49:37.634073Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-19T04:49:37.635049Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-19T04:49:37.635907Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-11T19:56:20.396101Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseUserTab.vue_vue_type_style_index_0_lang-5yqXbLof.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79a7037ce2ed8d591df4834dae073873","sha1":"db1723eeaabd3368a1ae4fac8331c9c841c6f201","sha256":"63d9308ac966375e052f2ee47986a7083570cc74aadea6ac8e46a8f658c62724","sha512":"1fdc443603314dba18e203717832830fc3c9ae14ec003ad435eb839878699ff1b5bfdbb73631ff87ba21d5f6654ea8011bc8c3f6c8af4babb4e9b4cb0b44386c","ssdeep":"","tlshash":"4f11888daca9cfb604f208a82e971069e094bb4d9614c927d05e4431335fcf8e68d32c","size":948,"data":"","first_seen":"2026-06-15T11:44:21.89845Z","last_seen":"2026-07-18T11:58:51.267056Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":0,"column_number":0},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":0,"column_number":0},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":0,"column_number":0},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":0,"column_number":0},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":0,"column_number":0},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":0,"column_number":0},{"level":"log","text":"isTgfalse","filename":"https://xjgch7.zx2026.xyz/assets/index-AnYuyRDf.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"api.zx2026.xyz/api/public/get_lang_json?d=1781728548026\u0026lang=en","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.034Z","timestamp":1781728548034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1781728548026\u0026lang=en HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://xjgch7.zx2026.xyz/\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xjgch7.zx2026.xyz\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zc%2B1TlfZ0LRsN9mZNJJlJChoDZDZ3ey6HaIpxBPBs1Vk8d8mCpDfFY8MrikiSSG%2ByrJxiO%2BUiuzeqkgWt5JuABCRb%2FKBvVaBuTUtRK9pv2wDCkYe7iaQMLwpMtHrjJTo7w%3D%3D\"}]}\r\ncf-ray: a0d4d7c13ee85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":801,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T18:30:42.88905Z","times_seen":17996248,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/default-ubwpkbGm.css","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.535Z","timestamp":1781728548535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/default-ubwpkbGm.css HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2c14f6-1cdf\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtyRWnx6Lfxc%2BKeWSuLeh3SePfSA39pBlmiJphMGpoMqBN4U%2BZsQ2Fd7VQ7LL7NzWvL9z0bjDhENEvjsL3XEMyJoYqMhI%2FE0bSA03cRf0OwzICV%2BZwXm2EuIUcfoDQkYQOwyZQ%3D%3D\"}]}\r\ncf-ray: a0d4d7c45fdf5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7391,"size_decoded":2241,"mime_type":"text/css","magic":"ASCII text, with very long lines (7390)","md5":"bee8bab288442cd51cf48b7a51c8a881","sha1":"ad778f3b815f42fb2bcaae01f20067b4d7813d03","sha256":"b764785d659d2d5ea55219fb4107bd5930ad4742e0b42f7cd11334721300fe50","sha512":"b3ac704f127f836a09a10ed2efce4ba7130b6ef2624576044e86f4efadcdd6709f5d30f65ec8488bbce20a551ccc8720d97c5b8c1b5738e125c2d55f755ac499","ssdeep":"96:dbUkat9lAqhvtjr33m8O+ZrVG1mhg2/z5ZJwyksVuVw:dbUkatjtTf33m8O+5VGg6C1wyksVuVw","tlshash":"b0e1af142438732e9a77f1a765ff518c4824e652da636b8eb313b50059e7b933132bcb","first_seen":"2026-06-01T18:58:41.761315Z","last_seen":"2026-07-18T11:58:51.258293Z","times_seen":9,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseInput.vue_vue_type_style_index_0_lang-DFsXPIw0.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.543Z","timestamp":1781728548543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-DFsXPIw0.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2c14f6-9ba\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NF3cDPkJeyDVpq7vEfDBnTl3PZFHjpZMIkeSQ19MkuqCxISqyXRLTkE%2FBZ78VFfeWh%2FBhCR7NJDVOCkKbDRZMkBqdcs0YR5v7D7N9Lo40cHrngDcqfsgX5JMNKJL1taaimRKmw%3D%3D\"}]}\r\ncf-ray: a0d4d7c46fe85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":1740,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2489)","md5":"5470b8aca6ad9cfa20fe41d5f717463e","sha1":"edc56af961bcb8dbb1a8865f851dde4332fe3c92","sha256":"0a472f10fda195065e91e109e0b48262473cd23abcb8d71be3eefd90bfd02f82","sha512":"fe300701497b9ecc9431df05a1be91cf3640102792efe42211a2b956ae916e7e64fa6b45a9694891eb2547f5b356e06356ca56315b775e4ef86047de29d1bc90","ssdeep":"","tlshash":"62516104ec159fb3d6b3964ca9db44a0a05c2bdf85054f5110fa561c2f5ecf8233af28","first_seen":"2026-06-17T20:36:13.4547Z","last_seen":"2026-06-17T20:36:13.4547Z","times_seen":1,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseInput-Bza8nYTg.css","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.545Z","timestamp":1781728548545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/BaseInput-Bza8nYTg.css HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 08:27:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69295cf1-6b4\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meHtPqbY%2Ftcjg8wxACfdQNrosVet4X9qHHN4jaM%2FeRjdGGunQo6%2BJnyTMKtXr92gaG89op9BL17bYydtolzOv0NVvJoLvzDtku3N5aBqrIK6E6V%2BvKZMz4DorpMH50faEhD8yw%3D%3D\"}]}\r\ncf-ray: a0d4d7c47fea5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":1316,"mime_type":"text/css","magic":"ASCII text, with very long lines (1715)","md5":"2dec063ddcc835dcb02abeee35f28a19","sha1":"4de369e362b979bb2da80eae83575519cbdcff57","sha256":"13805720d9b1ee8f859d1d9c0bb28fbe2b00b92720e8faa8f364f4c0eb7c7df4","sha512":"835a0a498bc59d2be5947eac8765d6364036648e5b821a0f71cf7b9670c60c47bb0267f22da5e902608a2528e9e4147306dd09748d1e798a68f02ec17565b7ca","ssdeep":"","tlshash":"8431af0c1e50df1a18ba5ef3e1c4ea97380954b38fa38d05c040541a87969b52f7fe68","first_seen":"2025-06-18T05:12:49.455997Z","last_seen":"2026-08-07T21:32:52.178163Z","times_seen":53,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.988Z","timestamp":1781728548988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22240\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:07:45 GMT\r\nexpires: Mon, 14 Jun 2027 10:07:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296884\r\nlast-modified: Wed, 18 Feb 2026 19:51:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22240,"size_decoded":23073,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22240, version 1.0","md5":"10a07810f28f8ff9a071a88dc2255bbb","sha1":"0a5c6fbc071198f9f844e882523c9c2e695cbd2d","sha256":"b9d66d1708156f765ada51939bc24ed259dafa69eb631b36e443680fe9e15879","sha512":"de9f6ddb50ee3830baeb1e1f6bb4c9d10d10bbc32022474cd3d15ce0de1f8f3f8abece8d30a58fbfd0b1a7c8d2f1e9bc4ad2f11e73ce712e6894ff09c7d76680","ssdeep":"384:dBqp4Xkc4lyUzhkLmg9DIKNEhDB+xFFR8njA5mhD0jDn1fPesWEaAG92BTIYrMm6:dC4Xkc4lyzLmeHNEJBOFRijAS017WzA0","tlshash":"99a2e1d301e57bd0c6a0be7e54c9305c2e7985ba3d7764028d19418c68828f2706caff","first_seen":"2026-02-20T12:52:01.602576Z","last_seen":"2026-08-20T14:07:26.332524Z","times_seen":3236,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/index-AnYuyRDf.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:46.260Z","timestamp":1781728546260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/index-AnYuyRDf.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2c14f6-1465b8\"\r\nexpires: Thu, 18 Jun 2026 08:35:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztJMbUvPmbGe1s7nXTdyqK7nxYD4Xj%2F03%2Bgkl0MskpZhw4Xr%2BKxgcqL4Ji978YKi1jXZV4P1hCisb3sOQ6PGIVyvqfgPHC0pOuimg6wRfImrY2wJOx81fNx9e%2BTuJM4WML%2FGvw%3D%3D\"}]}\r\ncf-ray: a0d4d7b62cb05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336760,"size_decoded":254669,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16724)","md5":"75c42b2248a5eabd309a846f85e3f506","sha1":"2d8dba52e35c23cf86cf746e584e005c77da5531","sha256":"ad4dc139bcc976bfc6b9551a9bbf78f67e58f7ffb2b2578c0c7e577358525099","sha512":"11a42f6c66d14cacba8de6e84d81404e6b79986ce3f5ed02ce48ff8a6781bffe0b117d4ad6c95ae3eb876830d8562df631bbc35b95255c693ccb9a7b6983b0b8","ssdeep":"12288:AyujiViZv7wNjAR7yazJDGehVcTb4yTlZVPpVo25:VujiV0Y8JbJKehS8ynV1","tlshash":"c72539282a5bf344e419c0dbfa373c84c59de18aa00b64d15f7547b31ba2797eaacd13","first_seen":"2026-06-15T11:44:21.872389Z","last_seen":"2026-07-18T11:58:51.228115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":578,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/favicon.ico","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:47.429Z","timestamp":1781728547429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:47 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BMOmlhizjTiDi9X2qkcUu%2BMsb%2BY4lNNSr0fl7FIFAwRkJxSJs%2BcWUPg6Xz1w96TSybXIU6fnY4wiLsWZ08oSXMHX8R%2FxEis2qXzKAxyTYr9aU00LyYLUoCA7QEx56Aci8vMOQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7bd7e0a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":711,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-20T15:28:39.59161Z","times_seen":319797,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.052Z","timestamp":1781728548052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:06:34 GMT\r\nexpires: Mon, 14 Jun 2027 10:06:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296954\r\nlast-modified: Wed, 18 Feb 2026 19:51:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21884,"size_decoded":22717,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21884, version 1.0","md5":"4279528ce0e7dc28919e6f8ce5f0eaa5","sha1":"a0bec563643727d81bf21d0acec08227d9269da4","sha256":"425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371","sha512":"2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507","ssdeep":"384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87","tlshash":"0aa2e187b3eaa46d5787b931fa0a1900b8fe73f65d27da6484e087c9a1456c48c3dd3c","first_seen":"2026-02-19T22:29:10.595811Z","last_seen":"2026-08-20T18:20:03.499237Z","times_seen":27392,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":17,"receive":5,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/index-DNS8lFo7.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.540Z","timestamp":1781728548540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/index-DNS8lFo7.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2c14f6-b4a\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=da2FmNpfmRxx2Cuc8pETGq1yVP1o4pMlwlaO4NVlw%2FUjfZ5PltGMaRZPdCrkoUGeDvUNAr0U6knVY9Wgjoje5VxhHwAs16afms63VOJaBIL2C0ZQKNspcO1eiW57UeKIEy3kuA%3D%3D\"}]}\r\ncf-ray: a0d4d7c46fe55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2890,"size_decoded":2060,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2889)","md5":"cfd560293d130fecbe2248eb6538ca13","sha1":"55c3762444e0a572176da90fb248367f59a74e1b","sha256":"98efb8bae37d714c80bba46f2e7639084b5427e854bb4694f390f3b8be53203a","sha512":"73186ffd1f34dfbcf1d1bdcd5e3531d14a6e7bf1e4db7e07323cd4f9778cedb2fc4e9cd8d0648824ee267482658378a209ec1a0c9c61460de1fb6eeaf79e4bbe","ssdeep":"","tlshash":"a151a66c7cd88934c7ff49d844570552b61f0b19822888f6e4af6d5c2a3e548e23fe38","first_seen":"2026-06-17T20:36:13.465375Z","last_seen":"2026-06-17T20:36:13.465375Z","times_seen":1,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/upload/img/6a2e0ded91aa.webp","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.906Z","timestamp":1781728548906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /upload/img/6a2e0ded91aa.webp HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:49 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 14 Jun 2026 02:11:58 GMT\r\npriority: u=6,i=?0\r\netag: \"6a2e0dee-b792\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9wLHqBsztQzP1X0ghEkPHzejYd6rdt7XQjs42125o7LCynvd8aYE4dtBN%2BYKLNBXvY3YQf9F6A42kkhfZMCksPFHZXW230q83qspcKEcJIFASUOrVB%2FwCkBR1poAKRh2Q%3D%3D\"}]}\r\ncontent-length: 46994\r\ncf-ray: a0d4d7c6a8855ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46994,"size_decoded":47739,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d053b9361109df42ecc10f92b1fae09d","sha1":"0f702389aef81ef0f49ba9a341107008f50f1f36","sha256":"de75f81330b5c4620e1cade1403aa35c0552bef43f26a69e0ce6f75d835e7244","sha512":"0396f82e1fb97c42ab27d602c161145a936f1387114f067ec21d3a1ca5757a89f65c6a177770b1fbedcca4b787b0a496b07d0fa4af638ba208befe15cfa7c7a8","ssdeep":"768:rPFjFZzk0g1SLNU7Ss2rFJdwqWuT/weXB+LgqFgiH0prNAISWxigrkhzB:rPFjlg8KqWuT/wIkgqFgiH0ZWiiakR","tlshash":"7723e1a699ef110e7cdc85337151e378247a377611d371c2a61ae8d7163cee5a422a0c","first_seen":"2026-06-15T11:44:21.932898Z","last_seen":"2026-06-17T20:36:13.466736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/upload/img/6a2c37b86bcd.webp","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.029Z","timestamp":1781728548029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /upload/img/6a2c37b86bcd.webp HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Jun 2026 16:45:44 GMT\r\npriority: u=5,i\r\netag: \"6a2c37b8-79f0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0MnMVpZzhdp9pXGvF0yF1hISo4qgSOLnyeVG7DrEYuTQz%2Fmq3Y9%2F%2BO9TfCEj9CMjKJQMg8N%2FscVJHv13S5Pr1C2VKD6uUEf3HCqPK02HViFrHuc1scAgBAeo3izDcnSF6Q%3D%3D\"}]}\r\ncontent-length: 31216\r\ncf-ray: a0d4d7c13ee65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31216,"size_decoded":31962,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96fcfce722245e00842e9ae486ceacce","sha1":"dcb147302375978bed15c2cd0af4d53efbe81ed2","sha256":"c294ee048033b1e73b57753547ff8b5ea982dd4599f5c5cb0fe5499eeccd4dc2","sha512":"bcd0e6ab7012259a9f3bc4beb5b6c69a7ffdf87005fc3bfc64c829f94cf7c7754a04d36ae383183b610c6937fcef92f9a666d6f17362ed85e5783c4e25242099","ssdeep":"768:54rItDod/uKX4+csGlpJJ7YMQbAlfEwb3M53AqIdKe:5pVodT9c3lpJJ7YMQbhCEAV","tlshash":"c1e2f1c36857f6ab1c7619710eebd740b5ad1368034ea1c229d533d8ac161f577ece08","first_seen":"2026-06-15T11:44:22.037835Z","last_seen":"2026-06-17T20:36:13.468852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BAKlFBiJ.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.524Z","timestamp":1781728548524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BAKlFBiJ.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2c14f6-213\"\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBO6VKn%2FezRCme0TR10hJnsvnSGmMo11lmV%2BQzRK0aoCo3VMOPkm9mRhGjs5cAkp9A4VhiQDzeoWj2F0f5LPRAP2Mo%2F9Utif5q1ZHRHpnN5HoFakkO3s4eA%2FqCwpc8ewuES00Q%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7c44fd95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":1109,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (530)","md5":"85b87be0319cd77184c345f2942f252a","sha1":"4368303ef89cc06860a4a1366a07250f4d3ed94d","sha256":"6dcd468436ec5ee1fae0acab5b94bb4496a1ee01e28fc9c993a7e4f405bce39a","sha512":"7dd99a961c1be9ec22411e159a1a9ced4b11738f466b8d2e1a79754e1b6175cc7225d6731eae267514d46edbeeb9d70c469cf7f37c39b9a494c49d3b9c45ce3a","ssdeep":"","tlshash":"2cf0c01c5c11caf9863704453e4610a108580f7e665cba82e9eb18119fe20bc372b72c","first_seen":"2026-06-15T11:44:21.921802Z","last_seen":"2026-07-18T11:58:51.242108Z","times_seen":3,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/ContainerForm-B1GuOcbB.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.537Z","timestamp":1781728548537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/ContainerForm-B1GuOcbB.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2c14f6-169\"\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iv8X5U9w4AnY%2FGpDsyNUt8Lehz611dJNoteXHp7MUH3u0DqamQyTQsoZ5c3bp3UkJtF529FCvdxV6j%2Fzpaenyz9ckA3zwEE5ajwhbuI1DTsjoutXYDK5iI8vmVM0Nf75BZe%2BQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7c46fe25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361,"size_decoded":942,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (360)","md5":"bf3a691eec7906fe5ffc815ad5314d6e","sha1":"bc8ce28a4ce36cfc3372a485c6a419c850d48155","sha256":"9c8365a5a1944b191d2810b48f577933a9c3ed052632315248a37e1e00a0aedf","sha512":"a2851185cb98812628a575ffc46048341ab9091ce97e34b3ff1ef99486a35e93a5085c1feacc3c8a9d0bd56faae6d53d6e57cda93b397b61aff0a73f5abf2d28","ssdeep":"","tlshash":"70e0684cac00e271c061464c21320012e90e3e9a32bc5843606e407a2f2546e620ff08","first_seen":"2026-06-17T20:36:13.472268Z","last_seen":"2026-06-17T20:36:13.472268Z","times_seen":1,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/upload/img/6a2e0ded91aa.webp","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.904Z","timestamp":1781728548904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /upload/img/6a2e0ded91aa.webp HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:49 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 14 Jun 2026 02:11:58 GMT\r\npriority: u=6,i=?0\r\netag: \"6a2e0dee-b792\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q62MMG9V1sfreL2zDbr1UQGyYpWsyjNBu6p1JS2lm5QhS%2FqX7Y9fTjU9be%2Bp5BWq5gXMRHV%2FD0Cf0S%2Bh0%2FhxNf9pqpPZSkZmqb6r8V%2FIGZZ2kyYtOzxgLaQF4TUR5yPUEQ%3D%3D\"}]}\r\ncontent-length: 46994\r\ncf-ray: a0d4d7c6a8835ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46994,"size_decoded":47740,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d053b9361109df42ecc10f92b1fae09d","sha1":"0f702389aef81ef0f49ba9a341107008f50f1f36","sha256":"de75f81330b5c4620e1cade1403aa35c0552bef43f26a69e0ce6f75d835e7244","sha512":"0396f82e1fb97c42ab27d602c161145a936f1387114f067ec21d3a1ca5757a89f65c6a177770b1fbedcca4b787b0a496b07d0fa4af638ba208befe15cfa7c7a8","ssdeep":"768:rPFjFZzk0g1SLNU7Ss2rFJdwqWuT/weXB+LgqFgiH0prNAISWxigrkhzB:rPFjlg8KqWuT/wIkgqFgiH0ZWiiakR","tlshash":"7723e1a699ef110e7cdc85337151e378247a377611d371c2a61ae8d7163cee5a422a0c","first_seen":"2026-06-15T11:44:21.932898Z","last_seen":"2026-06-17T20:36:13.466736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/#/reg?invite_code=687359","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T20:35:33.526Z","timestamp":1781728533526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 20:35:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xagp9E4YndRnz%2Bv010Dbf%2F9WcZUWXvrfPAO5p%2FLDdA31RWqt90svkJ6LE%2BvW3usxecaxjoyoXSjQpX8phAdNzigq6NrxRLUw4euXqa8VGFf2MLlqcOl0OO4xwtAGQsVDHACQGg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7b07aac1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":3639,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"098796eec417d2c724c48283f62a82e4","sha1":"5649c5e8afe2efbe84a908377754160095f0f494","sha256":"1486c9a7b08df2930c98e943f14d05cb067e4dadad5b9521c64b14175366dba4","sha512":"5091beb7fc73f74fab88bf4d14685e0180fdd4f31431699adedaa4139c5f7de9cc04da87f5891b28dfdab722cf2446cbbbd9ad1e81932fd0402716c5496fafe4","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6cA:xYKkBzsju8pk9X+OIjlYAuN4qLl6","tlshash":"1e221f5b2ce66028631370ba9d7ff50a7a21001b1998ec007d0cd7345f99a7dabb5eed","first_seen":"2026-06-15T11:44:21.885676Z","last_seen":"2026-07-18T11:58:51.223818Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12142,"timings":{"blocked":-1,"dns":11804,"connect":1,"send":0,"wait":319,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/default-D_BtcVIn.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.523Z","timestamp":1781728548523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/default-D_BtcVIn.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2c14f6-b8dd\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xc%2F58TNivYePnEggByqUaqx9NgUcRVcY2KMnZRapGHIHkrSViXStrqN927Z1pwaQM2NWGReVaxlYwR9aRNxYuhp1loTTMNkc9HO1PgXEoynOfIyqcJiTFniVRdZCasl4uaIL5A%3D%3D\"}]}\r\ncf-ray: a0d4d7c44fd85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47325,"size_decoded":7903,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (47324)","md5":"0c839d641e6294a7d2ddb8f71a034aa9","sha1":"ba85684b684af2699ecc1136931b0eb8b4e2294f","sha256":"5425c22588eef08ff2f4adc60270f413e49c9d7574069bf4a037e17bf5f0a9ca","sha512":"2a242d99e80c3a3d1f4dd0767fdbc04fd634f4e36c0fc209e3f4efe8bfc28a14b229bbb42dba9e4a7e469437cf885a49c2e4b0ff6647b86cc84e76371e07e018","ssdeep":"768:glFOPO+POWaFOyfqOD1qkraYOTPOIzaofqOvbOhFODO9OGaIjDidNB0ofkm4FLdU:Ou0wwKkmWdB6Fsxf6gDjNOrhJGo","tlshash":"9723a5815907933fc572da4a484a6482314c6fdbd00cafa6f3f4951b86cac797b3af25","first_seen":"2026-06-15T11:44:22.059937Z","last_seen":"2026-07-18T11:58:51.244314Z","times_seen":3,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/index-BS17_dpn.css","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.541Z","timestamp":1781728548541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/index-BS17_dpn.css HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:30:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69c3d55a-8ed\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kf1ffVNLSMORPUt%2FALo9bBSbnBe7x39DsRzvu3R0xtR%2FuzzbXKPr8tSSrfut1RCs5iZNDrCM5OqEE36ITW8Y1BovB0OdWYGI9WN2p0XUJGMHiPnnil85%2FKKsQ7mfHkJy%2BHIS7A%3D%3D\"}]}\r\ncf-ray: a0d4d7c46fe65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":1412,"mime_type":"text/css","magic":"ASCII text, with very long lines (2284)","md5":"1d05703cce897c29046715d007d74f1e","sha1":"53d486c3551997abe790771033ef1eb46057fa39","sha256":"e65540440b381d92458aff168ed8c0983537fca5b685f13755aa4aeb5f2b3902","sha512":"7548561c6089f474e0451bd1227ec62095e17b54287c4b544df0bc1e460744eab1615d25abfd76b778dd202e627f4bcc722e5467e858d4ee0dbcc305cd1dda54","ssdeep":"","tlshash":"7a41d467daa045faae33a5950f5585cab13ce9208e00df72b580d11c8dcf6f626136ec","first_seen":"2025-04-22T04:55:21.194396Z","last_seen":"2026-08-19T04:49:37.627864Z","times_seen":88,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/PhoneSelect-Cbbf4f9h.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.542Z","timestamp":1781728548542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/PhoneSelect-Cbbf4f9h.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2c14f6-3cd3\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOmxq1eZwWKpR%2FOC5Jc7lo4f3XFZbESbttO7wruxApE4byhj9%2BzqDhaPibPGbAVj1HdLk2viVVSS%2BUEFTnxcvJyQ9W2Q1LLvQUw3taLOLWP4nuQyNrJxIrbW3mC%2FHWwyAq9F4Q%3D%3D\"}]}\r\ncf-ray: a0d4d7c46fe75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":5401,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14209)","md5":"2432cfa78b4f873d4f1930091d922c36","sha1":"c62a2d40f1775e577dab2d37a208edc05a75805b","sha256":"8fc864ee41429526e49923ade5010a5005ff49627112a27539f42c56ea5d8faf","sha512":"f48ba63ec0f4285e511e7ac3a6f75662999225185617ce9345d91f82a096aea05dfab8c7e04737f39e4f4a174f5002e603d6a7993d9841e8146813a3d27c25e9","ssdeep":"192:Sxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFhe0:Sxj5a28wa8H5tnzxaF","tlshash":"6e62bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf136259a00f7b5cb65c","first_seen":"2026-06-17T20:36:13.47662Z","last_seen":"2026-06-17T20:36:13.47662Z","times_seen":1,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/api/public/home?d=1781728548037\u0026language_type=en","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.043Z","timestamp":1781728548043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"OPTIONS /api/public/home?d=1781728548037\u0026language_type=en HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://xjgch7.zx2026.xyz/\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xjgch7.zx2026.xyz\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGpY0aI5BKAynZVg3YgQyoBCNTpPdJI91Nz2ZJMjC4MVUDV%2B7IVCekCWr2QRDFEOqzcrR178pomADKWCmcNR4viYG5pi%2BAryY6Gwg4JmFCojy4Zbn%2BCtdSldDliF%2Fvxo9A%3D%3D\"}]}\r\ncf-ray: a0d4d7c14eea5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":801,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T18:30:42.88905Z","times_seen":17996248,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseAlarmLogoBtn-B1F5Xzzt.css","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.529Z","timestamp":1781728548529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn-B1F5Xzzt.css HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/css\r\netag: W/\"69295cf1-176\"\r\nlast-modified: Fri, 28 Nov 2025 08:27:29 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urXBxsrYrvdrEMHO2vERdf2KM3uSkTE0JCeTNqgUHxq8sejxRx7htpd7KGhMg7qnjjklFQpe4R6af1sDHgDRdKUMbN6jROJmkokdsXybthSlRdhQ0Sf%2BzIv7JfL8wELsTiDvVQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7c45fdb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":927,"mime_type":"text/css","magic":"ASCII text, with very long lines (373)","md5":"a0b95e2ac4d02f765d36b86d50825b05","sha1":"a6c56b78ff5416000ca81c9c385f14c4ad745e90","sha256":"018fe58c9101deb6798cb3463760d1abaf1be712f511ec85e3be65cd5de35d13","sha512":"3a38ceda1e85ec5eab12bfda941daef96627543de051677653a7d45d707214789d8cff522362480ff722358f3b78f51f5bdd95642d1442c22f8f30c2cd116ed2","ssdeep":"","tlshash":"fae0924c0d94111b7aef4e2754da4a7500288f537e330d5ea742325622c6ae4317634a","first_seen":"2025-06-18T05:12:49.455026Z","last_seen":"2026-08-10T22:14:39.446587Z","times_seen":104,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/LangLabel.vue_vue_type_script_setup_true_lang-wZV3jyIq.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.531Z","timestamp":1781728548531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-wZV3jyIq.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2c14f6-22b\"\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGJz4eFrDvXjwafJkhUb%2FvZKTCAVlezVKd6ZgjRCRo2pxxvOBNUsAqHyySMhsBMyS8phReBkxUdSd5OzbMzpBhadxOQrTAcj%2B%2Fw3BBhD7kUqi5oaqJfyGLJMgOsnFowXQP3wjA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7c45fdc5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":1122,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"9b37d555fb89cd8996f381fc68e41c33","sha1":"21c50ef8503e014417cd39d75915493cc9cdaed7","sha256":"fbc23dc31a611ffda10e0e55c8ede2b7a97860393dfab524e01490a080299c03","sha512":"64f3754300c05ff90966c2ab91c2078d727cb1628a239758fa1d29e99d28f45c1e005b666087e1cb16f606759eb9cbc01d378d475a2c2bf84bb57ff4cb71fb14","ssdeep":"","tlshash":"2ff08b6f1c21c674c5b64d183a9b080054495f6f6624ea41e29e5e135fe286db3feb28","first_seen":"2026-06-15T11:44:22.04977Z","last_seen":"2026-07-18T11:58:51.235541Z","times_seen":3,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseUserTab-DVdcH4fp.css","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.548Z","timestamp":1781728548548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/BaseUserTab-DVdcH4fp.css HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/css\r\netag: W/\"69295cf1-dc\"\r\nlast-modified: Fri, 28 Nov 2025 08:27:29 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McCxJkAERmMNpOp49jkiEmHJ44z%2B4hA9zUTn4qZvqSrL9Tm%2B9pa%2F6D5v7lT0Ohx6MpjJykdw%2BRONM%2FENw5iR1kaMcbFT6isnmxt3uSk0jq3ih0OKEwt4S0Lsz%2FHdD5vJjTkCEQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7c47fee5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":872,"mime_type":"text/css","magic":"ASCII text","md5":"2571e9c1678f7890b2944076ddacb4af","sha1":"d36697fae0e1aecd7f151e50ea3808c9f155e5f0","sha256":"d27ee7a4a4e398c3fd2bb36d227fa8d1a2c0d648ababbf68b900c279709230b2","sha512":"6c1a50c9b8cc632500a99e5ed2e7b6b4f1ef621db803b52a9c4a59fbcf03bd6fce5ae57bda4b07f1b4bef632dde82ace2b87e26ebbf6a3aeaa64b620a5147500","ssdeep":"","tlshash":"37d0a91c0894f0be28c9b2a81fa852dc08aa2205fe035fa83024bd2101d6af5213bc6f","first_seen":"2025-09-11T15:59:47.603631Z","last_seen":"2026-08-10T22:14:39.456702Z","times_seen":111,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/api/public/visit","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.958Z","timestamp":1781728548958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"POST /api/public/visit HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nst-lang: en\r\nst-ctime: 1781728548953\r\nst-ttgn: 8be28c2bc22c0c5fba27cc765a73290e\r\nContent-Length: 55\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:49 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xjgch7.zx2026.xyz\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPd7%2FYJgMlZdmIqiJ%2BlKU2iG4WumvZWyrTqgBAwYSOY3chyGnLljkb7fMvTQWO8U3aJzSSYVwBbKwh3T3Gvetwjg8Lo%2Byf10sia37aGsgKS0xcoOSdEDwTiWzEqDKcnPEQ%3D%3D\"}]}\r\ncontent-length: 40\r\ncf-ray: a0d4d7c808cf5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":827,"mime_type":"application/json","magic":"JSON text data","md5":"dac22ea265ef2b988f6f7e6e88fd6076","sha1":"8eb3ea36343bacab1c48f88e22db10c0883d52e4","sha256":"b7c34be4da9a56e57a6dbb79e887c829a077dac9cbd3d4226d7fc20e5fddbd17","sha512":"5da4520e219e0f158cf84c790a0c0168bd7c1710a2f37e9900cb33e7c9bcab4ffa9e8bdef10cef64656a59ae5ad5a083c3872ee45729428efd78929225f89fea","ssdeep":"","tlshash":"409004111c0454435c403c4d0143475035d13574410503c0405c503cc70d0f5f445c34","first_seen":"2023-06-08T13:28:08Z","last_seen":"2026-08-03T14:06:42.894453Z","times_seen":219,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/api/public/init?d=1781728547323","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:47.330Z","timestamp":1781728547330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"OPTIONS /api/public/init?d=1781728547323 HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://xjgch7.zx2026.xyz/\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 20:35:47 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xjgch7.zx2026.xyz\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dJue1Mz6%2FnSAEHgdtlIg1VIFtlDuYz3sDYaCYXFFV%2FO402142Q36t2ofRKE%2BOPgQBiuxUxEIipBfzUmg8ePSELNpR3pn8H7TtfRs0uTIgN%2B5rv34xibjWihi00InRqfbg%3D%3D\"}]}\r\ncf-ray: a0d4d7bcf8520b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":768,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T18:30:42.88905Z","times_seen":17996248,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":313,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/upload/img/6a2e0ded91aa.webp","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.955Z","timestamp":1781728548955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /upload/img/6a2e0ded91aa.webp HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:49 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 14 Jun 2026 02:11:58 GMT\r\npriority: u=5,i\r\netag: \"6a2e0dee-b792\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=czx%2BtXA8VW9TclpxiGd6dZjEz1cIsrd7uvY%2FfaOkD3qSh2utMoOvSOEqcKrOwQ5gZskfkwwbqeSveCAC6S28W28T%2BjlXzgDoPlqM08D7aw6oK17VkkxdIqRNgXIxswU07g%3D%3D\"}]}\r\ncontent-length: 46994\r\ncf-ray: a0d4d7c6f8905ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46994,"size_decoded":47738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d053b9361109df42ecc10f92b1fae09d","sha1":"0f702389aef81ef0f49ba9a341107008f50f1f36","sha256":"de75f81330b5c4620e1cade1403aa35c0552bef43f26a69e0ce6f75d835e7244","sha512":"0396f82e1fb97c42ab27d602c161145a936f1387114f067ec21d3a1ca5757a89f65c6a177770b1fbedcca4b787b0a496b07d0fa4af638ba208befe15cfa7c7a8","ssdeep":"768:rPFjFZzk0g1SLNU7Ss2rFJdwqWuT/weXB+LgqFgiH0prNAISWxigrkhzB:rPFjlg8KqWuT/wIkgqFgiH0ZWiiakR","tlshash":"7723e1a699ef110e7cdc85337151e378247a377611d371c2a61ae8d7163cee5a422a0c","first_seen":"2026-06-15T11:44:21.932898Z","last_seen":"2026-06-17T20:36:13.466736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/api/public/visit","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.960Z","timestamp":1781728548960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"OPTIONS /api/public/visit HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,st-ctime,st-lang,st-ttgn\r\nReferer: https://xjgch7.zx2026.xyz/\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:49 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xjgch7.zx2026.xyz\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsbcirua8xLAh%2BuIAN3wDx7lZzVveY0Fb02t%2FWzV%2BEc%2BrLGOVxkQhD1rQ8rzA0H3A7KTxRJ5ySYVJUovd8E4ffAvzbJT5aJ1L5KKo8vpAJqxTvxZHte%2FYafIN5Wn78Ne%2BQ%3D%3D\"}]}\r\ncf-ray: a0d4d7c708915ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":819,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T18:30:42.88905Z","times_seen":17996248,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/ContainerForm-9KkiXSOC.css","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.538Z","timestamp":1781728548538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/ContainerForm-9KkiXSOC.css HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Mar 2026 12:30:18 GMT\r\npriority: u=2,i=?0\r\netag: \"69c3d55a-2b\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPnHAjtL0SQpOaFPcOqmKOjR4qEXeRuHMtTRPffjXH5Bje2gZLyzJNd6rfm6Lge6%2Br8mPaloEk23r98Xkwam1c%2FrZuln%2Bvz7IlXk675YoaAc3dirGx5kE%2F19WVOW3KqlbmuLhQ%3D%3D\"}]}\r\ncontent-length: 43\r\ncf-ray: a0d4d7c46fe35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":777,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-08-19T04:49:37.605477Z","times_seen":231,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:46.257Z","timestamp":1781728546257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 17 Jun 2026 20:35:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Sun, 21 Jun 2026 20:35:46 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":24021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-08-16T11:26:19.734321Z","times_seen":2814,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":54,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/index-DkfmkrW7.css","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:46.262Z","timestamp":1781728546262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/index-DkfmkrW7.css HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2c14f6-f8b12\"\r\nexpires: Thu, 18 Jun 2026 08:35:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkvgz2RrMYtY1NrtZfxqoLth7%2FptmsxSjMIylGxYu%2FveyINCVRwGVzN5y4wrnlkwVOYZjYyW%2BBoRFdkKrlnq7m9F%2F8Cd4wi%2FIQtKhZV3TpHN%2BqAw6%2Fc3wz3qngVp8KAB3tSoqw%3D%3D\"}]}\r\ncf-ray: a0d4d7b62cb15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018642,"size_decoded":278436,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"e374f5b77c2bf8f9f1e0644e8d3ce80c","sha1":"76eb540178994b9e97ae90082b8fe3d15ddd5140","sha256":"79aeb08460a7993b198817346a4279b6e5baf91f17dd8d9874d914aecae77852","sha512":"dc5e627d71c0b8eb60cc00bf0944d41e9b43484952b3871c8eea542d0bf877c1cea78e1846e8c4400b91b0a97f9cf3bb3c85748f1af94643244641815b7ea007","ssdeep":"3072:UnNIClDsIxuVS9W8khUcd6fwefeRAkNGaKF2X7HE4hB+XIusF3QoU8XTWRwrzWK7:Unxsa9W8mdkfMNA2NB+qqGv/ZgfucC","tlshash":"982509723701482ce9fb8e3302db6d0c7019e11abf33456de11a5e7447aa29b976636f","first_seen":"2026-06-01T18:58:41.824493Z","last_seen":"2026-07-18T11:58:51.261298Z","times_seen":16,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":580,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseLogo.vue_vue_type_script_setup_true_lang-BOG6j9uE.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.533Z","timestamp":1781728548533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-BOG6j9uE.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2c14f6-249\"\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Zy%2B05526nDXN7IMwwHt4H%2Bbr2DH07iKEtOehVJFntCYGRQqmPGoOsKnR9lNFlh%2FYVNLwSSzOtgKDP2p6QXsnAe5cvk1hvNCwCzDy1ZOTH%2FKRec4Cq8tu60Mtjrpmdf8A63TEQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7c45fde5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":1131,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"1974ba942198ea485ca85656d29d2336","sha1":"4fdb7a97db8a54232845e49cf56879cef28fe795","sha256":"f5051ab3ac69aa4fe688a359183f400224afa76ff640f54bae551224fc0b1730","sha512":"136d74ad66df8721347c347a7f8f1a04a655df8a8d31918d3e2fa2b2d0f4e0b46a90fc78456c6bd697323de408aa07ece48ea9ebc0de65a9a5322d6a62fcc985","ssdeep":"","tlshash":"78f0e14e5d6e41fa95a344582f4b908025084e9ec635ab41f2f827356741c59741db38","first_seen":"2026-06-15T11:44:21.923446Z","last_seen":"2026-07-18T11:58:51.247133Z","times_seen":3,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/reg-BwrdL2yx.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.536Z","timestamp":1781728548536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/reg-BwrdL2yx.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2c14f6-1c66f\"\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gerXOk0Av0B%2FvHvmwzKBlXl8qc73X14C0kRg5nn1nymTnDEz3%2FaBErdV37Q5jaStXalW4psLga1TEYMq5AVXJQQ3FxfsjYjwLCZ0BFb64AN5dgXo8Bs1pP8NagVkFby3E9w1HA%3D%3D\"}]}\r\ncf-ray: a0d4d7c46fe05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116335,"size_decoded":10587,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e19c9091a020bbaa73ef1a078ade6bff","sha1":"b4020b529a92e38c7e79a56047d75f60971c7caf","sha256":"0c40ed093267d60769dbb623768dea3fb5716e5f77340e0b2625e7167b90b114","sha512":"f131bd7015a93d680519e0a5b6c00e213e62c3230d0945220b8ce21bfa9aafaee2796213719a66f260e66a6313a3f50389d331e61d9b54797161d5d4f6086bbb","ssdeep":"1536:7JQ+CqxezY9ounsvDHdfsolUDF2zDnC+sT2EWd8Rt:7JO4Gm5Ujp5eR2nChKtGD","tlshash":"8db3540cd4f5ceb798b7b64e79078420a16e57ffc2038b26e77c06061e96cd496326e9","first_seen":"2026-06-17T20:36:13.483938Z","last_seen":"2026-06-17T20:36:13.483938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjgch7.zx2026.xyz/assets/BaseUserTab.vue_vue_type_style_index_0_lang-5yqXbLof.js","fqdn":"xjgch7.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:48.546Z","timestamp":1781728548546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-5yqXbLof.js HTTP/1.1\r\nHost: xjgch7.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2c14f6-3b4\"\r\nlast-modified: Fri, 12 Jun 2026 14:17:26 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 08:35:48 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAJgaW%2BF01cQ6dqn7CZxzkpQW8mCn6O5HpzBBHt6t632f8P943ocyvnvmvOSZCqWn8o2I%2F3ADPOTqFTPt1NgkxewNe%2FQTgj8%2BTL0QIjYxzrpbjC%2F4aGeWLxMEkHwkPZwRmnA%2Bw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7c47fec5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":1367,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (947)","md5":"79a7037ce2ed8d591df4834dae073873","sha1":"db1723eeaabd3368a1ae4fac8331c9c841c6f201","sha256":"63d9308ac966375e052f2ee47986a7083570cc74aadea6ac8e46a8f658c62724","sha512":"1fdc443603314dba18e203717832830fc3c9ae14ec003ad435eb839878699ff1b5bfdbb73631ff87ba21d5f6654ea8011bc8c3f6c8af4babb4e9b4cb0b44386c","ssdeep":"","tlshash":"4f11888daca9cfb604f208a82e971069e094bb4d9614c927d05e4431335fcf8e68d32c","first_seen":"2026-06-15T11:44:21.89845Z","last_seen":"2026-07-18T11:58:51.267056Z","times_seen":3,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"xjgch7.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zx2026.xyz/api/public/init?d=1781728547323","fqdn":"api.zx2026.xyz","domain":"zx2026.xyz","tld":"xyz"},"ip":{"addr":"104.21.96.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xjgch7.zx2026.xyz/#/reg?invite_code=687359","date":"2026-06-17T20:35:47.327Z","timestamp":1781728547327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zx2026.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 14:56:25 GMT","end":"Thu, 10 Sep 2026 15:52:30 GMT"},"fingerprint":{"sha1":"C8:0C:5C:7F:CD:93:C2:D0:F4:A5:D9:3C:7B:81:D5:1C:2F:00:A4:5C","sha256":"1F:B9:05:5D:44:EE:18:D5:C3:C9:1B:97:3A:C8:C5:C5:0E:C9:88:E4:9C:70:F8:EB:D3:50:6C:01:81:03:67:5D"}}},"request":{"raw":"GET /api/public/init?d=1781728547323 HTTP/1.1\r\nHost: api.zx2026.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-ctime: 1781728547323\r\nst-ttgn: a02811ca2b7a0f08b789c4f7e124998f\r\nOrigin: https://xjgch7.zx2026.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xjgch7.zx2026.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:35:47 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MslAwxMYARDohnI6G5nJK3JgJqOUY2Sy7Rq9Zwdvk1uFDCB%2BcGcvoWBEnxSD%2FC7g1HM6ySu0PbXN5xxqUYX%2Fx%2FsCcFAcZsTpL8Cc9ZCrNgAqy9A9MClAK6yjbIucTH87ig%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xjgch7.zx2026.xyz\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a0d4d7bf0e6c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":2646,"mime_type":"application/json","magic":"JSON text data","md5":"d7e19505df7fd9b89177a9033b74d085","sha1":"7d98cd74bb3480fd94f74e048cbcc595f4f6080c","sha256":"051dacc107be4df63a9cd2276ab58230432e8622cced8f89a58f52be74cca797","sha512":"955640a8a0050ef496ecf950194f2c8364c23752ccc2ff2e9ddc211c7599ad67565f1bc59cd8565ac4c18a06faaec922233a65a6c39bfa48a9aa8e323a3db59d","ssdeep":"192:IlS2qBgV3ycyhywbyyHeFoczU8Ptn97N/kI9Wk1JFWP8K:je/kLOmN","tlshash":"49e1fe10319adc7fdae7bec82ac67114894d3c9baddcdb67af2cddb60898091101f512","first_seen":"2026-06-17T20:36:13.488458Z","last_seen":"2026-06-17T20:36:13.488458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"api.zx2026.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}