{"report_id":"fd8e3475-ab99-43ae-a2d0-e50c4db9e5a1","version":6,"status":"done","tags":[],"date":"2025-11-09T05:57:18Z","url":{"schema":"http","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"title":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-14T05:57:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2025-11-03T16:19:03.814281Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":15,"received_data":135757,"sent_data":7151,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xa7l8fps.com","ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-11","domain_rank":0,"first_seen":"2025-10-15T06:31:06.260653Z","last_seen":"2025-11-01T19:47:08.86109Z","alert_count":9,"request_count":9,"received_data":19557002,"sent_data":4212,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":1,"received_data":40963,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o.alicdn.com","ip":{"addr":"47.246.50.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"domain_registered":"2008-06-25","domain_rank":89234,"first_seen":"2021-04-29T02:52:24Z","last_seen":"2025-11-03T18:27:22.542326Z","alert_count":0,"request_count":1,"received_data":222402,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-11-02T22:17:11.427094Z","alert_count":0,"request_count":2,"received_data":99771,"sent_data":875,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upload.n-5-p-e.com","ip":{"addr":"104.17.4.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-05","domain_rank":1975838,"first_seen":"2025-06-03T11:57:11.527227Z","last_seen":"2025-11-08T17:34:17.738089Z","alert_count":0,"request_count":2,"received_data":750702,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a324c6fecdc7f1ea81ec91fe0e7cb1e","sha1":"8135d4ffacb644306eccc9cb65dbcc551036dea2","sha256":"efcfe0e7cad02815d9e8f6b344452ee90b38d0c99b34b771c9fa01f289917c35","sha512":"7281807a3a7390504a69736950c12096179452882f4e59947972d582e3f801b90b5c2a050dda9f8eca18f9defb9520643ecd6b1914065e90496fc7bc59cb8655","ssdeep":"768:1C6jR2KMga/LUU6c9Db6AqBuTB2Uw5jOyhwVNY1EbV9tGcpfBgQfuWVuY8t:r2Pga/LUU6cRGul2bhBDt","tlshash":"b3232a583256797226d980e0a17b63437326753ae94ccc50e423d976267cecad233fba","size":49434,"data":"","first_seen":"2025-11-04T16:54:31.551127Z","last_seen":"2025-11-27T03:02:24.924447Z","times_seen":7405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8110ecb1b18905a17269869ecc4b8a1","sha1":"189c1fa446374902a155406d64da0adbd47cba26","sha256":"3f7520294646500b044b4d958d361acc54a667149ebde5c427b579f66fa897f6","sha512":"4889c4aef0e250c4dea313ec15d5076d4cf2b5926c47aedb60ea01b8e59e664a0999cb202c3ff2123df7d7001948c31e8fca6c2f516aabc81b2a85d80cfc0c88","ssdeep":"384:tGvXP7JM8F/3mlkydU8uh9wjD8faaBkpF+Ruz7aNt+pP9i92:tuP7q8F/38kaU8uh9wjD2BcF+Ruz7aNY","tlshash":"fca2edd742ce19082bc93212c68668990b6a964f1cc5f741b38b6e776f99fc0374b27d","size":21596,"data":"","first_seen":"2025-11-09T05:57:24.17408Z","last_seen":"2025-11-09T05:57:24.17408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/index-B4Aofw05.js","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5aabbf3655bebe2f889775ba02026d82","sha1":"6eebacc373aa7b8ada65bb8768c0f80928feba68","sha256":"9d6f40af079d151764fbfa75f4fdb28d3bdec661ca164a9d68961d7bbb14b8e1","sha512":"ba55241d2f0f228b941625a0d3ca36556c27766b42f6f9652f66b62d104f4374f1318902fc0430fee9f8e2d16a8f09daeeb8abff8a8ed7b4cd86198b40630d7d","ssdeep":"","tlshash":"5911c89f2c1073bb0915869eb368e095f368db43463683e851076f7223e085ca5463eb","size":1000,"data":"","first_seen":"2025-11-07T23:07:38.708095Z","last_seen":"2025-11-13T03:40:19.122354Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v199","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"252eff85e75f98cab2ed0affd0f24ed1","sha1":"e1a739fa70c57e9ef90f33fc4ab52fcf387ad13f","sha256":"1ee4947bae28f87f22e0f400ac7ae540d0162c4102402eaafe7d3aa6a3420c7e","sha512":"55efba3ebdc87dfeb1933208acd1f727b126433e26a1b747eff534620804979acaf50139674e7d5ebab2baa3bc962b9495224f15f461a01e56b76ad269060d12","ssdeep":"1536:7ROuwOy/RQEO6odontXPi2kJP33+NR5qlr:dGBSEOLdyXPeF3+N+Z","tlshash":"92534d9ef589753503ebb054c53f0402b6332c15a64282a8f6acd5d6fc795cea063fba","size":61393,"data":"","first_seen":"2024-07-30T04:40:36Z","last_seen":"2026-04-03T22:15:00.127055Z","times_seen":2643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcca65194e468a67a1ad0b4546c69b4c","sha1":"de6c78bf3744fef25998386006b162753a739ae1","sha256":"1fb1150cc7186b5934e25c8854d1fad2e410dd51712d0b8449c411fbf3d41658","sha512":"306de13c7b9a4c94e977021a2aeb62978b7296fb28e7d847502c49be1d67c1ae004e7c8fd6fe8cffacbc913a6524c80e826c48205b0c7ca843db6c6de434b5b6","ssdeep":"","tlshash":"7671bd4624b73475492bf46deb5b910a323960437008cea87facdf941f5263597d2bdc","size":3550,"data":"","first_seen":"2025-03-28T08:35:47.578583Z","last_seen":"2026-03-18T12:53:20.995669Z","times_seen":2267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8a44c43cf9498a92725092f8f97f042","sha1":"c9d75fef106c54d6c6b9fe4013848ffc8b39ade3","sha256":"75e90aa9e81941c5c5fefb51a4e6557841730a270b3bd7b4d3c2bbbfd566b4b5","sha512":"60e7ceda33f5ba0d259aeb3c374119bafaf8e23d49e7ea3bf76d88361fdbf59090a64782032279a3a1f87dbe6c03799a6e081b3b70a8964c9a9b66112f78c94e","ssdeep":"","tlshash":"bc31be8f94ba69260763257c1bc7525133b7a403621cda063b6e93506fa107e4ba3aca","size":1514,"data":"","first_seen":"2025-09-16T05:17:26.584889Z","last_seen":"2026-04-03T22:15:00.13994Z","times_seen":2357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.50.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f90cb8d65231b5751f0c845409837faf","sha1":"53a85021f575c9b876cc063c896ae1c9438d2428","sha256":"b6236629d196b9fa98e653433c3f2008b3210071676b220cd45c73eb69e421e7","sha512":"9557467accbb53aa29a446d3a61817986d2f1efd64ea9a754aaeb1b5b412145b76ff41caf6cdcdb20bc7a3a2703ae237ccf2e64127199a21e0363243810d8947","ssdeep":"3072:wIulRR/ISzbPNSdwWpivPHYU4/DKYYWgXhgXV7TLI:wIuzhb0CWpi3H6GYYrh0V7vI","tlshash":"7424f98db1c5b0d90be364e4012f640af0bb6a64745ed991fbb1d4c5ac79e8ea033e5c","size":221235,"data":"","first_seen":"2025-09-09T21:38:00.308846Z","last_seen":"2025-11-28T03:14:32.801176Z","times_seen":1917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/vendor_modules-CWxWTxL0.js","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"942ee04573898365f4d6015d5bb32f80","sha1":"06051b2d885ff998af7c45de19daa9c7cae1d0d9","sha256":"52063543329eff77171387739bc598ec422b16564c308b99b6ad855a07c9bcb2","sha512":"ff21474a970d37947e3ed15e0dd772f6ee3b32d667fe3693c58503c7738c441d2fcff41f36547bb8e8b3d09aa81c5bb035af55beae3e372772bdb9d4e147152a","ssdeep":"","tlshash":"4411eda53005cbb906e928e2a043054ae6f8119c24cff140a3eddcf858f508e997bf3b","size":1000,"data":"","first_seen":"2025-11-07T23:07:38.709959Z","last_seen":"2025-11-10T06:08:38.21716Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/versionControl/combined.js?v=v199","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33b6aa938535a04cea9fe0edbab0349b","sha1":"49e7714c17f196eff25c590f7171e855dc2c8824","sha256":"59d4c20cf8c2e2436fcbeafa70570c6716680160638b877d4964cece25ceb9a9","sha512":"426daf77f218b4b7b2446dd97a4b10f25d6891060cf21d9de0499bb39689dff2d0479f0fa6b77ab619e9f3e73d4765f98e69b61044e16953e7f810c16749df1e","ssdeep":"192:lJtXatX8sEXZ7D8WQQtir56Y9tozbNlfmfdIe9MsQxWPu7GnArHcfE0qp97A8:BS87DFi7tHfdI8MTtAcPXU8","tlshash":"2f62d71c36b8207542a37219abefd70c3130422b28569c557a4d83b50fa5ebd46bbedb","size":15136,"data":"","first_seen":"2025-09-05T18:22:08.438516Z","last_seen":"2025-12-07T17:03:33.935102Z","times_seen":1591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-03T22:15:00.140513Z","times_seen":29467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-03T22:15:00.141209Z","times_seen":33425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-03-26T21:58:27.933778Z","times_seen":3807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-03T22:31:26.247149Z","times_seen":593310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-03T22:15:00.135898Z","times_seen":81156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Changa+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Changa+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da29d046a89c0fcfcc2de48141a6ca93","sha1":"b6ab7fcef662aad45a021c400f392a4441801b5e","sha256":"60a9d949bac28abe465541ba186b8222851b9bc7228e56dd289b49342f59926e","sha512":"6e544379a4a6e24bbee787349b5888e6043bc575a3ce99a2436b716ec8d2202d5923619ed1dce51d702ef8a5963933e248ed09f6ade28639d8c5dcdc0f96cde4","ssdeep":"","tlshash":"5fe0ab400836a600e6935cc011cd3a32ef0ea050184498349bfe08c8fc82c162352b0d","first_seen":"2025-09-18T03:39:34.019395Z","last_seen":"2026-04-03T22:57:40.701677Z","times_seen":1281,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sansita+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Sansita+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":416,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fecf66b7b23765635baaf020b4a98434","sha1":"48d186372cc1e7d96248dabed84c7e4ca5a5549b","sha256":"5e3839d6e6f07c5de66e46f8be579a54fea03645933b9da2161a29bbc79370d7","sha512":"657de93f1249baa44ffb225eea9ccd6de3874812ef31bfe6cd3ebc3c36bac617be2cd1db7902c3d87744ffcf466331f34f4d2ae723a445d3ae7244375fec1fe6","ssdeep":"","tlshash":"bde02b80193aa510e6930cc551cf7a31af0ea0506845d5389afa18d8bd52d277356b5d","first_seen":"2025-09-18T03:39:33.985882Z","last_seen":"2026-04-03T22:57:40.716247Z","times_seen":1262,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/vendor_modules-CWxWTxL0.js","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /assets/vendor_modules-CWxWTxL0.js HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/assets/index-B4Aofw05.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 99bb11df19b9b505-OSL\r\ncf-cache-status: HIT\r\nage: 2101\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:21:55 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 15ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-CWxWTxL0.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdjUQ5nsh1kBumBBkhJplRCE%2B4Ity36GUyL1BDjhp24lPF6XJk8RG92mjYQSC8o260NzrEOP%2BOcaYHrOHMGqHj6GyPHkBk%2B%2Fn1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"acb9f08cf93a23ebaef801002beabad8\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2338816,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42354)","md5":"39c7224bf025f2b9653f9dd7697cd5f7","sha1":"813eb1a3f7a196211b06a1c6710f92741d5d9466","sha256":"c22fe59069f03bf7d78be387ae81e957b1138609e88de5bbe764125810099929","sha512":"5185fb85d64b8425b2e3f66f127a78cd4da3ed85c34eec00663f4386b7f5ce4a90987d5d65073291798bdf90d8cf236e8a4947b1d4bf797891e5a27602f76bec","ssdeep":"24576:Bnf+ZpY5+lYYmdIoABMAcjgsbx7gcuj1DLY0SC6i:Bnf+Z+aYYtjcmeJi","tlshash":"88255c94b14035398bbb89e581ea6100b2359482f80648ddf56ad8c74fdffc913bbb79","first_seen":"2025-11-07T10:38:14.926239Z","last_seen":"2025-11-13T04:27:24.832154Z","times_seen":40,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/versionControl/combined.js?v=v199","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /versionControl/combined.js?v=v199 HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 99bb11ea2d69b505-OSL\r\ncf-cache-status: HIT\r\nage: 667\r\ncache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:45:51 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 20ms\r\nx-from: R2\r\nx-original-cache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nx-r2-path: v199/versionControl/combined.js\r\nx-version: v199\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGAcr8Ha4geebDHA66jJ33LHwSn2ZCOYh%2Fi5IMjh8Jw5IRUzBdjTjiVu1Y%2BqSf8zfMok8xb7gfZjzyGXLduVCXa7DRmRKHS6usI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"33b6aa938535a04cea9fe0edbab0349b\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15136,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3127)","md5":"33b6aa938535a04cea9fe0edbab0349b","sha1":"49e7714c17f196eff25c590f7171e855dc2c8824","sha256":"59d4c20cf8c2e2436fcbeafa70570c6716680160638b877d4964cece25ceb9a9","sha512":"426daf77f218b4b7b2446dd97a4b10f25d6891060cf21d9de0499bb39689dff2d0479f0fa6b77ab619e9f3e73d4765f98e69b61044e16953e7f810c16749df1e","ssdeep":"192:lJtXatX8sEXZ7D8WQQtir56Y9tozbNlfmfdIe9MsQxWPu7GnArHcfE0qp97A8:BS87DFi7tHfdI8MTtAcPXU8","tlshash":"2f62d71c36b8207542a37219abefd70c3130422b28569c557a4d83b50fa5ebd46bbedb","first_seen":"2025-09-05T18:22:08.438516Z","last_seen":"2025-12-07T17:03:33.935102Z","times_seen":1591,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:59.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xa7l8fps.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:54:03 GMT\r\nexpires: Fri, 06 Nov 2026 09:54:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244976\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-03T22:29:59.391883Z","times_seen":713237,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":199,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.50.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Jun 2025 09:41:05 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"64:77:72:8B:BB:58:44:79:90:C3:B0:8D:35:BC:EC:6C:D6:35:BD:83","sha256":"3D:49:49:78:42:46:FF:F7:52:9B:6B:82:DF:7E:54:4B:F9:BA:D8:34:14:1D:21:67:63:4E:5B:62:A1:D8:85:B5"}}},"request":{"raw":"GET /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js HTTP/1.1\r\nHost: o.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding\r\ndate: Sat, 08 Nov 2025 11:36:32 GMT\r\nx-oss-request-id: 690F2B40CBFD98F08CBDBCFC\r\nx-oss-cdn-auth: success\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=604800,s-maxage=86400\r\ncontent-md5: +Qy41lIxtXUfDIRUCYN/rw==\r\nx-oss-server-time: 2\r\nvia: ens-cache31.l2de4[265,266,304-0,H], ens-cache24.l2de4[267,0], ens-cache8.fr4[0,0,200-0,H], ens-cache22.fr4[1,0], ens-cache7.fr4[5,0]\r\netag: W/\"F90CB8D65231B5751F0C845409837FAF\"\r\nlast-modified: Tue, 09 Sep 2025 04:59:22 GMT\r\nx-oss-hash-crc64ecma: 18070070566042294652\r\nage: 66024\r\nali-swift-global-savetime: 1762601792\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sat, 08 Nov 2025 11:36:32 GMT\r\nx-swift-cachetime: 86400\r\nx-assets-grey: false\r\nx-assets-path: /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js\r\naccess-control-allow-origin: *\r\nx-er-version: 0.0.6\r\nx-assets-pt: pt0\r\ntiming-allow-origin: *\r\neagleid: 2ff6329b17626678163342203e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":221235,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f90cb8d65231b5751f0c845409837faf","sha1":"53a85021f575c9b876cc063c896ae1c9438d2428","sha256":"b6236629d196b9fa98e653433c3f2008b3210071676b220cd45c73eb69e421e7","sha512":"9557467accbb53aa29a446d3a61817986d2f1efd64ea9a754aaeb1b5b412145b76ff41caf6cdcdb20bc7a3a2703ae237ccf2e64127199a21e0363243810d8947","ssdeep":"3072:wIulRR/ISzbPNSdwWpivPHYU4/DKYYWgXhgXV7TLI:wIuzhb0CWpi3H6GYYrh0V7vI","tlshash":"7424f98db1c5b0d90be364e4012f640af0bb6a64745ed991fbb1d4c5ac79e8ea033e5c","first_seen":"2025-09-09T21:38:00.308846Z","last_seen":"2025-11-28T03:14:32.801176Z","times_seen":1917,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":265,"dns":113,"connect":37,"send":0,"wait":33,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/vendor_modules-9b7WOkhW.css","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /assets/vendor_modules-9b7WOkhW.css HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 99bb11da782eb505-OSL\r\ncf-cache-status: HIT\r\nage: 2100\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:21:55 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 23ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-9b7WOkhW.css\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2HpPdaL1GPR8ZboFnBqy0I8%2F04B%2FNMy9NvdYcUDWQH%2Fj75lbokvxjMzDsEFPmeHnT%2F0S0dDF%2FUErfj45L7oNCCo%2Bc%2Fzu6%2FSYmA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f4368789de81fbaab97e1a5baa502a74\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23223,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23222)","md5":"f4368789de81fbaab97e1a5baa502a74","sha1":"e59868ea619fdbf9f91b6cba557cd55a256ecaf8","sha256":"dfea356615307ae05cd31120263fe556b65b19a1e030f991d0b0fd6ab398aae5","sha512":"ef5df72676ac899f15f560096b8bf60ab65e248f9577c6931bf3e4f1ebbcd41c11d10dc425fa34de8b6ced93e1e36831f9fd6959c9a58b10311b2234f1393975","ssdeep":"384:nPp2CsOG40aC4q7ECCACqLJCpJi7WaAyzVOn4D9fCNSf7UNGKwZtLCheVa7GC874:nPpZsOG40l4q7XCrqLMpJi7WaAyzVOnn","tlshash":"e3a21042f58015aaafb700b5998db73cbb7aa4c0fa076ed62140f3651bcf6f70597128","first_seen":"2025-04-19T03:35:33.17216Z","last_seen":"2026-04-03T22:15:00.130273Z","times_seen":2619,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fd468eb09fcf/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/g/fd468eb09fcf/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xa7l8fps.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:56 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Tue, 04 Nov 2025 14:15:41 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 99bb11dadc310883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49433)","md5":"0a324c6fecdc7f1ea81ec91fe0e7cb1e","sha1":"8135d4ffacb644306eccc9cb65dbcc551036dea2","sha256":"efcfe0e7cad02815d9e8f6b344452ee90b38d0c99b34b771c9fa01f289917c35","sha512":"7281807a3a7390504a69736950c12096179452882f4e59947972d582e3f801b90b5c2a050dda9f8eca18f9defb9520643ecd6b1914065e90496fc7bc59cb8655","ssdeep":"768:1C6jR2KMga/LUU6c9Db6AqBuTB2Uw5jOyhwVNY1EbV9tGcpfBgQfuWVuY8t:r2Pga/LUU6cRGul2bhBDt","tlshash":"b3232a583256797226d980e0a17b63437326753ae94ccc50e423d976267cecad233fba","first_seen":"2025-11-04T16:54:31.551127Z","last_seen":"2025-11-27T03:02:24.924447Z","times_seen":7405,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/index-B4Aofw05.js","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:57.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /assets/index-B4Aofw05.js HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 99bb11e55bc3b505-OSL\r\ncf-cache-status: HIT\r\nage: 2102\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:21:55 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 14ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-B4Aofw05.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4uJ1mxJR0Ol35BrXFPwPhcCWEJQ%2FxQTY92EOHtvavAuPngrKAbiApkTUdUm1v4J%2FUUO6zDdf%2BlK3McovIFHkkTX0PHImuBDgq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"90b284db64cf6c8b3f5033f82adf5b9e\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3136275,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63515), with no line terminators","md5":"a8e0bcd8f49af8714ae915b8f0baf899","sha1":"9fadf4b3a6a3c4f944750f04320c9d97197af83d","sha256":"561972283c6e6ebe165b273fcd89566b31d9c3188dfe5656c346f408877602dc","sha512":"87dd8dab403cd58029ecca3186fd389dde0347d802b61cb4d88efd5db4e2be4839c646da43dc5efe671c2b3bc3da169f44e1d5a1552541237f7229cafd1d9e95","ssdeep":"24576:NUtqQ6zk79PtkZYesQAZNPzBa5x3ABz9R7fKZFdojEfL06XcNVu7Ucnje126EKo/:NUtL6zG9PtkZYeS9zBa5x3ABz9R7fKZf","tlshash":"d5356d0471693032a9f639a8f4fb257231481f49e605c8b9f2fe5da53287d84717bb3a","first_seen":"2025-11-07T19:34:47.724482Z","last_seen":"2025-11-09T05:57:24.161572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"aa770992960d5d36cf6ba4357f990aa9","sha1":"46cce46df4f47c159c31632cfb45ca0f0144ff0f","sha256":"ea95379db9e2554185ea2a578330b742412ef90d2ccd704a76ed133d990f052b","sha512":"42a66305d9a2990560ee0468c3a36e4b4a1b1ca98cf0922717b9519d17760c63930cb21fe7258671a873a4f9a1bfa520778ce2f002bfba120c99e3f5db00ebea","ssdeep":"768:DDADRDYDKDf4DQLDDDXDfc70afUQRptmJKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVN7:+2Biad","tlshash":"afc2eda1041740009b839ce223cebf35fe5f92117141d0b9abfd9b6badcbc66526936d","first_seen":"2025-09-09T03:39:37.780899Z","last_seen":"2025-11-18T23:25:50.567773Z","times_seen":2837,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 09 Nov 2025 05:56:56 GMT\r\ncontent-length: 0\r\ncf-ray: 99bb11da98c50b45-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/fd468eb09fcf/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Share+Tech\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Share+Tech\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e445997a42031fd5f59241d9e90a2488","sha1":"1c85d73b72928eba91ee394d01138ed57e6d234e","sha256":"f2061f59c6fa22d7e1f7e8089baddd9500d980f6ca7062687aa53b4f079d2612","sha512":"ba6cb5cf8c7a66c0aa5736bd831ff470db2388d5ec56ff4bbfa5830199ab1e06dd04f905b433ec0d4687d59b36e8551c6893f8a391204ec2974f15ff6af91f41","ssdeep":"","tlshash":"b7e02b4118276514e6931dc1129e7a31ef0fa0946444d9659afa14d8bc4ac565357b1c","first_seen":"2025-09-14T10:40:02.434998Z","last_seen":"2026-04-03T22:15:00.120535Z","times_seen":2353,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/index-B4Aofw05.js","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /assets/index-B4Aofw05.js HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 99bb11da782bb505-OSL\r\ncf-cache-status: HIT\r\nage: 2100\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:21:55 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 22ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-B4Aofw05.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8QRoQtW9KjZsev1aEIZXvRY9xx6c6Djea9qVDJhgSrbd5quiRKQ7s3uIirGHFLfOV7JHomEvTcHpD92R2dccz0%2FeFBt0Xc7UQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"90b284db64cf6c8b3f5033f82adf5b9e\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3136275,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63515), with no line terminators","md5":"4f2243fc0dfa30af9759adc24300ad78","sha1":"4008e5e78d4c53b68f530a7a3298777fbf14de00","sha256":"d1fb8e36371b73ce800f1b811d950a6012a9ad564a1338c9a5d55703a7c317ee","sha512":"04c8cda8c0f09c8187cddda52000ba97e047c726ac79ec6c4f9665829bee5e771fecbdc4ba8c2f32ac769314e53be47dba974a4ace68f91bc6552e28815123b1","ssdeep":"24576:NUtqQ6zk79PtkZYebQAZNPzBa5x3ABz9R7fKZFdojEfL06XcNVu7Ucnje126EKot:NUtL6zG9PtkZYe59zBa5x3ABz9R7fKZN","tlshash":"6e356d0471693032a9f639a8f4fb257231481f49e605c8b9f2fe5da53287d84717bb3a","first_seen":"2025-11-07T20:37:13.144436Z","last_seen":"2025-11-09T06:48:51.812166Z","times_seen":4,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d4b866e2cc36a17a4338a16b7daea7d6","sha1":"f243d3d7de3e589a5aee5e2b3cf9fe17ddc423d6","sha256":"22c6f6578e772880cdd797a5a2ef978202a878ac3c8bbbc92e66e910321f197a","sha512":"1b4241ca81c5e66da51b77c826577394a551592e2a5f4d5eff50c113dc80eeb3b4c9ccedaa077cfba311432abf6b228c10d76bbca61abe8805301378c263524f","ssdeep":"384:zwfDwOwdwBwyaw/qY4QwGwmw4wfdwkwDw3wyQw/qY4aw8wcw+wfnwywxwtwyGw/B:zCR6UfaQ7zfTYHw+fQQVNJBe9m4fGQvl","tlshash":"c172eca1041740009b839ce223cebf35fe5f92117141d0b9abfd9b6badcbc66526936d","first_seen":"2025-09-09T21:38:00.318642Z","last_seen":"2025-11-18T21:46:18.976082Z","times_seen":1466,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Product+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Product+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f6061bf85f699a6cefef6f02117f7567","sha1":"8c80d2379ded2b1d1a2a9565fd13f9a4db16f957","sha256":"1be04160f39c4941fd6dd1efb4d3af1f67b3094969eeb4340285f06e8a4e4d02","sha512":"d93e11f3d62b35cc8df538bc1b0414b4e402feadade5f7285a16648fa4ca9724ce5f7d1510b65b1b8eaf2ac1536377eaa35c2dc4d80314c61c0868aca8f9d226","ssdeep":"","tlshash":"aa3115e1013ba084ab831cd523df7e26ad1f6221a485d47e4efd289cfc95d564330b5d","first_seen":"2025-09-03T04:41:06.145005Z","last_seen":"2026-04-03T22:15:00.130855Z","times_seen":2356,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Prompt:ital,wght@0,400;0,600;0,700;0,900;1,400;1,600;1,700;1,900\u0026display=swap%22","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Prompt:ital,wght@0,400;0,600;0,700;0,900;1,400;1,600;1,700;1,900\u0026display=swap%22 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a0c1c6b3c2cf85e6844b3b880cc2ce3e","sha1":"814890f8d7b34836c16f0c8c98233efcfec0290f","sha256":"dc959e820ef9dbb831620e21e8c056e0de93d09a5e465f12377b8f7af6149e8d","sha512":"4a4c8d18bcf2358e40f90260f62d57b8b0f7ff1c8389546facd1a24fe97f75d9070a0a82c203630686cc83d97d6f7d8a991eeaf9adbb53864c4fbf290eaddd59","ssdeep":"192:GkkskZkyLkX2ns2h2OL2ip1spfpsLpsTWsTcT3LTTfGefrLH0/4lBnf0Yi7tdkG4:GFs03KAsupRLs9+eas4nX5F2w","tlshash":"a332abb1052ad540a7831ec663df7d36cf8eb165b0908436affe1d88fda6c22526075d","first_seen":"2025-09-03T04:41:06.141904Z","last_seen":"2026-04-03T22:15:00.135284Z","times_seen":2522,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Smooch+Sans:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Smooch+Sans:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6bc9cecd1b7fa846febdcf65dc5df15e","sha1":"d95bb74efb0feedc043beb2b8fcca2242a0b257c","sha256":"11df099f5c41493ca5be2126517978eb204707e7222a9b6f2ca5f2a9a9c4be00","sha512":"0c88fff713c785573abe70dfdbac1574c48c9fdf29b456a3f9eeef9664da5c804c9ed0c0d41579298ce5fdcba6e2417892630609423cc5fbc9fbc609e3fb6a58","ssdeep":"","tlshash":"dc210f93046b9104e6870ec622ce7d35ae8fe1213041e579fffd1889adbad296371b0c","first_seen":"2025-09-14T10:40:02.437373Z","last_seen":"2026-04-03T22:15:00.127564Z","times_seen":2513,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/download?\u0026from=jiliaat0keob.com","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T05:56:55.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /download?\u0026from=jiliaat0keob.com HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 99bb11d8993ab1b8-OSL\r\ncf-cache-status: HIT\r\nage: 40272\r\ncache-control: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sat, 08 Nov 2025 18:45:43 GMT\r\nx-cache-source: INDEX-PAGE\r\nx-cache-status: STALE\r\nx-data-time: 39ms\r\nx-from: R2\r\nx-original-cache-control: no-cache\r\nx-r2-path: v199/index.html\r\nx-version: v199\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CL4ubMQbk6H244wVpLg0q6BFM3Fq93rmC0mcbUEZQeNWjW1JTf8EN7uhdQyYDY8M3kJ84nFFIC0faZ67rt6Rg5z0we70DWlYoCBBvw%3D%3D\"}]}\r\netag: W/\"ee113c4d4a218596837ff5dbfa6fb931\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}],"data":{"size":31443,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21704)","md5":"3f38fbd77d9cee43bb97d9b6aefdfa3b","sha1":"3c7f168150e74518e4b351504333e8e02d9a52e0","sha256":"f642e85b30b2708fd38782f784e6228f8b94fe7b9d8bfb324440796c2f4ad440","sha512":"59ef3d0097ea1e17f24d589c2176e0e7490c40d8ec64afd430125a5eca8d2b749299cf9c290d90d77ca3dcb0b4ac7101c209b2f670e0b7fdd337f164bbe19409","ssdeep":"768:kuP7q8F/38kaU8uh9wjD2BcF+Ruz7aNt+pP9i9ZSytQa3QxOk90w:kuPm+5PfvSytQa14","tlshash":"82e271d742de18082bca3126c686a498076a964b1c84f740b3cf6f765f95fd0778b2bd","first_seen":"2025-11-09T05:57:24.167171Z","last_seen":"2025-11-09T05:57:24.167171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":101,"dns":78,"connect":2,"send":0,"wait":52,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/index-CWJ7QM7f.css","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /assets/index-CWJ7QM7f.css HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 99bb11da782db505-OSL\r\ncf-cache-status: HIT\r\nage: 2100\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:21:55 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 26ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-CWJ7QM7f.css\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxK9aricMRt5yzuIz6Zel4UEPg%2FDKwqC9zlN%2FvbjdgOIGoGxmT1MvG6jkTV5OK4ShlM%2BgakUiDN3qP%2FvOX496%2BdsB0yyMu4PXBc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7da4a7658911954de26bfcf153c76bac\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8466940,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cccb847312c236d21a469d17399e4e7e","sha1":"9bd28826097250f9d09d9577cf58d27889652adf","sha256":"d10923ee3a06c0cf20e31e96a43dce3c1b32c1e7ff6f0419f6b0c4771b35bf42","sha512":"848eddb87d45aefc7fb9afd4d36afafbabc0fa21c3932fefe6b389dc3ae7d6f75eee468b2b212f2c9e9a44ec7b9b107d8231cbba2de212f11877603c6854336b","ssdeep":"3072:+xbT2Zklm1tAejFiSUOkgMwL24EdZohKMoj+IgwkaYSEIHeyRmTEQVBc750cL7sn:q7sizvl55056wWW6bw","tlshash":"c0255278b25ef67e7837d4be1aacd28c1115f942c9024ba9fa52b2508cc3bf73165349","first_seen":"2025-11-03T09:24:32.126128Z","last_seen":"2025-11-27T04:18:09.852989Z","times_seen":243,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:56 GMT\r\ndate: Sun, 09 Nov 2025 05:56:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32402,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f56f25fe74b525652cef3b25ad44adad","sha1":"853baf42fe3870c440e75943df69e1a84ec86bc4","sha256":"66b0fc3a90229a3f56d0df87208c6d7dcca4e5bca850029a64528d06d57b5de0","sha512":"cb5c524b2fc5702e5e4bc81b0a09374775b88b19c431cacd5c7a6f850d8f1506966cf2c349726690d132be9afce67aacd4ddec432cbd8c0116c9ab7fbdec9188","ssdeep":"384:vtfcHjg8ciIg3is3X3D35CsAfXosWBZTsmNUUsKVdqso3/5srQICsAfX4sGRcnZD:83HDaZzcC","tlshash":"f9e2b8b1042bd500ea871dc627cf7e369e8eb1667490c579affd1888eceac22532475d","first_seen":"2025-09-14T10:40:02.408446Z","last_seen":"2026-04-03T22:15:00.133818Z","times_seen":2564,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":176,"dns":1,"connect":27,"send":0,"wait":46,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.n-5-p-e.com/s1/app-icon/9135099/lolo.png","fqdn":"upload.n-5-p-e.com","domain":"n-5-p-e.com","tld":"com"},"ip":{"addr":"104.17.4.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:57.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.n-5-p-e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 10:55:11 GMT","end":"Sat, 24 Jan 2026 11:55:02 GMT"},"fingerprint":{"sha1":"9D:03:44:E9:B1:66:29:D8:0F:7F:A1:4E:DE:37:51:3B:77:5C:5B:55","sha256":"20:78:89:15:80:48:51:95:10:F5:81:CC:7B:3F:B2:9B:51:40:5A:84:4C:CA:73:31:51:A9:14:C2:8C:5D:1D:50"}}},"request":{"raw":"GET /s1/app-icon/9135099/lolo.png HTTP/1.1\r\nHost: upload.n-5-p-e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374442\r\ncf-ray: 99bb11e65867120a-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=514238\r\ncontent-disposition: inline; filename=\"lolo.webp\"\r\netag: \"4699f87a065dd684ab06fca26e271ed7\"\r\nlast-modified: Tue, 07 Oct 2025 11:51:40 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Sun, 09 Nov 2025 06:06:58 GMT\r\ncache-control: public, max-age=600\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nset-cookie: _cfuvid=obKOzTEqJL5Y.lSAL13BTy7gvLVSZWYM9d0cO4m962g-1762667818814-0.0.1.1-604800000; path=/; domain=.n-5-p-e.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d6c4fc6585f16fb79f50c0430e16121","sha1":"afa75a49c5fffa349767cdc9c2b3a2a5f55aa6ca","sha256":"d51db5d6153806b7f63ff0f90ead62ab3b87498d597207706f6d4dd48be52c75","sha512":"0c6c6beaee1e6ca81578310c1a7d3689035072f590886f24b02160e77acbfa3a75f5dce7d9ead6c5a72952457768169584fa4ce228d6b4be67e3af886dc0d7b8","ssdeep":"6144:lBAgI9XduE52vVcmaZkvtlBC8MzM+ZpN7PMuOr15tAxVX3bP7nj7:lBAfxdu1VaZYrCTg+LN7PMP1bQ5bPL","tlshash":"e08423185d81f5dd5b60b0fe4db529d82c6ca4e9948fc0c2a447a93393ceaf3962274f","first_seen":"2025-10-15T06:17:12.005227Z","last_seen":"2025-12-01T10:40:54.995516Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":0,"dns":139,"connect":4,"send":0,"wait":845,"receive":15,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/assets/vendor_modules-CWxWTxL0.js","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:57.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /assets/vendor_modules-CWxWTxL0.js HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 99bb11e55bc4b505-OSL\r\ncf-cache-status: HIT\r\nage: 2102\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:21:55 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 15ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-CWxWTxL0.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YiUBRrmSPOt50qjnkpen9uOO2EswcMNDCL1HV7ZPR6L5qJmDVUwOKPXHn%2BPZ4M0jXyyuuIi8Ug7%2FPBaT47U%2BTFCUC%2BpHVt308kM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"acb9f08cf93a23ebaef801002beabad8\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2338816,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42354)","md5":"39c7224bf025f2b9653f9dd7697cd5f7","sha1":"813eb1a3f7a196211b06a1c6710f92741d5d9466","sha256":"c22fe59069f03bf7d78be387ae81e957b1138609e88de5bbe764125810099929","sha512":"5185fb85d64b8425b2e3f66f127a78cd4da3ed85c34eec00663f4386b7f5ce4a90987d5d65073291798bdf90d8cf236e8a4947b1d4bf797891e5a27602f76bec","ssdeep":"24576:Bnf+ZpY5+lYYmdIoABMAcjgsbx7gcuj1DLY0SC6i:Bnf+Z+aYYtjcmeJi","tlshash":"88255c94b14035398bbb89e581ea6100b2359482f80648ddf56ad8c74fdffc913bbb79","first_seen":"2025-11-07T10:38:14.926239Z","last_seen":"2025-11-13T04:27:24.832154Z","times_seen":40,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Google+Sans:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21971,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8f47a0f2e815d988a3d94a8b35d51380","sha1":"e63d943eb02b66df7b33aff9cf420c93f86764aa","sha256":"6fbfa2447071d85d5862ce9d48a7c5629ed297d5957da3c8689afeed85f839c0","sha512":"5b29ec3cc2a940a536c8f31b21f3f7b96921ec955d5c5c31b53eb75a1ea9a9f0204687c9f7a2abfb571a74e8494887ce3258a426633858810a49c64719bc096e","ssdeep":"192:idnXweF+ASKNgOG8OHPM0vuZ+bqGIwVhzB4rYzGPKeAXXem9nBKOHOGDNgITbot6:i1JQqYin9B9qYda","tlshash":"a6a2e0a51047a028be67bcdb33ce2d146e5e11791501d23e9bfe0a85ecd786503f1bae","first_seen":"2025-09-03T04:41:06.135123Z","last_seen":"2025-12-10T21:40:19.000768Z","times_seen":1614,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo+Black\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Archivo+Black\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":876,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e3007649be8351211d8ef1ee97c5f5dd","sha1":"e07bd87458426358f8de2e93e5db225e3c83f95b","sha256":"1dd05599139cbe08c0d38d033560be7dc858b5563485992a1e679492101bad92","sha512":"ff102ba72ea7a2b9ae2bebf0706b1c74f567fc8b1c78839d86107d7dbd2de88279bac24f3a0b9fae1fde54d9dc6406f9b87b05de931f9fe75d334cc4a877c30a","ssdeep":"","tlshash":"8f11cc82086b9400a7c30cc126de7d36af1f228068469974affe14d8bc5ac56431270d","first_seen":"2025-09-14T05:46:36.210113Z","last_seen":"2026-04-03T22:57:40.710564Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:56.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js?58 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 09 Nov 2025 05:56:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Thu, 13 Nov 2025 05:56:57 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-03-26T21:58:27.933778Z","times_seen":3807,"resource_available":true,"data":null}},"time_used":2137,"timings":{"blocked":1054,"dns":11,"connect":18,"send":0,"wait":19,"receive":0,"ssl":1031},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-04-03T22:33:47.28996Z","times_seen":30504,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Saira:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Saira:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3987,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9707f9cb15664c163ec9d72c5ade9ff9","sha1":"311037392d40f635335cec6401670b26023ca9a4","sha256":"1a69a6aaed01fe3d741a73301210cf8fe900236def14021a3920f48fb103628e","sha512":"b49c8c5c23b2e1f02135bdd57b701f5362791b6170cda79fc8e9e3cea54ab27c1922e4afe06954290e387eb657eaebf75b0eccb124c962b04e0ec6a3d50f3ddc","ssdeep":"","tlshash":"bd81b890442a9144ea570cc523ce7e72ae8eb0257054d5797ffd2898aceec32a32670d","first_seen":"2025-09-05T18:22:08.434769Z","last_seen":"2025-11-18T21:46:18.984728Z","times_seen":1457,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa7l8fps.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v199","fqdn":"xa7l8fps.com","domain":"xa7l8fps.com","tld":"com"},"ip":{"addr":"104.18.11.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa7l8fps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:10:00 GMT","end":"Fri, 09 Jan 2026 09:09:48 GMT"},"fingerprint":{"sha1":"91:7E:C8:D1:C6:B5:50:C3:C1:2C:A2:B7:B7:BB:98:1C:7B:91:75:74","sha256":"9E:D1:21:11:F7:53:5B:86:82:C5:AD:49:82:98:20:4D:69:69:F8:85:69:86:E2:E9:AA:73:EF:80:02:DC:06:CC"}}},"request":{"raw":"GET /versionControl/webPushSdk.produce.min.2.1.6.js?v=v199 HTTP/1.1\r\nHost: xa7l8fps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 99bb11ea2d6bb505-OSL\r\ncf-cache-status: HIT\r\nage: 667\r\ncache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-placement: local-OSL\r\nx-cache-date: Sun, 09 Nov 2025 05:45:51 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 16ms\r\nx-from: R2\r\nx-original-cache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nx-r2-path: v199/versionControl/webPushSdk.produce.min.2.1.6.js\r\nx-version: v199\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pz2cPnz%2FYHMhEzicnqc7JN1h9O3QIz1w5KhX40VmK9KYcRXWGuM%2FaNfuJm2gbx1FmjOGRTqe%2FIu7OW0QvaBxiktdNRi93YLUark%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"252eff85e75f98cab2ed0affd0f24ed1\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61393,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61099), with no line terminators","md5":"252eff85e75f98cab2ed0affd0f24ed1","sha1":"e1a739fa70c57e9ef90f33fc4ab52fcf387ad13f","sha256":"1ee4947bae28f87f22e0f400ac7ae540d0162c4102402eaafe7d3aa6a3420c7e","sha512":"55efba3ebdc87dfeb1933208acd1f727b126433e26a1b747eff534620804979acaf50139674e7d5ebab2baa3bc962b9495224f15f461a01e56b76ad269060d12","ssdeep":"1536:7ROuwOy/RQEO6odontXPi2kJP33+NR5qlr:dGBSEOLdyXPeF3+N+Z","tlshash":"92534d9ef589753503ebb054c53f0402b6332c15a64282a8f6acd5d6fc795cea063fba","first_seen":"2024-07-30T04:40:36Z","last_seen":"2026-04-03T22:15:00.127055Z","times_seen":2643,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"xa7l8fps.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.n-5-p-e.com/s1/app-icon/9135099/lolo.png","fqdn":"upload.n-5-p-e.com","domain":"n-5-p-e.com","tld":"com"},"ip":{"addr":"104.17.4.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:57.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.n-5-p-e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 10:55:11 GMT","end":"Sat, 24 Jan 2026 11:55:02 GMT"},"fingerprint":{"sha1":"9D:03:44:E9:B1:66:29:D8:0F:7F:A1:4E:DE:37:51:3B:77:5C:5B:55","sha256":"20:78:89:15:80:48:51:95:10:F5:81:CC:7B:3F:B2:9B:51:40:5A:84:4C:CA:73:31:51:A9:14:C2:8C:5D:1D:50"}}},"request":{"raw":"GET /s1/app-icon/9135099/lolo.png HTTP/1.1\r\nHost: upload.n-5-p-e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374442\r\ncf-ray: 99bb11e64863120a-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=514238\r\ncontent-disposition: inline; filename=\"lolo.webp\"\r\netag: \"4699f87a065dd684ab06fca26e271ed7\"\r\nlast-modified: Tue, 07 Oct 2025 11:51:40 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Sun, 09 Nov 2025 06:06:58 GMT\r\ncache-control: public, max-age=600\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nset-cookie: _cfuvid=8kcF5ZHT4n_i75TPYYnRMsk4O64YQvkl79v9VKgfY2w-1762667818786-0.0.1.1-604800000; path=/; domain=.n-5-p-e.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d6c4fc6585f16fb79f50c0430e16121","sha1":"afa75a49c5fffa349767cdc9c2b3a2a5f55aa6ca","sha256":"d51db5d6153806b7f63ff0f90ead62ab3b87498d597207706f6d4dd48be52c75","sha512":"0c6c6beaee1e6ca81578310c1a7d3689035072f590886f24b02160e77acbfa3a75f5dce7d9ead6c5a72952457768169584fa4ce228d6b4be67e3af886dc0d7b8","ssdeep":"6144:lBAgI9XduE52vVcmaZkvtlBC8MzM+ZpN7PMuOr15tAxVX3bP7nj7:lBAfxdu1VaZYrCTg+LN7PMP1bQ5bPL","tlshash":"e08423185d81f5dd5b60b0fe4db529d82c6ca4e9948fc0c2a447a93393ceaf3962274f","first_seen":"2025-10-15T06:17:12.005227Z","last_seen":"2025-12-01T10:40:54.995516Z","times_seen":58,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":0,"dns":141,"connect":1,"send":0,"wait":819,"receive":17,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons+Extended","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /icon?family=Material+Icons+Extended HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":612,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7018b90a0b4af059254573bfaad0b3c0","sha1":"21005aad8ea9cc2218265105d4bca7bede012990","sha256":"939d23fa38a234e289a02eba362cb98351b28de6868212a1f0450bcdc4cb1e39","sha512":"de7cf24c3c9d55aa7955662c930cc8c20abe2d4e7e036af63eca0115bcd9ab943ff228815088d1d228087ac0f525b0603269ed6ce4fa227ec4cf6cda5f597b90","ssdeep":"","tlshash":"90f04c556e57698665a14c57334f3f124d1d401ba90accfd8bc10d0c5cfe9bb538ab0e","first_seen":"2025-09-18T01:33:29.712118Z","last_seen":"2026-04-03T22:47:04.302453Z","times_seen":4213,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa7l8fps.com/download?\u0026from=jiliaat0keob.com","date":"2025-11-09T05:56:58.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Inter:wght@700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa7l8fps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 09 Nov 2025 05:56:58 GMT\r\ndate: Sun, 09 Nov 2025 05:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9a832bded51393dffc57f9770a8605c5","sha1":"e4a6087bfb38c7e60c01e1a3a2d82dadca43e9fe","sha256":"94c297f7502cfdd4c4f6b16db772cd92b5db5122215252c6aa2291075be54b59","sha512":"7efaeba451046c2b619be80d24f0dac02d8ba67ed994658795ec426f26ee52989f705fd7845467e4020173495b145aba8900e10a34eac5c7c19c24eebe74bf54","ssdeep":"96:aOpaNqOpaXFZHOpamOpaO3vOpaBOpaBJc+uTOpaNcNDObaNqObaXFZHObamObaOa:0NEhYO3RrxGYNCbOO3Lxxgx","tlshash":"afa18b92002ba400ab971dc233cf7f3aaece10896085d2b95ffd0dc55cead66436875d","first_seen":"2025-09-18T03:39:34.005529Z","last_seen":"2026-04-03T22:57:40.718381Z","times_seen":1268,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}