{"report_id":"148f4072-e620-480a-8b88-ede484692eb6","version":6,"status":"done","tags":[],"date":"2026-02-25T18:35:43Z","url":{"schema":"http","addr":"lmefxo.com","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"104.21.66.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"title":"LME","dom":{"size":48340,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40615)","md5":"c3f3e35dbf376ab68f9c1a25817fa666","sha1":"8e37abc0adca6a192a5afc7d3efbcd9763d9f59b","sha256":"1b826781891e36c12e151632aa20ebd1fb272004f46ab6ed39319f28b87e9c65","sha512":"6546cd24590e9e98f05bf81b4baf5344f8d8e158bb70204d71ab14ee69babd7dcf0ede130c3a22b0589b9cc27aba440c05960372debc0ae2eebce051bb9cb4fe","ssdeep":"384:FyU0peNgZCxN2gSZgjpMfsEzbsM4FdiThCjJXMfsEzbsM4O5VIvOKJVPIBE3B:FyU0pWgQxN2TgiTsWsLPIBE3B","tlshash":"3023eb32f00995ab42b7d9cbd232bf2930c2f70bd65685003eac46a55fe7cf9b995160","dom_hash":"domhash6dcec966c3572b38106896062a31bab0","first_seen":"2026-02-25T18:35:49.295499Z","last_seen":"2026-02-25T18:35:49.295499Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lmefxo.com","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"104.21.66.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T18:35:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55930,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.732680+0000\",\"flow_id\":21042134107907,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55930,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.182019+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55946,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.736049+0000\",\"flow_id\":357741800311847,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55946,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.183335+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55952,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.741355+0000\",\"flow_id\":1433815791556076,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55952,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.185836+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55926,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.782545+0000\",\"flow_id\":2153751094608126,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55926,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.180478+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55964,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.906747+0000\",\"flow_id\":2119127215755086,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55964,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.315214+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55954,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.927224+0000\",\"flow_id\":922633078951529,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55954,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.314985+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55988,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.987806+0000\",\"flow_id\":699954057028420,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55988,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.435012+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:25Z","timestamp":1772044525,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":56000,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:25.990086+0000\",\"flow_id\":1393518260890473,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":56000,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.437097+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:26Z","timestamp":1772044526,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55966,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:26.019777+0000\",\"flow_id\":2204543377839783,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55966,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.431783+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:26Z","timestamp":1772044526,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":56010,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:26.110079+0000\",\"flow_id\":1971992373601078,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":56010,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.566070+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:26Z","timestamp":1772044526,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":56002,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:26.131852+0000\",\"flow_id\":1426361875794052,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":56002,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-25T18:35:25.559236+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T18:35:26Z","timestamp":1772044526,"ip_dst":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55972,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T18:35:26.817541+0000\",\"flow_id\":1880971279178835,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":55972,\"dest_ip\":\"47.79.64.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"order-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":1628,\"bytes_toclient\":3148,\"start\":\"2026-02-25T18:35:25.433235+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"lmefxo.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-25T17:54:47.433325Z","last_seen":"2026-02-25T17:54:47.433325Z","alert_count":38,"request_count":19,"received_data":9041708,"sent_data":8066,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-10-12T15:33:58.168765Z","last_seen":"2026-02-24T15:48:10.384371Z","alert_count":0,"request_count":49,"received_data":157841,"sent_data":23769,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"h5-api.lmefxo.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-25T17:54:47.430038Z","last_seen":"2026-02-25T17:54:47.430038Z","alert_count":142,"request_count":71,"received_data":344962,"sent_data":37039,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hw.rangwodf.cc","ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-02-19T15:44:14.989928Z","alert_count":0,"request_count":1,"received_data":5028,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bc862f724d8913b17311dda854465197","sha1":"7cdfbe6344e4a9cf0e031fc6e931a6bded9b8835","sha256":"64657748ba72068bf1545bc854c76cd41e27716d84c3d2171b685785ffea345d","sha512":"0f4d5b9ae3fcc6b0e1ce197bdc06328794b27914adf598088f06301fc1a7ae6638b183a829f66cef7012c60d1ac0446d6b0fbedcb6d71c8b6f941639166033ae","ssdeep":"","tlshash":"f1c012da70ea39101519b81459af39f49124582774881b428dd9dc6c2d624f05623ff8","size":183,"data":"","first_seen":"2026-02-25T17:49:39.183148Z","last_seen":"2026-02-25T18:35:56.383114Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2068bc4ffacebae80ecbe26251d2937c","sha1":"95461f0a0de720d7a44b438e27c1016025f37949","sha256":"69acb98f3a01acae2a71ff1353bd22ef76713dcc81ce122cc679a42fb5162e86","sha512":"964b539bad14b11ad68cac9a23fb781670bfc51073237e33b765d4490d170bd6e690bd30fd93e7c712f25fe1aac5cef587b6c2fc8e10453aeacd066bdbd5a5d9","ssdeep":"","tlshash":"4fc08cc5a0c22e101603a42014bf28e49024802b74482b528d98d8482e221f08233e98","size":145,"data":"","first_seen":"2026-02-25T17:49:39.174616Z","last_seen":"2026-02-25T18:35:56.375156Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c95ca2328f4725ac14546efd8ad7ed7c","sha1":"f931cde2613f194066603e4c67eb196dd37392d9","sha256":"f974f53506576a891046e7585bcf5ccc45ea048fdde8534644ec195d94c9c042","sha512":"2a380c5b250032a63ffbc12978db232d5a132e6d3c755e7f8df54347bc8bdc4d7a27b2473e06d2c15a141aad72ce34ba405f6c6c570c3db7d3e1ccb58ac7a241","ssdeep":"","tlshash":"06c08cc6a0c22d105616681090bf25e4d028482eb0482b028c94d8492f630b0c233ed8","size":143,"data":"","first_seen":"2025-08-31T12:50:28.036299Z","last_seen":"2026-05-04T13:28:29.526971Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"38d3cc150786a8971b43e66091ecc995","sha1":"29d8027856bba6a529d1af9384684143f767433c","sha256":"f1689a1ab60a1f9a5423b7bbc208f16c6bc60d4e4f263f8aaa3fae53affd9fc3","sha512":"00cd8544f61787ad191d2337a111551697261ced07a2c01651568f5b83fe0bfa3ae1b570d52cbb07bcc28e0fdb9d954126b3e8d27b1efa80d1e9c9c0e50def23","ssdeep":"","tlshash":"4dc08cc4a0c32e102612655015bf36e4d0244826b4885b43cc94dc883f230f49233ea8","size":150,"data":"","first_seen":"2025-05-23T04:04:23.025321Z","last_seen":"2026-06-18T15:34:24.652614Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/ac-chat.js?2.2.1770477070317","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-07-30T19:44:59.564915Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0d636c8429523d5f581684535428ba9b","sha1":"c29c261fd5527c5faaad67af535b31e8e56c6302","sha256":"85982f690ba4cefc75c36031467473410ee791a09668593075818c40d12aedde","sha512":"aa10eeaa6f88f3ad8d3af1b44935e2e3fac67325ea5c1dd16a97705f50b83344829c861aa1def3039c488044d0d7a0f90fc4990130fd3f991ac46e2e97272abe","ssdeep":"","tlshash":"dad012ea21a292082d72222a8acd1e21f8128333884c460ebcbcac002fb380011a8d38","size":224,"data":"","first_seen":"2025-01-27T00:39:09.432866Z","last_seen":"2026-02-25T18:35:56.369146Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2d98b00bcf2eb71792063651c8c77444","sha1":"448b70a28b1e864a5344bbb27b43319b560c0127","sha256":"d362dabc9ca1ad263bcb50b292a22a2fc2a6ed4ceb5c02c71e213d5a38a32a0b","sha512":"2278285f2d24cac768fa5d6be9610225ab512207a81364ec3037dba457cce25e14abd80a7cb1b3b00c0d431fee936d83be1f112151f3ccc7453a64939450a7b3","ssdeep":"","tlshash":"04c08cc4a0d73d001603642151ef34e4a028442670481b038da4d8483e220f08233ed8","size":144,"data":"","first_seen":"2023-10-27T05:38:28Z","last_seen":"2026-07-25T00:52:59.643038Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9b72b4f696b3d45cfd964e4d6d62c896","sha1":"492e21d4c722e1cec6ace1c815222debb993a9ec","sha256":"fa17fa6ebc51750bc1f2c502b5c3d0a6ad785c3ed360e2064b9fabaed5c413ad","sha512":"0369475cb49bee90471d2274ff26b23045e467ebf95ffb804dc88ae78fd8c0202ad7594da716a908316eab574f4f34e145ee6e41477fffd6a4792f2e636a06bc","ssdeep":"","tlshash":"89c08cc4b0e22d101626646020bf26e4a028482770885f028ca4dc483e220f0823bed8","size":144,"data":"","first_seen":"2024-02-26T00:21:31Z","last_seen":"2026-07-05T00:06:28.523606Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"54eea46cc87d90ed1c188058ba3767c7","sha1":"0842e94adbd347bb6c20afb03e3cc7a5f803e927","sha256":"6e320a51f54a3e36a1cc5da3d4cfec2dee3e78e1ce592b833ba7198ac7b643a3","sha512":"bea1a818fcb5ee178f43976b62df528beb41886c64bc026dcc9da0616cf91a9d4e57ac6beb34e3ac2f6c021870bd0eb0bcdfe0be8c1857b82f3fe897ab31bf87","ssdeep":"","tlshash":"9bc08cc9a0c2bd105a56e82458af35f4a02c443bb08c6b42cdf4dc5c2e720b08233fe8","size":158,"data":"","first_seen":"2026-02-25T17:49:39.176367Z","last_seen":"2026-02-25T18:35:56.371919Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d00031216fa95f8ed09581b521828c52","sha1":"5fa5f294675e62220bd38c78a67ea92d3cf80867","sha256":"e57120b39d0a2bd1e7cca3aac99c4f3736a7cbd17b1f1a567f01a839a56b53fc","sha512":"c96fa9c95e77224142b3d57faa96df87a4be18b65afe538bd76df1b15dafa7ddfe4f4a1319be8a145aaa8e6c436463bc44d43603f023674c53d6c157eb0a9da9","ssdeep":"","tlshash":"09c08cc8a0c32d101602641010af25e49028802670481b028ca4d8493e220b08233edc","size":137,"data":"","first_seen":"2025-12-17T03:55:10.963435Z","last_seen":"2026-06-18T15:34:24.655493Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d1cdd02950a78a2d5f9aab21d6a508f","sha1":"f3ee9f1055b3dde2970903f2fce8d06b9bdd51b1","sha256":"721c0b357c1d6602c2807170bc0cd6f3d78b63aabbaf62d4cf664b591b355897","sha512":"63ff7ad2217e99e60c4d9739fbcef288600bdcf63ac04b9f9bc673dad000d836f25898710eb8cc78bcaa9e2e6e5afeb8b9592dd094f13196fb60a30a89f8a4a5","ssdeep":"","tlshash":"05c08cc8a0c23d101a02a41054af36e490248827704c2b428da4dc4c2e220f08233ee8","size":144,"data":"","first_seen":"2024-08-19T21:00:08.518977Z","last_seen":"2026-06-18T15:34:24.618029Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6c36dfb3c599d8ddd1404699adef24be","sha1":"f735b61fc6ed18474764082fc12d60a941d3c8a8","sha256":"ae106d4d5f9999df6278d9be58e723a51b71134feee0dc7a70137cfd5789d98d","sha512":"4996d8729df328f39f9e3456c8254fa655c87113d713472587e8d957f9861a333b9cb2ae2bf07932c6f188ac3244256d7c388ea2984ea6a27bc3d1038787ef08","ssdeep":"","tlshash":"3ec08cc5a0c2ad105a12641011af25e4a028402670481b029ca4d8982e230b08233e98","size":143,"data":"","first_seen":"2026-02-25T17:49:39.177185Z","last_seen":"2026-02-25T18:35:56.379976Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2899f90263dc9b5dc2ae281989c39ac1","sha1":"5fd906b3ba42a640ac4163937a4c42f3da745141","sha256":"d58d03cc587dea1cf204e7972a7002d1fc3ea812e3495de5a74f5b7c6267b8a3","sha512":"90b7c59ac18b0c07f451302b67e1944f566210a7bf44962993404f45f9b5742c60f04f7df06b5ab3cbc11ada2b93888023a1e543ce5698bffa748118474f5df4","ssdeep":"","tlshash":"58c08cc4a0c63d101a06641415af34e490248026b04c1b439ce4d9482e230b48237ee8","size":144,"data":"","first_seen":"2026-02-25T17:49:39.185198Z","last_seen":"2026-02-25T18:35:56.385843Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e04d9676e31c42caca5a103fe447d70a","sha1":"1a4f934ff08906bf6d6e1737dcc168f3f2e4d7e6","sha256":"9f24b718813d39ff22bd5ac7b1017dd296c34ac7fc4affce0030fdfa61a344fb","sha512":"a369d5d0cc28c5328fac8dc9fd9c60a6d37eabe89f4cd637b1c1c0b6920e138cd3694b1386eaf9ab8126cfd5524d87c2bc31d599c77b096095fe89333c22e1b4","ssdeep":"","tlshash":"e9c08cc4a0c26e102a16651115af28e490284427b0485b128ce4dc482e624b08233ea8","size":148,"data":"","first_seen":"2025-08-31T12:50:28.045473Z","last_seen":"2026-06-18T15:34:24.657008Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cdbfdba00ae4f898a73ef6063f2bc890","sha1":"6d7063cd41f5005eaaebf5c0450fa210ea4c9fe7","sha256":"ba7882dd9dbeed87618891483873bbe3a3a6cb18551ad3d1a44b2c827172b080","sha512":"d09c98672d24cfcdf7a4f43241317485f345c0653b1325099e2b110f941012ad2676e64c7fc1325e68c0f600df79caa00fac5a74c2244d6bf773babeedc36865","ssdeep":"","tlshash":"cbc08cc5a0c66d005a12641410ef24e490244026718c2b129c94d8582e230b0833be98","size":144,"data":"","first_seen":"2025-12-04T02:48:08.178673Z","last_seen":"2026-06-18T15:34:24.619205Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2b699f6e9ac811cb6ce82f1dd6ba1a1","sha1":"8e7d69f74b24094414ab6709183384140d39c4e8","sha256":"c508c148d1068f4020eca9cb04b873745711bb45c4019110e3d22c53e995f928","sha512":"2d97a13c98a3df2da74488178cd16c49105a5fb3a572dc9281268db850a2475cbd702a52679a09d472c5b62129b3dc392ef3bf60af5d428dc38a6a58747f11ce","ssdeep":"","tlshash":"a011effe151ab0296303805e976b3411646250a9000a544173cc9e9dab9ab6dd0cfb8d","size":1054,"data":"","first_seen":"2026-02-25T17:49:39.173648Z","last_seen":"2026-02-25T18:35:56.380911Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-06T10:00:00.107506Z","times_seen":41112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d1cdd02950a78a2d5f9aab21d6a508f","sha1":"f3ee9f1055b3dde2970903f2fce8d06b9bdd51b1","sha256":"721c0b357c1d6602c2807170bc0cd6f3d78b63aabbaf62d4cf664b591b355897","sha512":"63ff7ad2217e99e60c4d9739fbcef288600bdcf63ac04b9f9bc673dad000d836f25898710eb8cc78bcaa9e2e6e5afeb8b9592dd094f13196fb60a30a89f8a4a5","ssdeep":"","tlshash":"05c08cc8a0c23d101a02a41054af36e490248827704c2b428da4dc4c2e220f08233ee8","size":144,"data":"","first_seen":"2024-08-19T21:00:08.518977Z","last_seen":"2026-06-18T15:34:24.618029Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/charting_library/charting_library.min.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6c693640b5bd5b7d37ef6d2d167b66b1","sha1":"53f0480f93101eb66f6e4bc3b5713ef4559815d4","sha256":"55b1479c34a0662f160d7063aa5ff2b184ddb6c2f74c219163cb2b6698814c6d","sha512":"85a53145f5c7b4a3f8b8950a9c69410ac1ea2e22f1e735b1c62c49a842d4b95889da0f35c7f36a773657a510e501c9b026fdb4164e26a6f3072fb4763bfe56b5","ssdeep":"","tlshash":"fdc08cc4a1c26e001616681155ef2ae4a0288827708c1b068c94dc483e320b0e233ed8","size":154,"data":"","first_seen":"2025-12-17T03:55:10.982276Z","last_seen":"2026-06-18T15:34:24.6597Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-06T10:00:00.108041Z","times_seen":42608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","size":4366,"data":"","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/vendor-WhAG4v2i.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d8d5a86147437584d78ebfbbe7d2467","sha1":"c5919d92a1d6d49828898515e41dfc709270c632","sha256":"2a7c2d1e3f737f10c27848bc29ef0e0fcd13af5d3e147b73ac90c37076fed714","sha512":"a7bbc34dbca608b20fa64a93dcab3e6200ab1a98db05222dd3f06ccb1171aff0a478a7906ee35ad9690ae6c880087849bee5c3448ccff562b99069f25ef88438","ssdeep":"49152:7ZuHc9Rl83FrFnPXxJER+6jduesz3eQOHbxnUqs2K2NxfIWpdDZ1AjI+g4:+qejo4","tlshash":"e1a53bb8b651b07547a720e5007f0907e739690b704f84a8f669d8ea7cbc94ad277f38","size":2244857,"data":"","first_seen":"2026-02-25T17:49:39.167759Z","last_seen":"2026-02-25T18:35:56.373265Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e83cd56a06c587f94d8b0d0abf9f3494","sha1":"887937f3f7468f670bd619fefd0391dc81cea333","sha256":"5ebab1b00ca4dc67acdf6cda20765e7a7feb7b7090828d4d7d5d345f8638d8e4","sha512":"50e757f16d8cbcb24b10a644d269431e508092f0dc28b55def5fc0670aefaf85641436a5c569d1e3b56f02406b67ba7a84355f1b447c7bacafc78c21aa385616","ssdeep":"","tlshash":"d2c08cc4a0c26e001a22692050bf24e49034446675489b038c94ed4d2e220f08237e98","size":146,"data":"","first_seen":"2023-12-02T09:04:32Z","last_seen":"2026-07-25T00:52:59.621193Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bc6bbdf2f84db8fb4f53167f95c5e1f5","sha1":"e72ba79f7cd501c3fd44c8b472e27d42663ef15f","sha256":"c0e75ed6139f1d87fa3beae291df75e57a93cf65c3548686b3a929c0e8403758","sha512":"c5020923da1f781d1b764cd56af6dc49dfdd5aebe6b15ca767605d2a9a25727c2275270a540a209dc52bb5d7800a5ebd13d90eec59a4989f1bfb72d7bcaa71a4","ssdeep":"","tlshash":"04c08cc4a0c3bd105a52682490af34e4a02c402b70886b438c94ec693e620b09233e9c","size":152,"data":"","first_seen":"2026-02-25T17:49:39.180122Z","last_seen":"2026-02-25T18:35:56.384031Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/vi-Dk3ZF86G.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72be46109a348ee9c7e5e2841ac0e4c8","sha1":"a6d327b9c398cf4c3ed1b461fd24efa198382067","sha256":"f8e5f68d9c1f998cb8e016a1f1cebd7d31010f460b9d3307b7df137de39369f7","sha512":"8cbbe3b05d1e7c9982796f59b00aed0d320fe278d15107a0a7ba7c83cf9c4b4a38517e30a7e3c37924c584072da66ee6f0bf9c422e19b3d053c3ec4d632ed533","ssdeep":"1536:R+H1PNHFNI3vikSIoCnLkod23x0y9K+MFuMg/KAuw8kIL2S2TSF1Dhoj/:QdHNI3vitIoCnF8h0yd0uMg/KY8kIyS2","tlshash":"823308451d64b40f446e563ff1dce84a2aef684ad3808e591be80afa87817733f13766","size":54594,"data":"","first_seen":"2026-02-25T17:49:39.088247Z","last_seen":"2026-02-25T18:35:56.264169Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/index-DH-MRcqw.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a8543d9ad04ac0ac18213387124bef","sha1":"668a3e0131e7691435dcefa42db58d605ab39d70","sha256":"982a01f0ebd6e6e829f75adbb43e0a506deb422a35f7a1269e9d5af6d6e7c008","sha512":"caa82496b46de64127292abbbb87660a93d7b8179550144f99fa86d27cd23175f64cb730ce03f500479271164f99098f9fd85bb4d8262787e2c3dca8a82f443a","ssdeep":"6144:NCuWYrU6FYlCAHi6XiEjWYTkVcGmEym4mqn5nq4c:NCuWWtFYsCoVcGmEym4mqn5qB","tlshash":"6da4e681f85689bdebb75455544e2401328c3fcfd00888a6f6fe9d0a279adb8735eb34","size":466992,"data":"","first_seen":"2026-02-25T17:49:39.096677Z","last_seen":"2026-02-25T18:35:56.267486Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6a8542fb4cd04732629ec4a333ec2b5c","sha1":"fc083256dd4efdae8388685f50559d0a1e64ef4f","sha256":"bc8cb348dfb4c4e67bb0ee9db29a20bf56b941778fd1e545812b1aeefbe6e904","sha512":"efb5ff39d26a217a6fdee914b8a8f45096ab8eb2783dde1311a19a0057f430bdcbb463555c815d500d45c64a0f756b055bc5fc8461127c55c1d3baf31717ebb9","ssdeep":"","tlshash":"f1c08cc4a0c26e005a02651011bf24e49034442670485b038c94e94d2e320b0a233e98","size":143,"data":"","first_seen":"2023-12-02T09:04:32Z","last_seen":"2026-07-25T00:52:59.638015Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/#/home","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a3e06276018285c43d5ad008152e94dc","sha1":"61c580b97fdb7dd6e0dded5c57a2fcd5aa72b8c6","sha256":"d55611d472313e548e5209f8ca170cd8430e29c5e5df08e8a527293ef647f7cd","sha512":"206cf127920143d40f525027b18630d29caf10bd9d2a94bb20b936ccc9197c8cc382bfaba098b2fa65867482ca3673d973e6fba4370c7dd1016730ba8e6b25b0","ssdeep":"","tlshash":"7dc08cc4a0c37d011616a49020bf74e8a02a902a74481b16cda9e9893e220b5a233e98","size":156,"data":"","first_seen":"2026-02-25T17:49:39.175605Z","last_seen":"2026-02-25T18:35:56.369742Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lmefxo.com/assets/vendor-Cx-AeqoB.css","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /assets/vendor-Cx-AeqoB.css HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-1fbb8\"\r\nexpires: Thu, 26 Feb 2026 05:54:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2459\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHCzVpA2%2FV%2FAxqpK1Qr20OOXcsABqDsX7Leeqkz9o5N2Jdf6yPpMYiV78H3B5nVzX13t5a2a8oyhB29V0%2BP1ZaoIXnOm%2Fym9CQk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d57ac469780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129976,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"37ab837dac40c2fd264d51555bfb5025","sha1":"96107ed5c3932503bb130788a6982dcc4ac201d5","sha256":"4703012c966139c03992d2e83733a8f760751439d325877df779e394334f37c6","sha512":"6973a1d02b9fecb6ec34aa5c516b37987659b4ddb079804bd197a6c8ca5bb7f86a2830364aa88e09d853fbc2b4b5eed6b742fbe4eee220c3fd6309b22033670e","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8DMYyIG1Ah5aIzU:BnNIClDsIxuVS8g8ty","tlshash":"02c3d6a5e6c491bc6f2bf2649b8766d8f23cf661dd01daa4f105505c0fc7bf50223a2a","first_seen":"2026-02-25T17:49:39.08729Z","last_seen":"2026-02-25T18:35:49.299432Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/vendor-WhAG4v2i.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /assets/vendor-WhAG4v2i.js HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-2240f9\"\r\nexpires: Thu, 26 Feb 2026 05:54:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2459\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TytwhlEVqxhj%2FMD9iMDNkBfMtjBG%2Ft0do9DcHsrEERn1GAa15ZIpDJc0TzJ6ijR%2Bk3SHRvmW6Vhxp94PXoWA2EvDLIxlpZs9zck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d58cf429780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2244857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da666d6567625f9c446abf8c73f7fbb1","sha1":"ef6cf5e3356cc9a638933e87a82a1f62368d6d79","sha256":"120135d1ab1e4bda172dde9a8d4f54f1170a0fd9bb43ff2a3ce7e2ee9d52a37d","sha512":"cdff01b4c9540f74bca443c14480ae63d02a0f1ba45ba85e3361c37634803c8a0b3c5b9132eed65994b99b762ebddaad411dff92c244eea429248684c44ccdc4","ssdeep":"24576:7ZuHc9Rl8igFrFnPzpSxyxJER+6xlduesz3e6:7ZuHc9Rl83FrFnPXxJER+6jduesz3e6","tlshash":"282509d8b651b02143a725e5007f050bf33a5909b44f85e8f669e8da7cbd84e627bf38","first_seen":"2026-02-25T17:49:39.106734Z","last_seen":"2026-02-25T18:35:56.275448Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/8e0fa33044b348358e09dc3f740bfc64.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/8e0fa33044b348358e09dc3f740bfc64.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF6AFD363331276FD8\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Fri, 07 Nov 2025 14:44:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-06T05:29:05.065942Z","times_seen":1859,"resource_available":false,"data":null}},"time_used":2750,"timings":{"blocked":2473,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/f6fe74ef42554d729c4cd3eb0d166a17.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/f6fe74ef42554d729c4cd3eb0d166a17.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1543\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F04C8B373532450380\r\nAccept-Ranges: bytes\r\nETag: \"41BECE343010E668120550D4AE2AA14B\"\r\nLast-Modified: Sun, 25 Jan 2026 20:21:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15789706783051950989\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Qb7ONDAQ5mgSBVDUriqhSw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"41bece343010e668120550d4ae2aa14b","sha1":"ac0d49f6c3bc440bff3cde62ff6344ca23038ccf","sha256":"eef747ec1f7d594f80003a21812a0d500da2c4bb6b9e141e59e94f566b55650d","sha512":"8190af78435fb561867cc63b820177842fca11a6f869b5e277e5720843c99dc0547c7e557af69d02f158237993af81a7f82783685e47f7572e67bde41645a207","ssdeep":"","tlshash":"41310a8261c2d878de59089b41308354bff5f94ba3b5817cfb718b3fe2940884679b07","first_seen":"2023-10-22T04:22:56Z","last_seen":"2026-07-17T15:42:04.812259Z","times_seen":113,"resource_available":false,"data":null}},"time_used":3094,"timings":{"blocked":2789,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=cj0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cj0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YR9LCMTQwyzHEs85nIgy7j5OqN%2F7Yp1NJsZYw0Pv6uA6eSNbE2EmYpWwuBncBau5eoOFcJRCSRujhCatI77%2B65lXA2NjNSdh8ECu2cOFY3ar\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6d09689780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"003c183012ec6ee99c028aabbd147001","sha1":"d427645e2d2a63e9593319f9434eeda4bb821dfb","sha256":"c33327ee135c59f6f7e669796be6107c491f8c70487e1647d83c35e45dcc349d","sha512":"103b0c38777a8d49e15a222275393946ddc1e1d287d445668746f049e165ad5e925780a2d0a0736cb0dca153b110a927c72c98a7f048cbd9d43bf48bde0c6eec","ssdeep":"","tlshash":"619002565c1c8b82fcc300a9950a1204012431a4266497484c595125808c1a22444858","first_seen":"2026-02-25T18:35:49.308627Z","last_seen":"2026-02-25T18:35:49.308627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":1355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getAllSetting","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:24 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bquxPEm0ByBHbGgBYLaXYEcmWP0zme56kZxBRpdDuezqW1D%2BLF4TvT7dg7fg9JpHrS53Uw1y1dSrjVrtrL5ChrAPXXD7Xm27VeJyW9EHalft\"}]}\r\ncf-ray: 9d394d64381d96bf-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":27,"dns":1,"connect":8,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=pm0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=pm0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfkDLqS7UCz%2BKDqVbQaEzyulB4lrAEZV3NIj1hzGTIMY%2FxM90OR3MVhA2IgwECobeynVaKs48b9S2FKhGxCGNisA5y3yF9KHcykZt7HtcG1r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d696ff69780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":1356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/8d1b90234fb4449db9889abc32336a8e.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/8d1b90234fb4449db9889abc32336a8e.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17675\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFAB4B8139334FF01D\r\nAccept-Ranges: bytes\r\nETag: \"2548E25D4F4FEF47E29A5A49C1644D90\"\r\nLast-Modified: Sun, 09 Nov 2025 14:26:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10665380921239879580\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: JUjiXU9P70fimlpJwWRNkA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"2548e25d4f4fef47e29a5a49c1644d90","sha1":"ab9f70665bb9222976a25f5f5588018bd9d0c9c0","sha256":"b907bda3ad94bd2675cd552aafdd16a248e803e7166d12ebfae3f0a679718344","sha512":"25d3f5a27096c9b367553000c3c16693762460e59f5c9b61200ca3d836a9fa6f9d7cdd74c920e9a23c24c47ce8fb509a9750143000fcf10e688c52c6f2c76b97","ssdeep":"96:87SNkY9WmsTRyp8FNX7sc5ZI2kOrSayXy:WSNkUeY2kRaQy","tlshash":"91824138fdf1b6b85949a2323dd224095d7307c3d681ac84b5ce4c1d6f21bae8c9fa56","first_seen":"2026-01-20T10:42:16.631699Z","last_seen":"2026-02-25T18:35:56.33099Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2233,"timings":{"blocked":1929,"dns":0,"connect":0,"send":0,"wait":299,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=zc0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=zc0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XE9CdpNO7%2BYfbqCT2Wad5zLx2bngTlTnnNR0rDr9PSRlil%2FNafG6xR3Yrfi3Shb21VuwP9vFEnTv6j6eWAJcpVRR%2FoOyrrzwlZQ%2BHK315xfX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c6fc99780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"101e25bfad8c00ab226d69d9a1cece34","sha1":"e46c3d910a4eb6608be983da87edd6bf48ad628c","sha256":"2a7c1687350d0902f12a599013b9783f864912aa1952dfc2c6bf74248345153b","sha512":"5e9b8d43da641ce7f8259cf9256aed02f08f322b536fab596394541ed9ea4f59a2629a6c9f48f191a4fae1cb28a650729baf094aa98ca7051239047eb92e13e9","ssdeep":"","tlshash":"419002555c1c8682a8c310a5950a1204043c316066649a484d595125808c1a22044969","first_seen":"2026-02-25T18:35:49.315042Z","last_seen":"2026-02-25T18:35:49.315042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmsi","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmsi HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kl67Yy%2Fj0F3NZ1n2jB4iuKrOv6ITwgUGi%2FCPSxX7P0ToigsUx8eoXJ6pOQt%2BfNEBjX8mbpqzPoOg7VJfZY7k3JcTPcRQql19ZBuNG1hbTuVK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6cd8c59780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8c115a8e7189f3fd19364f50c63c7aa3","sha1":"56d24a7908deada618557ec15587fe66549b0154","sha256":"9c278c82e8d078dd52680832511b8002a2c773a2d1d00b1dc30d5bdbecf28681","sha512":"0e857a9c815cdb9e7cf247a02e45228f5459dbd9aa7dd8b1260227509e55eab8ce491af9cdf4b0d8b611cbdb7bdb6ab7e93279205e1c8c2a1da8d67e8a3d707c","ssdeep":"","tlshash":"d39002955c1c9282a89301a5950a1644002435a1262492488c99522681881a230448d8","first_seen":"2026-02-25T18:35:49.317201Z","last_seen":"2026-02-25T18:35:49.317201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ur0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ur0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8urMbNLSqbPz9%2FaS%2BNF9%2FFY1HXiKBtqqFum932qk%2BZtqVCdlW6cOTGtnws3fiQGxt%2BtQCmj9NeLuFe4Y4QIHf%2BkhJOo2OR4L1rDNIDHdm7l6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6988549780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/resource/images/light/coin.png","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /resource/images/light/coin.png HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-52cd\"\r\nexpires: Fri, 27 Mar 2026 17:54:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2458\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9Nng%2FQxwqkMXtSCBmqCwDilHdfoY5TMV2x3IMTxVc5MjWiGwJTqVwF56XdRWfsaHldgrSa1ciedNGjnrr%2FlxC5JTse3voAGXzI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6a29de9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 90, 8-bit/color RGBA, non-interlaced","md5":"da8851658201441d3bb5d23506b65470","sha1":"9d6a57b368c87bcad6ead244ca327f721dc94eb1","sha256":"aef9802c840eee69a21f0784931c92703d91a8f155f6e91f56ba83c78219803e","sha512":"cabb34b01778d731ea051a8a586d62e074d8e52b87880b0cddcac6a9baa242904667193e8b05e9f13c122f29168a707ef819c10c768b5c57d9a9bb4590795ddc","ssdeep":"384:+hgjd9h6zWXrz667/t9z8hh9QdOfsdekCmysFplDJbkvHhhHcBIKcuuvlV/k8RM:fjvh6KXr7gM5dkOZJgBc2KcTH/kmM","tlshash":"6b92e2c6311c3dedbc05ec3d19518b5ac64f630a4813552d062defae7b162f46e6e863","first_seen":"2026-02-25T17:49:39.165724Z","last_seen":"2026-02-25T18:35:56.257286Z","times_seen":10,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/24d21231ceaa4bd1bccabd891f3233e9.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/24d21231ceaa4bd1bccabd891f3233e9.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2560\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0AB4B81393327F11D\r\nAccept-Ranges: bytes\r\nETag: \"CB84D3CA48A52E3DF1025731A8BEF4EC\"\r\nLast-Modified: Fri, 07 Nov 2025 14:46:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6590887318613304211\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y4TTykilLj3xAlcxqL707A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-06T05:29:05.061959Z","times_seen":1615,"resource_available":false,"data":null}},"time_used":2875,"timings":{"blocked":2581,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sf0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sf0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3VK3wBg531FFveaC3dmf0%2FRHhfeHL%2BShRHwS9ex6TmlfcOUSGLGG%2BvQGG3z9lH8LD%2BBOnjHFnUv7tAyNc0kau50b4lW5hMu%2FLtTNudI4c0t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c882b9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"161c1ab9368a6226abc45b5479753723","sha1":"e31c8ade6f55971c8b599c220087834791543d2c","sha256":"13dcacebc01b2e9c52a3d456c63cb582383aefff1dc53bf22675c55a8a286776","sha512":"0c29f983db854ee932037f61b3e2b492eb396b9ef154e2730da44c82238beda5b2501716c576cbf55a936d1701876105536970935654197774441f515bebddcf","ssdeep":"","tlshash":"3b9002555c1c9242a8c300a5950a1204043431a0266492488c595126808c1b22048968","first_seen":"2026-02-25T18:35:49.321766Z","last_seen":"2026-02-25T18:35:49.321766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getAllSetting","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:24 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSuI0SGLcRenFgcilVtye1ioKnJb61pukVNS3ev97Fb4LuEzKS3NhtSznJUfiskIMJ3wsamTKdqrL9QTFp4eZyABmApGZMKvsFsDAPqava%2Fs\"}]}\r\ncf-ray: 9d394d671f2496bf-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13135,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1f91bceb1e73df2ee49852f3c28789eb","sha1":"bbcb0f41a676739035c5e956073440ac047a3d08","sha256":"58337cf12962d03d487843cfdb8ae6eb1c64a14b29f181a7fdd9d381498ec15b","sha512":"4cb6d3ac0c2cef10e286dd5de1ec6fa5ee2f5478a9beb6c2aa3c81e8451886315f27e1c20b99dccd1cde1fb049926d56ec9e8020f0beb078d6af45e5f85b9d93","ssdeep":"192:c+9/HSOFgHQL9+oTzBYUMI+Rqcc2h7Ku70gwK9MSDvNL7nA73J1xeS5NfN12/NaQ:o2pZX2VTMjjzke16mi","tlshash":"bf42835a36dccc7c86e69eed90b73aea689c345be940ac06d5e76f5c959ccb20c0700d","first_seen":"2026-02-25T17:49:39.164864Z","last_seen":"2026-02-25T18:35:56.278841Z","times_seen":10,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/vi-Dk3ZF86G.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /assets/vi-Dk3ZF86G.js HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-d56a\"\r\nexpires: Thu, 26 Feb 2026 05:54:26 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2458\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbXENSprQiVk3L5KtLryWJmnaE%2FQKknWk5ah%2B2e%2BJP2tJZe0B4XxO%2FzEy62Dd5eXo%2FXGh%2BC8sZ3RfnrK5R6qfGXiVXwKfmq%2BS0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6978359780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54634,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (47457)","md5":"72be46109a348ee9c7e5e2841ac0e4c8","sha1":"a6d327b9c398cf4c3ed1b461fd24efa198382067","sha256":"f8e5f68d9c1f998cb8e016a1f1cebd7d31010f460b9d3307b7df137de39369f7","sha512":"8cbbe3b05d1e7c9982796f59b00aed0d320fe278d15107a0a7ba7c83cf9c4b4a38517e30a7e3c37924c584072da66ee6f0bf9c422e19b3d053c3ec4d632ed533","ssdeep":"1536:R+H1PNHFNI3vikSIoCnLkod23x0y9K+MFuMg/KAuw8kIL2S2TSF1Dhoj/:QdHNI3vitIoCnF8h0yd0uMg/KY8kIyS2","tlshash":"823308451d64b40f446e563ff1dce84a2aef684ad3808e591be80afa87817733f13766","first_seen":"2026-02-25T17:49:39.088247Z","last_seen":"2026-02-25T18:35:56.264169Z","times_seen":10,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/resource/fonts/NotoSans-VariableFont.ttf","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /resource/fonts/NotoSans-VariableFont.ttf HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lmefxo.com/assets/index-Cxo-H7QZ.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2044548\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\netag: \"698755ca-1f3284\"\r\naccept-ranges: bytes\r\nage: 2458\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uK5mfSPkjdqYvYelaLdH01ZI9DOx4Ie06%2F3oYIM%2FX0qH8DKk%2BEOk1f0LB2%2FZjDp8HYyFGVR8PmtALO9G%2BNfOA4EOTxn6c1r7gcw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6acb8d9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2044548,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 21 tables, 1st \"GDEF\", 46 names, Microsoft, language 0x409","md5":"2d50833a7080687818ec8356f2f835e6","sha1":"bcc7ff2a479b307c670d202dd7c036e3d78dbb93","sha256":"c16c1e57f7535b280220b6a8946763cc2586b0f9bcbd2c1bb90fda30d59a425a","sha512":"2221b1468d5dc439db90259789a183de65e74c4d02b5ce39647012af0387c35531880c45f4772b0d7680358be82d3ffdeabfbb75d84d3b69a1fb55432f5de428","ssdeep":"24576:GH7nxLLR1vk6doevguv7Q1d4fOU2FC4gAAS:GH7nN3BQ74fOUaC4gAAS","tlshash":"9a259f03e78ade89f1022f7442b343622279afe46f97474b97416937f89b3c42e515ca","first_seen":"2025-07-29T21:17:30.489341Z","last_seen":"2026-08-06T08:04:15.686084Z","times_seen":595,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cddc76df980647ee95d5e085a487c170.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cddc76df980647ee95d5e085a487c170.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1008\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0EE2400373589864F\r\nAccept-Ranges: bytes\r\nETag: \"1D8873B15CE7E65A262D1788F19912EF\"\r\nLast-Modified: Fri, 07 Nov 2025 16:46:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10605487744494310156\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HYhzsVzn5lomLReI8ZkS7w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-06T05:29:05.072331Z","times_seen":416,"resource_available":false,"data":null}},"time_used":3259,"timings":{"blocked":2951,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sm0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sm0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j67Ogc2nsy7b4TWLaxvju6yn6LxjDH0ROcl1G8JfUgVlhztQQItGVPo2kRPW1OSBmhKU9MKq2YeY9aT41MWMwjhQRBGAAjo3bYKXTfvOK5f2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c6fd39780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7b8c2c15157f032125b076e1a878823a","sha1":"88e0eb65471cea5abae8c0c0af9ef33971a49c57","sha256":"601e17f958b0203eb93e6c73e65391bad86e153abc8670318a443212720ea31b","sha512":"d946f900e5500ca18dd084466405d983e2c8c25b61c7fbd0340b6089ff416ac1b2c5e21e9327c939d1d6842cb296bc0e32ac38b46831d19d61419d1721ef733f","ssdeep":"","tlshash":"aa9002556d1c8242a8c300a5950a1205402431a06a6592484c59552680c82a22044858","first_seen":"2026-02-25T18:35:49.329653Z","last_seen":"2026-02-25T18:35:49.329653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmpi","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmpi HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jl6lchGIvmfcDgRvlbTpd2pWAM%2FBdXnqOZOpPvrZxJC9ye5s7W%2BdEa5ClvzHc%2FKriBhtgiu%2BoPbypGZH7hdftTpYl1WrDa4DjCoI%2BulAAGS4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d695fdc9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=fg0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=fg0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxU%2BZPuNiZ0KrfqYG7MtSqqaAr28CjvjPflvGINcbLMI28qDYjFMdYOD6CAuy5lPm9AxKqu7Wg3rQ5L3fa70lfRsaXDie8quud3IdTZGIQa5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6978129780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZq%2FTEnFSLeIQWRiuGHRti5%2FijGors9R%2F4yIWJe95r1VDX11WM00Ted43%2F0KSrpIxIIvF8XCjqOUUcTXDTNcIzCzbBXrHRC4psrdm5RaJ8gz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6afc179780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b65bcfa557804c9e917bbaca2be5a4e9.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b65bcfa557804c9e917bbaca2be5a4e9.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9071\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0AB4B8139337CF11D\r\nAccept-Ranges: bytes\r\nETag: \"8E58A9F8123CA37A3107CC590D8913AB\"\r\nLast-Modified: Fri, 07 Nov 2025 14:47:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11388344900872455634\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jlip+BI8o3oxB8xZDYkTqw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"8e58a9f8123ca37a3107cc590d8913ab","sha1":"0ef0062b46e2e8df6df2e5aed52bead1158508d5","sha256":"01a100a2bf7ed08f9b3415c37997440e2203a2adacde6daaeca46356ae1a72b8","sha512":"c998ba87bc80953ea916be47d5a260befad7522871fe72147540125cfd337c35b55130513e7d1ed84b0c566a84514c02c0e204ff7fda9fcca929d9636c5ab4e0","ssdeep":"192:NPEg2TyU3dXD9CP/iLevd2RZz6lFJ2S8QO8KVEtXQSSJ:5EgpO9W/1FwY2SIqNg","tlshash":"4e12bf546f389eec83daf28a57c9621683b5264d722b681d739816308c924995a3cff3","first_seen":"2026-02-25T17:49:39.109706Z","last_seen":"2026-06-25T16:56:23.781556Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3154,"timings":{"blocked":2854,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/kline","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kkdvv%2FZ13q8tpCOeLXpgpsL80aONg06uqNb8RhLyMP8HAVHhIYh2HsDJrBresw%2B%2BfyvtFYaSuRdmDnmxkR5C%2F2eUBxugzwxnXheDdPSrFutf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c2f189780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmci","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmci HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mZShkZcEta26CHGTrOcoEN2o1n%2FqP8D2xTJfhWrDmjgNELcwvL8KeWCrO%2B0ZLnIQEGNj13hz1dEGO%2BxRLfB8G1X2y175abE2Qyad6wiQm%2Be\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d695fd19780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ap0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ap0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NV5KcDniVFgLmmMpdPYh4I3pPoksN8aq7Ven61XPgvd8LEgLDv%2BH1kocy%2Fk6pC%2BxeSX5TujzNSCwYL26PFzMRPDZx4IRYkPLl3S4ax5xoQGw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d696fef9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=cj0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cj0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufok3YYQ%2B3Vq%2Fx3kCKKegM7EkCAfYOlY8IIAoi0%2FMvYUIDBI%2F8vCR6X6tceKTwOkWYoygedQAv1Ez23qhsrKWSJuCB5fxM8fynIcKWNU%2Bf%2Bl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d69884d9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/f93a70ee214f475384f2f9a08b0511c1.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/f93a70ee214f475384f2f9a08b0511c1.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5321\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0CE63A83630492D5A\r\nAccept-Ranges: bytes\r\nETag: \"E243D03F847E04A3BCAF9238D2D79587\"\r\nLast-Modified: Sun, 25 Jan 2026 20:21:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18211197115078776784\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4kPQP4R+BKO8r5I40teVhw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e243d03f847e04a3bcaf9238d2d79587","sha1":"badc33000a29d7c9677f95c4155a49609eee722b","sha256":"786590835f83f15e22d1d73a2147878b00625e91912ca04e8e0c6775c56dea4a","sha512":"798f634225925aa9e02d11634c010de038d70b0fa197ee014443ae9ef782f0a90a35b18a48ee4f417380acbc8e1c9df2ded77ddba10c0fa7d1784f28a3fbf013","ssdeep":"96:dmY//imlSbkkYlFPTQOqidjRGZRIMHp/k7uOrNiUyrcMUz:8Y/qmsIP0OqiUhHpMFrkc/z","tlshash":"c1b17d106cd0e052d9ebcf9ea6959e736072cd5a5c0ae24d3a08e3262f7f07c42e90e1","first_seen":"2025-04-01T12:16:01.548942Z","last_seen":"2026-08-02T14:27:27.500038Z","times_seen":150,"resource_available":false,"data":null}},"time_used":3010,"timings":{"blocked":2732,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmzi","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmzi HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPwMR%2BirqQMGFXMzpxrFewDQFY8%2FORPHsVmQWkggwVURKQGiIWSbZ6hwnMOyCSaSpN3kkL8UuZ9jTtfRUwXcqLIaQ5dW6vP3wza5kuCbAJzj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c3f399780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9e8eb6f796dd29c4073ddce8cdc25c35","sha1":"7f8da5345e107550b8c28d8d3d1c14e4b4a76630","sha256":"3609cb65a63751060fab452e58e7e4699c30fdfa67b902f2a08dc1049b6ed94b","sha512":"749ffeb3ff44457e115f42603d65ebda52f09cc4ecadeb4d6f36d0b93a4dc41ac1352b6e00669e1fbe4d6dd296b0b65620389d80ecd741d1c7f444bb6abbcd43","ssdeep":"","tlshash":"299002555c1ca242a8c300a9951a1608142435702664e2484c99912580881b22044958","first_seen":"2026-02-25T18:35:49.334627Z","last_seen":"2026-02-25T18:35:49.334627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/0bbc1f210efd44b7b0f397f5c9019109.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/0bbc1f210efd44b7b0f397f5c9019109.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17205\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF6AFD363331BA6ED8\r\nAccept-Ranges: bytes\r\nETag: \"9D772ADE3BC2B9287C5D763D0DC39203\"\r\nLast-Modified: Sun, 09 Nov 2025 14:28:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14248787782445785380\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nXcq3jvCuSh8XXY9DcOSAw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"9d772ade3bc2b9287c5d763d0dc39203","sha1":"1a3aaf08db74b76ddd093d9a6b504dbe53f8c3af","sha256":"91f92352178ea0f9280ce196bcbfb57427e44781d5edd1e554ef82995b44de32","sha512":"abecc403c5cbce3fb7cb27a55e4ebc20a4b6342b932abf96ddfcd1370d3d595122fc88aa60d41cfd997f90b5b2eaef40ba0d136b68dd5232ce17a16f8d65d3f8","ssdeep":"48:87/6bM+kYn9WJsEvJ72/caBC/aaLkJXzLZU9+H6+L06hlp6RX+N+Y97sc5oI7SSg:87SNkY9WmIi0pyNX7sc5ZSSD1fM1","tlshash":"05727424fdf172b85909a2323dc628055c7307c3ea81ac88b6ce4c1a6f5179ecc5f666","first_seen":"2026-01-20T10:42:16.642857Z","last_seen":"2026-02-25T18:35:56.335299Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2418,"timings":{"blocked":2131,"dns":0,"connect":0,"send":0,"wait":284,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/resource/svg/light/moren.svg?2.2.1770477070317","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /resource/svg/light/moren.svg?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2458\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u34CMLmvV5Z6285d82fmhVVCXSFi39u22WDPiWJq1IfRNHNH40XUyJJvxLLIkNx1kuGG%2B8%2BBmhaY7e4UP2zhMr%2FUSfp3LOgNi1w%3D\"}]}\r\netag: W/\"698755ca-133\"\r\ncontent-encoding: br\r\ncf-ray: 9d394d6b2c8b9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7717d623b9e9193c32f926e96c49abd","sha1":"b08948bab8fd14015ace9bda4c97e02584e3b7b2","sha256":"db1351d981f6ed6c4a52323a6ed5652c30cfde27c84695814257db98905f82cc","sha512":"60a0670f41290e6766018ecd268339a43a84672f54356006232b33239560ea377028b29b82d83574b2aee547de3567d164ac65e45403ba185a91f0822a494a76","ssdeep":"","tlshash":"9fe07db680260c1ea4090661cbf40a84807cf143c2a204edfba01473033042e1d8d275","first_seen":"2024-08-20T13:53:54.395904Z","last_seen":"2026-07-08T02:06:35.0611Z","times_seen":87,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/94ed580f27b544498ab96c384e423989.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/94ed580f27b544498ab96c384e423989.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1018\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE4C8B373532FB0180\r\nAccept-Ranges: bytes\r\nETag: \"A4B6A089F3322BB068FECD1905943929\"\r\nLast-Modified: Fri, 16 Jan 2026 16:45:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9473436175029793703\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pLagifMyK7Bo/s0ZBZQ5KQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1018), with no line terminators","md5":"a4b6a089f3322bb068fecd1905943929","sha1":"6cc2cc2e295485ee9bad6e522ccdd40cda885d94","sha256":"fa94988572861a77fee47c6e48974079596e86f2af7d14241c79a1b63363a6cd","sha512":"236875f341e277a87dd7e629bd52b6961996b2c6342ba0f11ffe581af53a833e8554375d2a5b4e5892c86259ec935f3a06cc07305cddc75ced65e6c12465896e","ssdeep":"","tlshash":"e511ab395648814c1843dd68ee3994a1a31fa4fe7bd843d0fe9dc2f1b08b5c8da07949","first_seen":"2026-02-25T17:49:39.102113Z","last_seen":"2026-02-25T18:35:56.362981Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1658,"timings":{"blocked":1357,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/be2e130da7ba47048b1eec7e38ca9d76.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/be2e130da7ba47048b1eec7e38ca9d76.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1059\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF8B9044333425D7F4\r\nAccept-Ranges: bytes\r\nETag: \"4A705FFAD5462ED7B943B410ACE32A08\"\r\nLast-Modified: Fri, 16 Jan 2026 17:07:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 894769418603664855\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SnBf+tVGLte5Q7QQrOMqCA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1059), with no line terminators","md5":"4a705ffad5462ed7b943b410ace32a08","sha1":"5464d4e8a59c1afffd0bf18af7d6e45ddacd1396","sha256":"d2d53dc25637d773ba8438a496fa5652345885026f648ed8daf684d03e12c835","sha512":"6738fa64ac41961189558410d8b2c888883eb77483371ac39ed0c1812e1ca8b4471661859db25b818cff60d21cbc08211ef4ba6adfcf3f40de1b754e964b4e7d","ssdeep":"","tlshash":"d811afa51b4d96aca043d35cdb32e0b4331f50bbb79d83b0598e8bf07443141d893920","first_seen":"2026-02-25T17:49:39.084761Z","last_seen":"2026-02-25T18:35:56.289616Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2399,"timings":{"blocked":2124,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/platform/lme/logo_144.png?2.2.1770477070317","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:23.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /platform/lme/logo_144.png?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-e2a\"\r\nexpires: Fri, 27 Mar 2026 17:54:25 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTTnwuJdgsfM4WyvVkYVkE1FhOqTk38G5%2F4z7B5N7R0ijHJUKCveeyymlpfSFTUo%2FSRUkKgW%2FmpK%2B%2FOhEALwOQQF8cZjh0WLtLg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d60dae29780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3626,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 144x144, components 3","md5":"3119cabd35b2695492dd9356a090314b","sha1":"8dd853ce848eb0b404625f7a70ce1a713f70bb9d","sha256":"a559b1f8b893f7f7d36fe8bddc9e30c6e4288a90447dba5c97cab71af41e785a","sha512":"f044e8534c55c52de884fa676e784bbdda9de501a51fbc63586e1321d34f87244cb970b2694fea2508c7fc472271ad2698fed2513ee05707f302f570c79d018a","ssdeep":"","tlshash":"47713b2673a21228f910ebb951ea3bd15716f523a88a1f9fd380304d0e49ee40b5d417","first_seen":"2026-02-25T17:49:39.107729Z","last_seen":"2026-02-25T18:35:56.337507Z","times_seen":10,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmsi","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmsi HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDnJLubU7bD0XweZjRgjOUYkNrrogVWpMBRzbR13dh3By%2BHd3JhYDBVaWJZJqdh43L4vfH47sPNpD5J0IiB%2BgWa2wZfLmacPjTNJvcAYIeG1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d693f839780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=zc0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=zc0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBm7EqIPfQqhul67e0log2DGvG5pM8IpWIDmsalyKYPmKye%2FudDiwPzxS4KidnhAzi3AYFEMlDPF6w39n6OdArLBO%2FuQnt7AceKoPjebY1Ef\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d69986f9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/ac794eaf094846b297031e9884204508.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/ac794eaf094846b297031e9884204508.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 908\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE8B90443334BED5F4\r\nAccept-Ranges: bytes\r\nETag: \"92412250874344FABCFA16BAA39E1650\"\r\nLast-Modified: Thu, 05 Feb 2026 01:56:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7105937748141017433\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kkEiUIdDRPq8+ha6o54WUA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (908), with no line terminators","md5":"92412250874344fabcfa16baa39e1650","sha1":"8074901d45204e38aab6a9b5baf3d40718d67ca5","sha256":"2e7d7fb86d4e85c02385cf16848ebef892059199bda7291fe3368897028fece6","sha512":"ac01703244a50a983b8d0de7201fa833e7ffb5b031f047c6c8014616d0f2483c07278607b58f0acb31a6f2f1e4e78558729d42e670f048ea817d95131dafd391","ssdeep":"","tlshash":"2f119ce7e7c894989519cfc49d1268dd276d29d97de082cbd3344f34a314b6dea80d38","first_seen":"2024-11-05T04:41:28.398116Z","last_seen":"2026-08-06T05:29:05.038445Z","times_seen":105,"resource_available":false,"data":null}},"time_used":1519,"timings":{"blocked":694,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":551},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ap0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ap0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0F5HyGQ1yMRfwjCc6ildf4xcuft571KmuaAo9IXhAnt0%2F3epGhaOc%2FvEJYwHQGnGObwvdQDFIag8GO70xPtI9dVff%2B6r1qu%2B0K0J2wa3WzD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c5f889780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c1ac4946dc5d1e1d042d4ba830bff057","sha1":"0299af1fe218115e255e48b987948f9e467ab47b","sha256":"f650e35402705619749e8faa768875b780d10d7d1a8e2380427ad62213c1e246","sha512":"bd16cc4caf04e5cf08c4cf7ab817f27a4fb2d8c96b997ba02de5350e7cd4fb08a35961a85f075dbb0c060f9c1401b435bed230a535f40fc4454e42bfaed56789","ssdeep":"","tlshash":"ac9002555c5c8656a8c300a5950b12080024716026b492485c5b5125808c1a23444c58","first_seen":"2026-02-25T18:35:49.352799Z","last_seen":"2026-02-25T18:35:49.352799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/charting_library/charting_library.min.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-2a6a\"\r\nexpires: Thu, 26 Feb 2026 05:54:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2459\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqN2mQwdyonAI2T4RXODReCafe7YnTsbiEBM%2BKjKm5vQsbeB20A0WzyQBmxWmOdDVcVb8qFiY8i0a7dHKHGwYccNXmQDfHv0Rv8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d579c3b9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/ac-chat.js?2.2.1770477070317","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /ac-chat.js?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-907\"\r\nexpires: Thu, 26 Feb 2026 05:54:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2459\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfBWctjJvHjuWM2EHSbmXDW1WshN8QfgfNYz3D82KPo6faCVeB3Bi%2BoPK%2FsfeAWcRhmcgSgM7P1MZQePu%2BTpvjr1FoF%2F6eAne3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d57ac599780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-07-30T19:44:59.564915Z","times_seen":144,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=rs0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=rs0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ApOJQYonxRQy3WVgbDxLSLWdN1OWzea%2FQUb8hy0WpNHbjc0%2Bmt4DbM5jAP1HANEJf6SEF7%2FcCd75%2B1YNXSkEkibsr5nl%2B3XPqpzmVfg%2ByGM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6978299780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WkSugixNBE1hVXLWbU6yOdXDSGFBrTXuyxXRjwWxztTCjSOS7djVvWF5IEPJnYZLnzvt5%2FQ0rStw5jt4rZfE2OMI1Wlbs7dSCMSoFGeqpSxs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6a8ae59780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0a7b5941897360e15ef8d55152244084","sha1":"930ac3ddc566a91ed8459587b829458a31d4e48a","sha256":"affe280930bbeca9a3bbb9080403faccba68f91211c93de3aa9e9b276605b255","sha512":"045be7a134f831d2c30df3e599c87acc600d40ebe5044fe080196fe395906eda3435a38cd5441fd1f15f03e0bc249979e5b3ee55bb56e76e2744d98a0d3418e7","ssdeep":"","tlshash":"c69002552c188242ac8300a69546120411253175262492484c69513585c85662040c58","first_seen":"2026-02-25T18:35:49.360887Z","last_seen":"2026-02-25T18:35:49.360887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lr0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lr0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEtROLdu24KWZ0JBXjFk4vseBoQ3XUyefiEarnUx1%2FdQMGouuZLJvyqKImorOheC8GWLW%2BsCE3fBX0uS2Cr4pHJt2tANTwT9%2BoKMDco1wiA3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c5faf9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"968a07ca766b7ef3d376c0abe03f737c","sha1":"5ce6c69012cee675d3a2fb40d1dcd193774c98d0","sha256":"b0549c83a1dd380663108a122771ffb2d2c645437dd5487bce6bc5ca7b4ff3b7","sha512":"a21ce27677f89cedfad31ecd488360c2145059ecd5015216671f0ea99beb1a974b3b054af85cdd150b765b25d5eb97e7061208266eb5330b2a615a95aa55db85","ssdeep":"","tlshash":"b39002555c1c9246a8c300a5950a1a0404243160266493484c99522580d81b22048958","first_seen":"2026-02-25T18:35:49.364645Z","last_seen":"2026-02-25T18:35:49.364645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=pf0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=pf0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=se%2B1OswU8RnTmeI9sQfRBiePSrVz4lSnUjnnA7cQmd6pHCs49VmsMTJZP20AKpwDxyCc3sWuJbjCpLNFG1INFRY5Ox3BnBuNdpQB7bJ0jxgd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c6fd59780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6f6aa95c4f5bd02b7a3f7488ef29b2b6","sha1":"f42fa8dc2796c2ef23538fe71ded4a03c7d765f2","sha256":"b1adc3671322165f5c58276d0c60047ee75d35ae67330491bdb32772aed7a450","sha512":"79d4c426c04281d8a6b79f5ec5bde57d130bd039cc899f224eb8a3c3905e46566aabee9b1a04925e5fa500fc18db20564c97a935f63693d7854eeda6ee653902","ssdeep":"","tlshash":"279002555c1c8242b8c300a9950b220900243560266892494c599125808c1e22044868","first_seen":"2026-02-25T18:35:49.366474Z","last_seen":"2026-02-25T18:35:49.366474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sf0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sf0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6%2Bpb%2BGl0nd77k8HHLCgD0D5TfBTxnIMzK5OUFLKTL57%2F1qIGAqnfYF1D%2FnSfwQwbbmM5iIpED0OAGn0xAuykCjzdslJVJlPFDTVQ%2FFNI5cP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6978329780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b0a8d51c37ca49b186d87be0b4f9fb01.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b0a8d51c37ca49b186d87be0b4f9fb01.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 818\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF8B9044333468D7F4\r\nAccept-Ranges: bytes\r\nETag: \"1E9415B10C8C41A2950503BD9319037E\"\r\nLast-Modified: Fri, 16 Jan 2026 16:47:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2676412128320598560\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HpQVsQyMQaKVBQO9kxkDfg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":818,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (818), with no line terminators","md5":"1e9415b10c8c41a2950503bd9319037e","sha1":"a7082164c0fe7d6069009146a94e54f44882e127","sha256":"14fad1947ecd7c79f0443e1f4ffb29911ad828bc10aa8f5bd4a6eeb389656858","sha512":"3a573ca870c5d56954925880f76170779d1535503112cae40283e45a89ad080c5926940a540592a849dd4d2561dc12aa97c35e8707dd882064f7ad17aed9c18c","ssdeep":"","tlshash":"e901ce6c9336194c50838df0da6452e257ceb08af29002f8a79cf570f246bbef603938","first_seen":"2026-02-25T17:49:39.081426Z","last_seen":"2026-02-25T18:35:56.303033Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2655,"timings":{"blocked":2380,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmpi","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmpi HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhrsY35%2FTNwkOuWSN%2B2sZ09U7ZoXM%2Fen4hbu6QkWnT20cbrHyzLS4OYUWVbFsC4ReBjqlHaMDRGUwrFFXBy8ZkpQ%2Fa1ZeX8j6gUIRnoGH7YF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c5f909780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c5cf08b67cee548b1b9032b9e60bacf","sha1":"f9dbd9492b5cfedace5454857d5bed132c11fa78","sha256":"78d879a87c04a77619268176c00ee8d3b3b465ef06ce56a7ace895149c8c4df4","sha512":"6a67deb686af7ce6514e9e80df2b4ec5ea5f34c6dd4d56df2e39b8a02ee43c46e1732eca994cf8eeb1f30744321bdc1f5ea9a95ce3a4e5830e19e73a918c322f","ssdeep":"","tlshash":"2d9002555d1c8282b8c700a5960a220800353560666592485c59612680d81a22048858","first_seen":"2026-02-25T18:35:49.368515Z","last_seen":"2026-02-25T18:35:49.368515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmni","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmni HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HwuqATuy%2BCOW2Kg%2F9tyi49VyczV7W2UTx1zvTRuNYdtnyJ%2B%2BWOu0g4hrkkr5N0%2BpyFEUMkk%2Bb7H%2FMnQW3ocrVFr%2FzhW1sX6Fw36XWbHENPPw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6cd8ee9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"48fc8366a2ea92e3cb48bf045f2365de","sha1":"db6cff5bcde759a56ad9074ec7561342e6ff252e","sha256":"18f1ad0a7bc665e0b72239342f47a4c6adaa0c2d658e8c5404bbc5de42511819","sha512":"cae757c8d9185b3d1c74dff740944d6f8108485906fac9d71dc0a738169a761474ce231f6be30f0ded57f4a4204413e861c72d9ce0f96ba4f5988cfe298d0bd6","ssdeep":"","tlshash":"d99002559c1c9242a88344a5950a1614102431602a2492484c595125d1881a2204489c","first_seen":"2026-02-25T18:35:49.369629Z","last_seen":"2026-02-25T18:35:49.369629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/index-DH-MRcqw.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /assets/index-DH-MRcqw.js HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-72030\"\r\nexpires: Thu, 26 Feb 2026 05:54:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2459\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PMo4O28MoFywVfv4o%2B5On2QEBxcWP7F80ZITqgJLRvUgWGdx4js0YHnxLXQiOYGzNvPTp142sFB0gY8PmI2iPQviKhMFCAy6Wo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d579c419780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64497)","md5":"32a8543d9ad04ac0ac18213387124bef","sha1":"668a3e0131e7691435dcefa42db58d605ab39d70","sha256":"982a01f0ebd6e6e829f75adbb43e0a506deb422a35f7a1269e9d5af6d6e7c008","sha512":"caa82496b46de64127292abbbb87660a93d7b8179550144f99fa86d27cd23175f64cb730ce03f500479271164f99098f9fd85bb4d8262787e2c3dca8a82f443a","ssdeep":"6144:NCuWYrU6FYlCAHi6XiEjWYTkVcGmEym4mqn5nq4c:NCuWWtFYsCoVcGmEym4mqn5qB","tlshash":"6da4e681f85689bdebb75455544e2401328c3fcfd00888a6f6fe9d0a279adb8735eb34","first_seen":"2026-02-25T17:49:39.096677Z","last_seen":"2026-02-25T18:35:56.267486Z","times_seen":10,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/71bb1145379746bbb85d5d97b19d1365.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/71bb1145379746bbb85d5d97b19d1365.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 902\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE6AFD363331BD6DD8\r\nAccept-Ranges: bytes\r\nETag: \"FC5B38F55A02A58D5160671AA2DA6EB9\"\r\nLast-Modified: Thu, 05 Feb 2026 01:56:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1190865812862352741\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /Fs49VoCpY1RYGcaotpuuQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":902,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (902), with no line terminators","md5":"fc5b38f55a02a58d5160671aa2da6eb9","sha1":"7c88c58a8d4d4f5ca21705f33daa303fd12b8498","sha256":"a107de36cd8aac17c3ebb213e8affcd36f489347618d62c267776c350b59a1d2","sha512":"aaa12bb59760f19dc2ddfde6ee6a3556b53219bb218320a3c060a0678ea770729fc5d780ad778321a166bc272ffd6070d214861b01faab5a0a2d56d3248668f4","ssdeep":"","tlshash":"3e1100e7d3d8944c9615cfd42e1125ed336a14eebc6081cbc3250e30a710e6dee40d39","first_seen":"2025-08-03T18:12:41.874125Z","last_seen":"2026-08-06T05:29:05.053709Z","times_seen":68,"resource_available":false,"data":null}},"time_used":1513,"timings":{"blocked":689,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":549},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/9c73b0a5e0f5482ba93ff82a64753593.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/9c73b0a5e0f5482ba93ff82a64753593.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 254\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EEAB4B8139334AEF1D\r\nAccept-Ranges: bytes\r\nETag: \"FF658B4688DFB0BD799F8B6D44E8BAA5\"\r\nLast-Modified: Fri, 16 Jan 2026 16:50:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17519022467822145737\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /2WLRojfsL15n4ttROi6pQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"ff658b4688dfb0bd799f8b6d44e8baa5","sha1":"6dce350b82ec29656b48a1e3c917a5ab075a40ec","sha256":"f15d37cadc7788f1f5f23bfe767f71eea619e84e989f5a93deae90bd0d13e3f7","sha512":"6728bb6033832ebeb0fb0c7e43f849f731aa3686bb5d5d3b5eec3496a4ba270aeb0991013abb06ba6c71d62780575a33fd70515fbc85778eb4bcbc337cdce2f1","ssdeep":"","tlshash":"f9d02b98e73965085501936077a4b0a591de108152580de9f08092243b0a5ea5c6059e","first_seen":"2026-02-25T17:49:39.092857Z","last_seen":"2026-02-25T18:35:56.361697Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2040,"timings":{"blocked":858,"dns":7,"connect":290,"send":0,"wait":291,"receive":0,"ssl":591},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/7cbb6d29d9224fe69a025ca9c0372cbf.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/7cbb6d29d9224fe69a025ca9c0372cbf.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 290\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF4C8B373532730280\r\nAccept-Ranges: bytes\r\nETag: \"8480A8D1C3CAF6A37F7B68B4284855CD\"\r\nLast-Modified: Fri, 16 Jan 2026 16:45:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5412729922435457759\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hICo0cPK9qN/e2i0KEhVzQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"8480a8d1c3caf6a37f7b68b4284855cd","sha1":"3b34b2785d3184061c81cdc7b56fd30474b0d6b1","sha256":"46f74374f08962e2aed679583b2b8387712732062f9c25dd497b383f98e82f00","sha512":"2e695545772eae4a9a7b79c47d3f8c035038a79c24ebfdd0da1ffca3dabbf6527908862540d36209decbc1a87a52254431675809f1f769f10aa7e0f2a878fbd3","ssdeep":"","tlshash":"b9d0c2a462edec08c6008568016f3586200a60d663c553abb0b0782a320c6eb3d3017c","first_seen":"2026-02-25T17:49:39.093801Z","last_seen":"2026-02-25T18:35:56.315926Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2247,"timings":{"blocked":1947,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/81ea8efc053c447b897e347056969ef5.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/81ea8efc053c447b897e347056969ef5.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 385\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFEE240037357C854F\r\nAccept-Ranges: bytes\r\nETag: \"3481D50A0CB83C3DF3FB8FB9C47B3373\"\r\nLast-Modified: Fri, 16 Jan 2026 16:36:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11695750882785809015\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: NIHVCgy4PD3z+4+5xHszcw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (385), with no line terminators","md5":"3481d50a0cb83c3df3fb8fb9c47b3373","sha1":"82bd3ba93916c538bcf0e9c5f0a105ba08888fbb","sha256":"9169d94b99a06089f09ba0c50d08fe76ab38fd743db5da82a20431b847e97b79","sha512":"f1dd771436b054a5d92f5e9bfb99d13359f311e10d1288345c840445e6d23080a56021053ad9921cbbbe9d9e551db2657c074472d9ffd062863b8dbdb82c7a17","ssdeep":"","tlshash":"91e06888b54c8858880c46145b9f1191c03db29b8e200fdfb24a48287bf11db385963a","first_seen":"2026-02-25T17:49:39.122397Z","last_seen":"2026-02-25T18:35:56.296163Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2402,"timings":{"blocked":2095,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=cy0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cy0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sizksteFU8nNs9AU%2BpaQ3H3WvLCfawW%2Fdu3n351TijnNMv2B2TA8pEEdROi7t3tDs%2BMr8gG9THwNbnrQdQYZRiHKwY%2BNVCoWhknPvPvgm2Jk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c6fcc9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eedc2c55b7b7ade187c8e45d35e33920","sha1":"d7aea9ff25a83e797ed271ded28a9b0ac9d02deb","sha256":"54829c1acc9b626f64b59fb6194f0a127fbcc687abc7790332027a79cb1cc6ff","sha512":"8ca1a3c01bc97a61255601a057ae6edfd8d83119c75660800d37fd9550c93030369e022d6d86a040cd6691b04f59f2c31db15a763ff85351843c3b32fd4d162a","ssdeep":"","tlshash":"6f9002555c2c9282a8c300b5950a1204043531606664a2484d59512580881b2204495c","first_seen":"2026-02-25T18:35:49.373737Z","last_seen":"2026-02-25T18:35:49.373737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=rm0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=rm0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Od6eXCzy9DHGrbzChCViBb371pwgqBh0vbkYympxlF%2B%2Fm6qRetTrxjUUvKx7HvrEImN97iPh71iorYLd9xaA21oa7MyEuMl%2Fu3P2qMuvx3I5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6978159780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/9ae65135794f4d489c45317496dd4d02.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/9ae65135794f4d489c45317496dd4d02.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 324\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFCE63A83630BB2C5A\r\nAccept-Ranges: bytes\r\nETag: \"661A50E895102AE166BE5679F674E7CF\"\r\nLast-Modified: Fri, 16 Jan 2026 16:40:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16860383506203607183\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZhpQ6JUQKuFmvlZ59nTnzw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (324), with no line terminators","md5":"661a50e895102ae166be5679f674e7cf","sha1":"857619be6e85e2ec976824510e29aa251ee949f5","sha256":"21660c6c6788cfb6d92c22bb741210b42242647dac1610d3d69930a3034e823a","sha512":"45f96727b9e87b66b9ef775c01aa7e764b084bb74f7856774cfbddeefa534c6c5944fa316f005bbfbd404cb973652ea802ecb024b0bba1e60f23f335d5a0a9cb","ssdeep":"","tlshash":"a9e0cd69af4c179c440742502ead9043639fb56ff16c05f5f4cc557431475aadc2759c","first_seen":"2026-02-25T17:49:39.139221Z","last_seen":"2026-02-25T18:35:56.353605Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2498,"timings":{"blocked":2221,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/27e5a59c855948e39cea04f8fb8aeb0d.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/27e5a59c855948e39cea04f8fb8aeb0d.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 510\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF4C8B373532BB0280\r\nAccept-Ranges: bytes\r\nETag: \"9AB5FC019E2670EFCE1C5A0209EE62AC\"\r\nLast-Modified: Fri, 16 Jan 2026 17:02:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13766208026901616558\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mrX8AZ4mcO/OHFoCCe5irA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (510), with no line terminators","md5":"9ab5fc019e2670efce1c5a0209ee62ac","sha1":"148347046a2de81439961002f9b287193eb7cb55","sha256":"d4ea2bb42b6e9b8a69ddcf6525bc79e736f39ff82bf0d07aa7ce9595dccffafd","sha512":"be5a0ef64c4bce2e9466390dd420a264aeca1e831057be264c0d3f5e4408d7e0c1c5bdade5de5f4d3e1f8c7b34ee338cfc045cf3c49d2029b89fe98fc129e7a7","ssdeep":"","tlshash":"5af09eb9b369059c640647608b391161271fb86dbbc327e857cac6323016ad4ec9596c","first_seen":"2026-02-25T17:49:39.123336Z","last_seen":"2026-02-25T18:35:56.328022Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2529,"timings":{"blocked":2229,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6ca34087a8034918ae896e85e9b8ba0b.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6ca34087a8034918ae896e85e9b8ba0b.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 957\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F04C8B373532070380\r\nAccept-Ranges: bytes\r\nETag: \"DB1F13E46508474023E51DAC9B924272\"\r\nLast-Modified: Fri, 07 Nov 2025 14:45:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2775687442448118922\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2x8T5GUIR0Aj5R2sm5JCcg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-02T14:27:27.421151Z","times_seen":558,"resource_available":false,"data":null}},"time_used":2816,"timings":{"blocked":2516,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xpd","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SITY%2Fac9DM%2FITuq3soRdElvPKobuLG8OSkQxiQm38lhHykOh6APWN8VZVDr3h8pcwcPHbeICz4kAPiyLxVQ%2B4o3EaEb3u8TdZD4kUVbWnNnt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6cb8969780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7fedbe1972f370d43ca43c8ed756dc6e","sha1":"861f1eb457c284d4f557699fb869c5986489c659","sha256":"f12284c8f7858c2812d6ce9f2d39d5c0e18b45a82725797d5743ef434616c752","sha512":"ea12b48248415995ad4e5a7864b5ae64d865adc2be4cd813af13d614ac0ee39f893658bf4bda8ce25e771c26391564c9d152c97a5497aae2809b9a2239bad0c8","ssdeep":"","tlshash":"a69002551d1c8242a88305ad95171244042431606635d2484c595225c088162204089c","first_seen":"2026-02-25T18:35:49.383432Z","last_seen":"2026-02-25T18:35:49.383432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/1f1bc3370bcb43829d02d2afd2397758.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/1f1bc3370bcb43829d02d2afd2397758.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EEEE2400373563844F\r\nAccept-Ranges: bytes\r\nETag: \"0EF8F167397F98160A27C02225A39ACA\"\r\nLast-Modified: Fri, 16 Jan 2026 19:04:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16571003241623756943\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DvjxZzl/mBYKJ8AiJaOayg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"0ef8f167397f98160a27c02225a39aca","sha1":"6676490ace72849336abde6ee90e9c18c7da9454","sha256":"efc09c3085141447fd2c4d62970a0461ddd798c086a34c9fcbc41f4a7dd33c22","sha512":"8534d2d64a2e42a9fc06f689270062a26ad4811c9f4d8ca9ecc49f620088720dedb8f9e3992dd37d17124e1b2b5ae93a4fa3d39af145a562b926cb3f3ba721a9","ssdeep":"","tlshash":"84f0a7a4371c18fc8b0ec2541ef77a5502b5f048b5b515f4e16ce09c3506657dc92e54","first_seen":"2025-08-03T18:12:41.8321Z","last_seen":"2026-02-25T18:35:56.310462Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1488,"timings":{"blocked":1182,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b1953361ff424850b618b620ca55a6b0.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b1953361ff424850b618b620ca55a6b0.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 324\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF6AFD363331916ED8\r\nAccept-Ranges: bytes\r\nETag: \"67333DF7B2BD42AD8B8A241E2E9C039E\"\r\nLast-Modified: Fri, 16 Jan 2026 16:51:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8605808415853478241\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZzM997K9Qq2LiiQeLpwDng==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (324), with no line terminators","md5":"67333df7b2bd42ad8b8a241e2e9c039e","sha1":"b7fd3422d08dafa8430bffafb4dd77e1e5e8ad94","sha256":"e3adc1208a6d832e0873255de6544182ef121c293fb44969e0a761f1e538a079","sha512":"9f67f18648b579a82a0be3632dfdfd7f9f90efda7ec401697c0fad0c92fa40c124c96da794f5829026b633b2da752c9545e92e81a919c60ea776b4a695fedd94","ssdeep":"","tlshash":"a6e0cd69af5c179c440342a01dad9043639fb55ff16c01f5f4cd557431475aadc2759c","first_seen":"2026-02-25T17:49:39.140676Z","last_seen":"2026-02-25T18:35:56.280495Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1943,"timings":{"blocked":1669,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/d5429c166fce4fd7870df2a1a2dd2eab.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/d5429c166fce4fd7870df2a1a2dd2eab.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1125\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFEE24003735CE854F\r\nAccept-Ranges: bytes\r\nETag: \"75F196B437F9D87FDC198BC904C66C4C\"\r\nLast-Modified: Fri, 07 Nov 2025 14:43:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10138601249240458443\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dfGWtDf52H/cGYvJBMZsTA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-06T05:29:05.070506Z","times_seen":1841,"resource_available":false,"data":null}},"time_used":2685,"timings":{"blocked":2378,"dns":0,"connect":0,"send":0,"wait":306,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sa0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sa0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgpKVBQuSfuQCJFW2dMo%2FWtzi30EtC0NyiYmThSxQ3ZiE1Erbd4bMNsoa7uvsVeRGt0WaKAUtCpI78QYMVGr8xNXvSvY7Zmu60Bh1fnXWSE2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d69885f9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/1831377bc0e04eec9432cc4b954c3596.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/1831377bc0e04eec9432cc4b954c3596.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE8B904433341FD6F4\r\nAccept-Ranges: bytes\r\nETag: \"AD8ADE7DD755E59EF5FAD615893CA841\"\r\nLast-Modified: Fri, 16 Jan 2026 16:42:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13652504368633705886\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rYrefddV5Z71+tYViTyoQQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"ad8ade7dd755e59ef5fad615893ca841","sha1":"76e37b9092b56a12440f1859a715ddc4634cdf5d","sha256":"4e66e04e0af0259b6bf18a028ce57b6727517b428f3b1d81c173bfe61fd09033","sha512":"29ddf0b5ceeeb2a5004a0f143cf40655e9dd506e11d81f83c121aad18edd47ad65935a8b7dbb15d46f65f3c773620d5b8b023ec894ad40315bf8fa5f3c9e6fe7","ssdeep":"","tlshash":"ecf0a7a4371c18fc8b0ec2541ef77b5102b5b099b5b516f4e16ce09c3506657dc91a54","first_seen":"2025-08-03T18:12:41.856937Z","last_seen":"2026-02-25T18:35:56.276342Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1315,"timings":{"blocked":1041,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/a8091092a71d43279abdda0624930f5a.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/a8091092a71d43279abdda0624930f5a.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE4C8B373532B90180\r\nAccept-Ranges: bytes\r\nETag: \"E7BFCC03CA74DD729B6B1583C443C4DC\"\r\nLast-Modified: Fri, 16 Jan 2026 16:43:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15456837065409324319\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 57/MA8p03XKbaxWDxEPE3A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"e7bfcc03ca74dd729b6b1583c443c4dc","sha1":"2290d24588653e8f85c00aeac749e5ddb6692c65","sha256":"3ef166265dd930a0d7d42ee5cf3f18c6fd981b608e148961f2dd39a9d3af735c","sha512":"9c5f8691fc6a203f453b07c20adac1861807f0ee5ad9563b3ef254d496bf08b3358924b06e95b4d3d0fba5b9c896bbbf5b50c7cdfdcccc89418b34b120215947","ssdeep":"","tlshash":"93f0a7a4371c18fc8b4ec2541ef77a5102b5f048b5b515f4e1ace09c3607657dca1a54","first_seen":"2025-08-03T18:12:41.87171Z","last_seen":"2026-02-25T18:35:56.279678Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1373,"timings":{"blocked":1072,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cb53c0e578764c12a07556a3e64ce5fd.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cb53c0e578764c12a07556a3e64ce5fd.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 290\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF4C8B373532370280\r\nAccept-Ranges: bytes\r\nETag: \"8480A8D1C3CAF6A37F7B68B4284855CD\"\r\nLast-Modified: Fri, 16 Jan 2026 16:50:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5412729922435457759\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hICo0cPK9qN/e2i0KEhVzQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"8480a8d1c3caf6a37f7b68b4284855cd","sha1":"3b34b2785d3184061c81cdc7b56fd30474b0d6b1","sha256":"46f74374f08962e2aed679583b2b8387712732062f9c25dd497b383f98e82f00","sha512":"2e695545772eae4a9a7b79c47d3f8c035038a79c24ebfdd0da1ffca3dabbf6527908862540d36209decbc1a87a52254431675809f1f769f10aa7e0f2a878fbd3","ssdeep":"","tlshash":"b9d0c2a462edec08c6008568016f3586200a60d663c553abb0b0782a320c6eb3d3017c","first_seen":"2026-02-25T17:49:39.093801Z","last_seen":"2026-02-25T18:35:56.315926Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1950,"timings":{"blocked":1650,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=pf0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=pf0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPlCfPIGwqMOBw47lU3AJ6bLj5koHK0rUwXVSo7nd1DmRotUMsWQYzBXYKoSsZaU%2Fizomio1obOM%2FZm3inoHKFgQwxgpK2XrLnTnBrEQCptm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d69886a9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHIi0F0dOtnq9cesdtmUkLAvrECOJuljHgoe6oGTTnX%2B9V5kYeFYelwuyfvF3vJJW6BPD9ri%2F%2BprcFU1Kv4OXJrSzKheYoKV6%2BDZToxrdn10\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6a9b149780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8bd1988513a80f8644396a4497f43ac3","sha1":"98122380e32080dcf8dad370d61989bc49695ba9","sha256":"c15132ec214edcb3a2d889e6c7d3330ca37cce21392bb94ad6a636a100c5b189","sha512":"a1bad06d5b484bdba34ae4de2729ec3cc7c84b3439f170d6a50e01e3456e14da4c33b36506510b03611c48b4a155ce2260fc2089a0edf4a27b8f0d8e3df89bf8","ssdeep":"","tlshash":"439002551c188242a89300b99606160410253264262493494c59512584881622040858","first_seen":"2026-02-25T18:35:49.390654Z","last_seen":"2026-02-25T18:35:49.390654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/kline","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3WbtZLpUeleAFHyHAlikwhk8Ysdm8z26KSzN5H3S6ZgiCi1plqDxdSkqzVSNpnF6uKnjGH1Zry4qzD2vj2wutwbj2k7hYBzgq2Vpecs9m37\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c2f259780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ur0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ur0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNDAi9n2MgAkrrdD1ShI4Fq61FNFIAcQYm9s%2FFfZX98pgLZie4X5NRWhoMo8q0PfYmdRi8z3EJz%2FkoxuzRLMBON9Z2KOAoOCxca0pHsRoqTT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c7ff89780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6b8573d95e9a95f53fcf37099267018d","sha1":"32a0630addff0deceaf485631220895cb95e42ac","sha256":"77c212813db1f9a03d343f4470d6618e8d0bcd64a18577c765d6e49d9e8c083d","sha512":"ca1abf1e3011cd30200dbff98c497d2d9a0d5fe52a42c78aac8fb53b835c5c43424eb3d3d072ca7b0ecb1a1e0ea1182f8813bda550b6078d4b9ed6d0167837e5","ssdeep":"","tlshash":"019002559c1c9242a8c300a5950a1608003435602a6492484c59512584c81a23058958","first_seen":"2026-02-25T18:35:49.392334Z","last_seen":"2026-02-25T18:35:49.392334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 10:00:44 GMT","end":"Fri, 24 Apr 2026 10:59:07 GMT"},"fingerprint":{"sha1":"A7:D7:98:60:01:FB:A2:7D:68:92:7C:66:27:0F:6E:9F:EF:58:EE:0D","sha256":"30:5B:B5:CD:C6:1D:DC:50:AB:B2:5C:F7:80:BB:2E:B0:F2:8C:5D:36:95:24:63:FC:BF:96:EE:7B:E0:58:33:CC"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Jan 2026 15:40:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=naEG%2F1FUSOQrI9pG%2BtnkdvVcq3dTn5w85S%2BrhJmh7HyHirl21Am1MtkFJwsf2wOlT9OH%2FpKKORGlz%2BL4Uu1nMmlSkk9KKErOns1%2Fxdaw\"}]}\r\nage: 2897\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"695bdb5c-110e\"\r\ncontent-encoding: br\r\ncf-ray: 9d394d57e87b5abe-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0db8503abd38d9093dd8b0d6260ed6f9","sha1":"f97691cc6f2bf51a7b44242d7859df45b54c512c","sha256":"083c5ad69adc1beb2502f734ec85183c818ad015a10dd1b9a11a0cb1cb8cb02a","sha512":"f6c266e7b742bd635ce9824a286f5de4f6c0f6aa76fbdcf8ca6328f7c9ab92c70d01d29e9eaf45b3ee6445cae409aa9048a3b92e9b935bb67c91628c312de572","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3muyFDM3ii7M/+0rf2n:bLMujzYpL5EOhT0529KPCDaVAHD8","tlshash":"0b91635a312374160575337e5bd7834df725a0f331418689babcc2526ff9075c622fa8","first_seen":"2026-01-24T18:29:18.938282Z","last_seen":"2026-02-25T18:42:10.659304Z","times_seen":30,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":28,"dns":0,"connect":8,"send":0,"wait":15,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sr0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sr0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0O3jaqpN2xe%2FxcMhbncqQtRMpEX1Se5UMYC6RQ%2FD4cZzGCQAtsDps2MOuAxNIt9vVJKnJlqePUa132oMPbaGadKeCe5UjUrQkPrcVS3y%2BBvX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d69780a9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":1353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/vendor-WhAG4v2i.js","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:23.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /assets/vendor-WhAG4v2i.js HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-2240f9\"\r\nexpires: Thu, 26 Feb 2026 05:54:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2460\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUdtQGInN%2B1lh3d5nq%2F%2B%2FGbyy34ax190k5JN4QwvfSVScgEdXhxuWmAph2GrcmSGk6yHk4amkiBuhYJSQJXKeiXFuL4VUgnahng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d62efe79780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2244857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da666d6567625f9c446abf8c73f7fbb1","sha1":"ef6cf5e3356cc9a638933e87a82a1f62368d6d79","sha256":"120135d1ab1e4bda172dde9a8d4f54f1170a0fd9bb43ff2a3ce7e2ee9d52a37d","sha512":"cdff01b4c9540f74bca443c14480ae63d02a0f1ba45ba85e3361c37634803c8a0b3c5b9132eed65994b99b762ebddaad411dff92c244eea429248684c44ccdc4","ssdeep":"24576:7ZuHc9Rl8igFrFnPzpSxyxJER+6xlduesz3e6:7ZuHc9Rl83FrFnPXxJER+6jduesz3e6","tlshash":"282509d8b651b02143a725e5007f050bf33a5909b44f85e8f669e8da7cbd84e627bf38","first_seen":"2026-02-25T17:49:39.106734Z","last_seen":"2026-02-25T18:35:56.275448Z","times_seen":10,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/assets/index-Cxo-H7QZ.css","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /assets/index-Cxo-H7QZ.css HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:11:10 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6987560e-8cdeb\"\r\nexpires: Thu, 26 Feb 2026 05:54:22 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2459\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQdBz2AlML6SKRa1JcI9x7fckL4Hcu04plEm8aXuVajhsTWbP0E2MaAlKrdlzNP7uOZoHh4dvHQ1XeQZtYwIAKp2GtWoyHrGTas%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d57ac569780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577003,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"9297964b7fbcb3926b701b3cca1d27e8","sha1":"3da852cdb10b1d6ab496fd3d91b99f7062758b97","sha256":"86817309b1988b0cc46246e0a35bb22e4a48dbab53e4a5522f699cfdd8508093","sha512":"c984b1f2a79d545d85904cb124e6f171240926b50368127d53790b9c53ffc2526be2d0fa05870d421929c7ea957db1035924840d1710052dd92a9e7a46246bbe","ssdeep":"12288:+v1s9dZ8w71ZACkFDS3vyf58rBeV05TOeJz3sT2otK+/YL1V:+v1s9dZ8w71ZACkFDS3vyf58rBeV05Tr","tlshash":"a6c4e869b194113d6e37d5a96bc89acce12cfe62cc025ee4f243151a0ec7bf7236161b","first_seen":"2026-02-25T17:49:39.164042Z","last_seen":"2026-02-25T18:35:56.35422Z","times_seen":10,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xpd","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrgbYDGXCaY%2Fzf0VhZqTUsp8tCnI3bgBpD2jHRRFe16w2uSZ0U6w94M8M7swOD2p%2FZL0UDQjIqUPb5XlyMCw7I7cB1MqOU8XvVFzSc9zp7JS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d691f419780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=cf0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cf0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2Fyz3UJRvFDeteTTHLopC9hT897eE50C6hBRIQO2XMy1ZUTye1ieTi88yHgmQMU4kw6gF0IHCxmUNVLwayYJM0W5UF4bZfaeVLB15fn%2FKQ8k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d696fea9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e5c9542d189e43ffb0a554025a4ad7d0.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e5c9542d189e43ffb0a554025a4ad7d0.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18506\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF8B90443334E5D6F4\r\nAccept-Ranges: bytes\r\nETag: \"E1053A6EE51F2F01AE88306CA133AD35\"\r\nLast-Modified: Sun, 09 Nov 2025 14:27:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7675376803137166977\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4QU6buUfLwGuiDBsoTOtNQ==\r\nx-oss-server-time: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":18506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"e1053a6ee51f2f01ae88306ca133ad35","sha1":"0dfac94969c5daa0d6c64c4be3f10cf530471871","sha256":"bf0381609467fa88d195a0cf3cf3472351ecd1e79a39a2538926ac1cbc9b7865","sha512":"b99f7a27128c16c447a13e8fd6462912303ca3c5cd35ad52b8e9b826739fc688943a4d0390eae26f726160b8b61258d48f3fc0a1d15b7904efabe04bca2df8a5","ssdeep":"96:87SNkY9WmQMEqpTtNX7sc5Z5+dBVLDhoaacGrZ4jeYwzMx0:WSNkUJpUVDKaRGrZuebze0","tlshash":"b982e938fdf1b3a8595962363dd728085d770783e6c19c847ace8c1a1f11bae8c5f562","first_seen":"2026-01-20T10:42:16.634383Z","last_seen":"2026-02-25T18:35:56.366106Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2323,"timings":{"blocked":2024,"dns":0,"connect":0,"send":0,"wait":295,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/548b945222c6446185cce05589a2e523.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/548b945222c6446185cce05589a2e523.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 480\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EEEE2400373510844F\r\nAccept-Ranges: bytes\r\nETag: \"4634B9121E81DE18DAE239CF02D70AD5\"\r\nLast-Modified: Fri, 16 Jan 2026 16:42:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16244569326861285624\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RjS5Eh6B3hja4jnPAtcK1Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (480), with no line terminators","md5":"4634b9121e81de18dae239cf02d70ad5","sha1":"88f2fb9fde15e092f1cdb5847707251146095af6","sha256":"f3c7db8d7d7e971895455c497b0d25cdd65fc423c34720054eea9dc014678d83","sha512":"d31152e70401065eb44e49f881121644ed897ed84972fa42c4d5d891b37f035cbe5b3f9c80cd471b035c3408977e4106ca839385440858674acf87ebedfc19d3","ssdeep":"","tlshash":"e7f0a7a4371c18fc8b0ec2541efb7a5101b5f058b9b516f4e16ce09c3506a57dc92e54","first_seen":"2026-02-25T17:49:39.162187Z","last_seen":"2026-02-25T18:35:56.27447Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2120,"timings":{"blocked":890,"dns":7,"connect":306,"send":0,"wait":306,"receive":0,"ssl":609},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6097f11c7d1e45bfb4c44fa0d25d8479.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6097f11c7d1e45bfb4c44fa0d25d8479.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1315\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F06AFD3633316B6FD8\r\nAccept-Ranges: bytes\r\nETag: \"79CBCBDFCC32E9ED14054FB9F306D76B\"\r\nLast-Modified: Fri, 07 Nov 2025 14:47:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11892337470558382493\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ecvL38wy6e0UBU+58wbXaw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-08-02T14:27:27.373207Z","times_seen":1107,"resource_available":false,"data":null}},"time_used":3000,"timings":{"blocked":2725,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sa0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sa0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ojxGFPPZ5TnjBH%2Fs83GFVQocFxYHcT1EbSSieic77H8nOPzUW%2FnEdJX4u%2B9%2B%2FCvvJpETbgWqUpnN7ycLp0AeqL5beSp1SAdujUYgg54oZVB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c4f809780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"16669759621b4483a828cc28267b68d1","sha1":"e212f668799147093427cb8f19e4f9d4e68b5c40","sha256":"bb310ac323f07686982c049eb36e4ea93cac5e624bf7537abd11649a24995b73","sha512":"f1686721dab331b6d9658fbcaa536ecc082fdeb5d6d9c37fc24e8bbc337d5ba1b8b1151ac9387760877741dd9e7a91c34ee8c447730f1dad51bc2b980687634d","ssdeep":"","tlshash":"5c9002555c5c9242a8d300b5950a52060534316567a492484c59512580881b22054958","first_seen":"2026-02-25T18:35:49.39771Z","last_seen":"2026-02-25T18:35:49.39771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WbDSsXgldqJqMeepajS%2B1bZaeRgWNKOWGFuPJ4beF%2Fgic9k0rAVdNSaNp2YGL7bJXHMbBbQv9GjVR%2FGMwVNf7FXZ1128yPPsE5geAR0TOgO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d691f1f9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=oi0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=oi0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:27 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCP6wrhEk6Mne4BpQTxzb%2F8ej2F%2FWVzL007w29GdM1j1PXKDkqCPA164b4wODTj%2By4vc6muZQazMmP%2BT7dxY4GfwJU6t1NzXhB%2B3icKyLwAx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6998769780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":2163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6cd4653fb57646028aa52a0fba097508.jpeg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6cd4653fb57646028aa52a0fba097508.jpeg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17120\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFEE2400373513854F\r\nAccept-Ranges: bytes\r\nETag: \"2C2535777E59C74BC9F0BBA3C492CF4C\"\r\nLast-Modified: Sun, 09 Nov 2025 14:27:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6180990207094404053\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: LCU1d35Zx0vJ8LujxJLPTA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"2c2535777e59c74bc9f0bba3c492cf4c","sha1":"2a103120647dfc9efdb276ad7d298bc1fa056cb1","sha256":"ec46f5222bf6d570bcccd374c19d290d8e50a65ba979ca74211f5bcc5a0d7092","sha512":"9edacc26b1bb97e6eb860d07d650f2563972aad2eb978ed1828a168abf1e170f1ec2c5493ce99b9ad48dabb11e165de5bf188ca2abf4f8f6e6c239c0b851a605","ssdeep":"96:87SNkY9WmU7n32pGn+NX7sc5ZO0DDJcCCmL2:WSNkUanVn+e0DFG","tlshash":"f8727638fef1b6b8594962362dc628095d7307c3e5c19c88b6ce4c1e6f21b9e8c5f652","first_seen":"2026-01-20T10:42:16.625731Z","last_seen":"2026-02-25T18:35:56.282418Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2292,"timings":{"blocked":1970,"dns":0,"connect":0,"send":0,"wait":319,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b46f94384ab645e587b0be4e0c59908a.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b46f94384ab645e587b0be4e0c59908a.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 999\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFCE63A83630382C5A\r\nAccept-Ranges: bytes\r\nETag: \"29C3D280A043856EF6AA3DF0BFA25850\"\r\nLast-Modified: Fri, 16 Jan 2026 16:52:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1987206561325582990\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KcPSgKBDhW72qj3wv6JYUA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":999,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (999), with no line terminators","md5":"29c3d280a043856ef6aa3df0bfa25850","sha1":"025b4885bd801e038861fc4a2c70ef7b52d4a4d9","sha256":"211df889f62b99c180f0cd4a41241353b0c505dbb4cfa1cdcae9572ce600bece","sha512":"f0d1892e6a63871d5ec537bfb422faa8bfd12617eb47a37f05e46e0df03bf6db03f6d2d59498566bfb1b69cd2e22940e67e09f5b392d29920bf31dd2401580a8","ssdeep":"","tlshash":"8111ef2ba3c8445c0483c9b5df706171230ef0bcf6c943e9598d45b0700b89be493526","first_seen":"2026-02-25T17:49:39.133375Z","last_seen":"2026-02-25T18:35:56.30218Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1959,"timings":{"blocked":1681,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/44f263b10302403fb00fb62c9c592316.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/44f263b10302403fb00fb62c9c592316.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 286\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF6AFD363331F76ED8\r\nAccept-Ranges: bytes\r\nETag: \"6C902374540EAE7254E4E90D931E564B\"\r\nLast-Modified: Fri, 16 Jan 2026 16:40:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13457823232266648472\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bJAjdFQOrnJU5OkNkx5WSw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":286,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"6c902374540eae7254e4e90d931e564b","sha1":"b4de4918c72c67df321a40c9bfe833ba9b94259c","sha256":"56262e613b0cd1087c797afdc383f4b97878ebaa3f70a61a414dda4c7d4fa857","sha512":"925a79e6a31321d203465ad2dff6e1d9693fa2b97788c7b975cee2a042fa71ec32cc1b454efb469fd5858375c7ce55cd85a8b7ecc712091c185589543c081b8e","ssdeep":"","tlshash":"58d0c2fea3cc38bd9102c3a019542341071ff0bd736001aebc8d91747203186dc139e4","first_seen":"2026-02-25T17:49:39.114794Z","last_seen":"2026-02-25T18:35:56.270125Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2492,"timings":{"blocked":2217,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/f22f1f1f551343429c9e1f1df91fe846.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/f22f1f1f551343429c9e1f1df91fe846.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 646\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFAB4B813933EDF01D\r\nAccept-Ranges: bytes\r\nETag: \"F4FD162F795BA4C4D26CB64B4FBB6DBF\"\r\nLast-Modified: Fri, 16 Jan 2026 16:48:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14951756217423420894\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 9P0WL3lbpMTSbLZLT7ttvw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (646), with no line terminators","md5":"f4fd162f795ba4c4d26cb64b4fbb6dbf","sha1":"e2a68eb2ae420362e1c95350b368efbb25dd99d1","sha256":"48ddcfcca88ada05896c8535ad39d3bdfcb7aaa511900d09dc84eb6fbf2689f2","sha512":"f531989f5ea69f0647557eab2d59bc9a31b897de5f4f792a4550fcbf922ef65140b2cbd21892ea54c47a5ac936f06f490b3c935739277bc3ad66d4f0984a0bd0","ssdeep":"","tlshash":"ecf02de7ea2cac3dd15ec2acbe248196b46b30a7e2a187a4d2dc5f1d3004aca1800640","first_seen":"2026-02-25T17:49:39.116269Z","last_seen":"2026-02-25T18:35:56.309513Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2598,"timings":{"blocked":2305,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/kline","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mw5o39xNyX7CC5LzxK%2BHH7fYOqmR%2BMiodr2OPonciiNP9DQ7%2BHjJeTwlFmDa%2BhVVLVJOWs4W%2FZ7Tg4jLNExsY4VVj%2Bl9I4VbKLqfboJlzRDA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c2f1a9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/resource/fonts/Arial.ttf","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:22.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lmefxo.com/assets/index-Cxo-H7QZ.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\netag: \"698755ca-ff9e4\"\r\naccept-ranges: bytes\r\nage: 2459\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7DhHgijfWg7uStK1JW1wn%2Firo8Pzl4HTeIFZfH1oVtZE%2F6MWlnXz%2BsE0%2BCvb12BWX%2BREKDbiGuV%2FlgxG6VnrNXythCEmOMDrwg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d589e879780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/platform/lme/favicon.ico?2.2.1770477070317","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:23.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /platform/lme/favicon.ico?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:23 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2457\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrR9XSruGspCJH%2BFBObABMxO%2BvI9Lb1l6MN1ifnZlQiMQqJa7SPVqh%2BAZX5742n4zReIFTcoiy48C%2FrsalelQztKtXK43MTD7Wc%3D\"}]}\r\netag: W/\"698755ca-14f7e\"\r\ncontent-encoding: br\r\ncf-ray: 9d394d60dae99780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85886,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -112x-112, 32 bits/pixel","md5":"7ee69394515da578e906067252e93732","sha1":"e6e2efde4e8cdc00f9d306c0b0bac19be026de87","sha256":"83f086aaf96b7042d33adf57c2bd2c49ffd0bac247dc6639bcd8a9f048cd8ce9","sha512":"7ff8b409d0035420bc9b568be1a36a37abf2e4f2ba108389ef6617dabae892d9e03ab70d533a22deae90649365d214562f10e0ed1d993e86bbe0543e4a6aebae","ssdeep":"1536:qAjjjUbcaSccQbNiVn4dD6CTNKfMMMMShEzJI60aQaLkiTbz4YdQtAezTIIIIIdj:qAjjjUbca9bNiVnIXoqamCTrdQtAezUj","tlshash":"6c83d19d7934c58bfb694bbd78d8c17c692d12362c360219a768c3e41eb1f5eec89720","first_seen":"2026-02-25T17:49:39.082581Z","last_seen":"2026-02-25T18:35:56.268389Z","times_seen":10,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/resource/svg/light/service.svg?2.2.1770477070317","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /resource/svg/light/service.svg?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-5ffd\"\r\ncontent-encoding: gzip\r\nage: 2458\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5J05HJSaa66b%2FaWoE6y3v%2FunCAoTjFKBQB3QK9xeD4sA5TJmdhEvPVp42NKs96jqMfChcD5fvAC%2BDxCRSB1FiTj%2BQ%2FMzXMSKzw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6a09ad9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cd853da828b851603870f0d3cf3ef38","sha1":"5c63345180e5903af285a33e5a0d3f7ca605fdee","sha256":"069f5d494dba6b80bedc0bcf5835d68ef020b10472c776f185a496a57f3980cc","sha512":"772c4a20c2384bdec4c1ffe4381ab0247e73b68e75f3fa02e0469945257b4a01cd7d717336c660b7e7a6b55c01a18d0dda1dab2f2f3eda820221490ebe58118c","ssdeep":"384:b8ChglOiH6GKAgYJ37JddRo0vmNdvGHiQSq:9hEG5NYJ3lddSxN4iQ7","tlshash":"4bb2393083946663f150cd1c2216be63426670ff7effaa44df8a5a32346af814f9c659","first_seen":"2026-02-24T15:49:18.905144Z","last_seen":"2026-03-02T23:08:53.805331Z","times_seen":22,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/24f4f5a6b585424c9c39fce72a50a5a5.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/24f4f5a6b585424c9c39fce72a50a5a5.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 998\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE8B904433345ED6F4\r\nAccept-Ranges: bytes\r\nETag: \"FD3C59A8B9593835E263E09C98D5FEE5\"\r\nLast-Modified: Fri, 16 Jan 2026 16:41:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13001567079907275664\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /TxZqLlZODXiY+CcmNX+5Q==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":998,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (998), with no line terminators","md5":"fd3c59a8b9593835e263e09c98d5fee5","sha1":"aafce721591e8fcdefd68a2162149a5d512a55bd","sha256":"23ee496c5d13d6548ac59375c4709bd46004826b76cbedea1438242ef6632e25","sha512":"51377000d8fbbcc35600c903ea2d4e0c627e89532daefd8a9fc642e310ebec4ffd8a5beb30bf9b8143a55e26733283e600dfc68ab0512df8efedf2a3274d4d97","ssdeep":"","tlshash":"341102d6674c76ccea45c01c5f8b3596110b30defbba438aa0598519f1923cbbc1c850","first_seen":"2025-11-12T03:40:09.535703Z","last_seen":"2026-02-25T18:35:56.362335Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1573,"timings":{"blocked":1299,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/71f1eccbd0e440c58ae0e9cb452674c3.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/71f1eccbd0e440c58ae0e9cb452674c3.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 658\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EF8B90443334ABD6F4\r\nAccept-Ranges: bytes\r\nETag: \"F056C3E752DFAD493636C51D584791D3\"\r\nLast-Modified: Fri, 16 Jan 2026 16:49:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9596945098777891148\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8FbD51LfrUk2NsUdWEeR0w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (658), with no line terminators","md5":"f056c3e752dfad493636c51d584791d3","sha1":"084398950e74677413e40199a6365c8aa19e9197","sha256":"87ea9ed20103970782731b2f32d2399034159128e5694d6d21c4de0f36b2d573","sha512":"3a6b0afb49f67380504ee4da63d0b42943c34449436df3a9395a0ca13ec795557bf559cc87c74b14a2246c5f1f46b7c3bbbf2cc6250691ac031fff7a44d63b81","ssdeep":"","tlshash":"290149fbbe5c628c140b89a89a04f4a3035e697976c1d370699cc5f065433cadc43a44","first_seen":"2026-02-25T17:49:39.104679Z","last_seen":"2026-02-25T18:35:56.311288Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1837,"timings":{"blocked":1563,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/kline","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 67\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUYWjUFh3r9fKQEAYeNolRdjpT%2B5fQ%2FXBqMbT2rBp%2FbT%2FrBKCKsIrc5iQ06BcOt0NlTnCI7EsYCbzxfGe4IjJUXZjI4hqWlykmGIcREdXhCf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6d9ac19780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82536,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"91721345e995878278885c2445760367","sha1":"eb78b5482d4f828ced6de57165e8bbb82d043d4e","sha256":"0fbca88c1b988f45ab01e8b29ea6033ca3a1ce2d67dcf203a951867d8fd76983","sha512":"debd6629ed8248499f0296279cbbe3cc930c0facec0d46b232dcf83b839eb8054e02629832ebbdefc1b6e033facc74805e20ae1df17630cee589cb95bc8ac24c","ssdeep":"1536:usWY2R8Ox7g5xEsi2O8HU5HjGBLfQ1WetGjak6ARCV2WsFoV4G64d18Gy:usWY2R8Ox05xEsi2O8HU5HjWL40etGj7","tlshash":"258363fd0b5aa234d4326cc72fc7bcd0c62673c25defacd141aa28082e54766a6553e7","first_seen":"2026-02-25T18:35:49.405104Z","last_seen":"2026-02-25T18:35:49.405104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKHnIQWHW%2FtSQh5sAywua643LX6yIssOzSRUtFH48JMMrxDhQrVsBAwgo838H9NiZXdB%2B08%2Fw22X82U6Hyt7PASOujI%2BBcqFq3NGupg%2FpOIh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d690f079780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sm0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=sm0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6J99LryRiyTCt1jHWccRcc%2FatjKjhv4NvdjesljY0ON8SqiurQ97fhIWuEwHYJ2oQkYtEhiZGtu8zJdE%2B%2B7LMY8emz6oKHMI1nuHBFvWNF1f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d69883d9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/4bec3271ee9640f194e7d2266bf807d8.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/4bec3271ee9640f194e7d2266bf807d8.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 487\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE6AFD363331236ED8\r\nAccept-Ranges: bytes\r\nETag: \"A051CD811F50E0C11FAAE41A6D13AB90\"\r\nLast-Modified: Fri, 16 Jan 2026 16:43:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14518300890900350056\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: oFHNgR9Q4MEfquQabROrkA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (487), with no line terminators","md5":"a051cd811f50e0c11faae41a6d13ab90","sha1":"d3f12ee72c835fa42d3bc5c7d564a5e4d1fe2759","sha256":"26fb535c1a8d8b1d078d82b659d55057a64c21f21d408d693fc37533b7fd9a2d","sha512":"c25adabc8a9eccb110982ae02ff8d22e844209d878e6455b04c3b128ae0b7db3131f198543772463bbee6f956ab2cce5868a4d5b93ceff14b4b7510dab1955cf","ssdeep":"","tlshash":"39f027b0731c08ec5b1ec2941ffb2b1102b9f088bab801b0e5ace0593106a77ec52e54","first_seen":"2025-08-03T18:12:41.841292Z","last_seen":"2026-02-25T18:35:56.332464Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1416,"timings":{"blocked":1142,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/37d0708d7a95435085253a35dc8144cc.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/37d0708d7a95435085253a35dc8144cc.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 378\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EEEE24003735C0844F\r\nAccept-Ranges: bytes\r\nETag: \"AAAF9CF5B8BC3D6B55A9380129835F2A\"\r\nLast-Modified: Fri, 16 Jan 2026 16:47:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4564059271997170715\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: qq+c9bi8PWtVqTgBKYNfKg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (378), with no line terminators","md5":"aaaf9cf5b8bc3d6b55a9380129835f2a","sha1":"c7e3e898dec6b03b62751e0e2f5dddabbab22c47","sha256":"f2bc508c36914576cd48101f78146f3b5e37c0ca1eeadbe0c314bcea301d9bda","sha512":"512bcddc45378ea94b76d58b013ab0013145712228c5b1faf62c2110257ec3de94ad3b40012408f7c23903aacb9801e63441d26fd87663410e9aee6f9dd1c6d0","ssdeep":"","tlshash":"efe0c0ddbb2c67cce00177403f58b062004b30a7b16d08d5e3c4603e32c22a6ac0edb8","first_seen":"2025-11-12T03:40:09.402461Z","last_seen":"2026-02-25T18:35:56.351186Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1784,"timings":{"blocked":1477,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ma0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ma0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFnsQO5%2FwuFsarZEbxTVCp6PsabUfvNv7baNTbl8epRhq%2Bou7fktHm0Qk0FFUbVbG7SxseJgPAXvVKuzDiA8X6IjVPMifIOiczd8dZIfCVfj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6cc8af9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"78af149238df0bc5f35fff41b7787671","sha1":"52bb962e487bcec2298482733a1f3c6eb9173a0f","sha256":"b43c17b26d93990dc0e213a56e148d41cf5c93c626bfcfca476aa5cce1d4e1f9","sha512":"7ab7332b49b06a569fa37fc3d43652001430156858e5933fbfca8f1a633d726ff807422fc0e67aad83ea823b163a1d8f218a435a6f05d429d2e47f3cb3f6e157","ssdeep":"","tlshash":"e59002555c5c8242a8c320a5d50a1204013531a02675d2484c59512594881a32044858","first_seen":"2026-02-25T18:35:49.414037Z","last_seen":"2026-02-25T18:35:49.414037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=oi0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:27.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=oi0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhBq82jM4A17s5nT8W9whKu6nWppmlDwonMhBWNpFns%2BozkQfGDra8Iszf8Fc%2FNhHn0fFcJx1M2dmbNa7PQZkReCurY7Yx41%2BaIcGueUSNo7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d7719009780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5aef3e5d1e592c59a394e09f85007a57","sha1":"15d8ad484ad36f709a38fb18ef6361bd6e4577d6","sha256":"328f49d4d4d9bed452445f049dbd2c5e9aa753381ce48a0b2c43e174edccd803","sha512":"a807b667948edde769268ce2a4824e29d177e78a178b15fc2d0c651e67b1637855a739d54a10bdc800ddb4df6babb89f47552ec2765f5b90caae516c1a72546a","ssdeep":"","tlshash":"dd90025b5c1c8242fcc701a5d50a120400643174666492884d59512580981a22044858","first_seen":"2026-02-25T18:35:49.416005Z","last_seen":"2026-02-25T18:35:49.416005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/type/defi_activity_type","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTa1VZK8NpYJT%2Froz8vsKTsNBCmjaMhhgkyjD6FsJ97zpZ3hBgiBP9dHZMtPfXox5ItaJrCSk8HUcPGfhreAlWJRcBQEKg00ZXtYoxijmhmX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6dfb9d9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-28T19:32:04.761168Z","times_seen":800,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=pm0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:26.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=pm0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyaxbLtVBarKvFzf9kPEJRRnBOrWcW%2BaEb2i4rXMlBxSIVKSICF%2B9kQM8XVkcCv3g0DAN2GQSH%2Fry%2FbdV6vsQ4ZimcN898MMn5X1enOMXFSL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d71fcc89780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f3fecb88a588efcc1e761ab8d2537972","sha1":"0eeff2a01ca88662e4d545fbe95322898eed5db1","sha256":"670dc461ac6fb49cc37b33a4be274e48f5986a131976b8d38d83390ca20d0eda","sha512":"3dcb98d760d06ec0d7b29e50de64f109e08e0e740d6be720879fd72f28915716a7e21eae4b58fd09e00e447144807fd0924cd59df511d6fd043a36143c8f80c5","ssdeep":"","tlshash":"7d9002555c1cc242b8c300a5a50a2208002431602664a2484c59513581881a22044868","first_seen":"2026-02-25T18:35:49.418855Z","last_seen":"2026-02-25T18:35:49.418855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.lmefxo.com/ws/dce71d87-7464-48bb-8610-7cf7c63ae0f7","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /ws/dce71d87-7464-48bb-8610-7cf7c63ae0f7 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://lmefxo.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TgIeuqZA266n4C98X7ucnA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Wed, 25 Feb 2026 18:35:24 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://lmefxo.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 4ZgMMPuxyAWkTMahVMtJChXcurM=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vefcXI3ord6iDUjMBOxiEu%2FHImvQmcOPR3SodY4hYvdI04mPnbo4ZqVBr0HTwjq52i1MSwCMF99tc9OiMw%2BSTRxXubrsXe734U1sIvN6PhWwmaJgJEyPdCeclo4X5pI%2BPeD9ug%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d394d640f125fc4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7523\u0026min_rtt=7492\u0026rtt_var=1630\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3104\u0026recv_bytes=1192\u0026delivery_rate=571578\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=5fb1bf31433310d5\u0026ts=469\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":0,"dns":52,"connect":59,"send":0,"wait":453,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=fg0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=fg0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGrY%2F4JY6PW59sMrXKpVeZIT%2BMZL1FUgNOuw3pBU%2BeqmawtQR83AFArQAE3oL9bcxBdkkEDLbtSS1drl6MSuqMEd%2BdsojZ9xaZrb1PUdnyun\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c88119780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"21452f94535c19b2509d46974233992b","sha1":"3bec245668bd2e50c7846d49aec316bcc9a00f0b","sha256":"4fb1e618ea09bd219d5c5182cbbcf752ba2504486817e2616150ebed9498600f","sha512":"0fd148a012f97bd24de17a1c7d9c87a1a9355f105b855ce4ef41b7cb0b49e1a553899429513e92f755e7fd24edb6b07089d386f6ca733eea3d0dc96e7fa73616","ssdeep":"","tlshash":"379002555c1cd642ac8300b5960a165400243170262493488c59512581881e23044898","first_seen":"2026-02-25T18:35:49.420676Z","last_seen":"2026-02-25T18:35:49.420676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xap","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8IqFL2qzRyGlAqO2fqp4TlfAj%2FZZLBgEvjQN5FQr5OCsp%2Ff5UHsd3WSfBkl2L3b0OK9JDbMhoH1jAvIenKW57upogtJaet5FGzHLqk2q90XU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6cb8899780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"56c3dd9ab0fb1462b0322dfdecb985c3","sha1":"9a7c7646cac3e439cf3a690979fab203f3f90e68","sha256":"1da549cca20ea0716784407db60de7bdc3acab50972862f7c9f2565505e11bee","sha512":"a34846fa0dca3db36834897a4e9a957a855e28f3de7f8991b0a689477f0c20525d0fd857142926b4123aa9a63ee301e734ccc9663cf7c923d40ff6eb9bb803d5","ssdeep":"","tlshash":"c29002551c588242bc8300b59546124410253575262492484c69563585c85662040858","first_seen":"2026-02-25T18:35:49.423133Z","last_seen":"2026-02-25T18:35:49.423133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/kline","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 67\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xap\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PcZqR9E3urNtQg7GQDgGDTzkKVMw9%2BRQpbONIsUhIm0Sj7VhFWHwn5WMiMM4WuUHVzf9%2BWXHLnwJKVSuepU0wr29B8pjj1SlIzoJ5RWt1bHj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6daaf49780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82040,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"ea7c4a3b57eecf9823fe0b08f3bb3b72","sha1":"f6015078dcb305629cdc4babbc0c8b05cce534c0","sha256":"0bb5f8359cf0aa7b7282877398a238ab43629f307420fe25c4956b55a5483290","sha512":"8eda21e8ae91c0b31b49339c03825243b430d679587405013fc2095e1081334791494bb010e08790b4c6798fd3cbbe6e8d5938ea3445f1ce77cf4445741fd3f6","ssdeep":"1536:5EJzLZ+VCbwS+bkODzvELTlbnBNwGykQnk6Y:CVXe8LTlbnB7F6Y","tlshash":"72832b76cad6e48996318ec23bc3bfe20d2573d349fd8c1250ae0458568077ae94e7b7","first_seen":"2026-02-25T18:35:49.426616Z","last_seen":"2026-02-25T18:35:49.426616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":846,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/type/defi_activity_type","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDeARwkaFwSNREDPRyqSCFnTLK9TgDfjWdSA2Dknh00BgyXP9j4gZyzBWudx8C5qse2lkqSx8qOZTiu%2FZSeg3f4ItZsG67vw5Ri%2FufFVIu%2Bf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6afc189780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/c62a2440a5ae40aebf1e5d0e4a0193f3.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/c62a2440a5ae40aebf1e5d0e4a0193f3.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 905\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE4C8B3735326C0180\r\nAccept-Ranges: bytes\r\nETag: \"3CE67B0DFE0D4913E6A4B8BB76996BF8\"\r\nLast-Modified: Thu, 05 Feb 2026 01:57:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7395246166708416432\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: POZ7Df4NSRPmpLi7dplr+A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (905), with no line terminators","md5":"3ce67b0dfe0d4913e6a4b8bb76996bf8","sha1":"672efc93a23e7b38cbac90291c547584cfbaf118","sha256":"d3188bc91dd4dde40afbbf746908470c61a13c9482142ba82a4137a1d4768d17","sha512":"819c59160d9433695426559747902c526887de37c6e187115887b56c5909a4951fed0d68923ad2224d64442aa9897a94824a4c6245b466602faa1655b8ab5594","ssdeep":"","tlshash":"81119cebe3c8549885058f849c1228de275e54ed7da0c2cee3794e34e315a6def00d39","first_seen":"2024-12-14T19:28:33.186102Z","last_seen":"2026-02-25T18:35:56.315106Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1651,"timings":{"blocked":750,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":601},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/ef9431da51ee45929dce72038fd1cef0.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/ef9431da51ee45929dce72038fd1cef0.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 953\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0CE63A83630052D5A\r\nAccept-Ranges: bytes\r\nETag: \"92F9D15BE55070C0F267E7B9609211DA\"\r\nLast-Modified: Sun, 25 Jan 2026 18:53:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12504633752802818255\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kvnRW+VQcMDyZ+e5YJIR2g==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-02T14:27:27.479533Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":2758,"timings":{"blocked":2480,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ta0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=ta0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=En%2B64jGYcq2YJ3CqY84hlsPC%2FBuQn%2FY1FGBDt3BLUDMDXpWfJTpFrIUHtQ%2Fbr2ouRfE%2FVkGYcH69IIvPlrCaNbtf00hMN6PG7kmq8OgIYyCr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6d09809780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cb594d038a1df9f0cfd040e6b0b95eca","sha1":"dfd7d55d8f2acf78ac1e7526edf8c3181451f873","sha256":"0d4ceac4b41ed70a07c990ebb2c1a3c7275e044b825456d9980fe30d58c1ad63","sha512":"c20900398e6bb470535a6e37dbbf03685f8d4f4833e90fb746655a0faa05787d72f6bd0e96dca81856ca93dfb62efba405dbddf99d61b0c38a54bbc6bac5ed6b","ssdeep":"","tlshash":"9b9002555c1cc242a8c300a5950b221c012431a0266492484c59512980a82a23048858","first_seen":"2026-02-25T18:35:49.432302Z","last_seen":"2026-02-25T18:35:49.432302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/platform/lme/config.js?1772044524133","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /platform/lme/config.js?1772044524133 HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 26 Feb 2026 06:35:24 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BWo5stQDyS5qLpzaMS4hV7fv%2Fr%2BX6%2FDT7j71c4QI4ZtrcjtRsmebdiITTwjDtGie7ZNVmlECo2egNLPU%2FxzmZjXFm22Ejebaqk%3D\"}]}\r\netag: W/\"698755ca-c6\"\r\ncontent-encoding: br\r\ncf-ray: 9d394d63ea589780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"bc5e42a85bae365fe474fdab373b29ef","sha1":"6d0d8d64011c9b0be7706e9ee55340f89b3b4f5c","sha256":"cf3c3d44f757832cb09fd29e22f204052399d862f2dd7c42471b4c08778c0cb6","sha512":"a80efd9fd9bc3e4516cfc289b4c8b027c4616dbc1ded6d4324381e915f60692ea0bf0d340a945bacafd7a50e8892eba50d386b93b97cf550144ce891add15b18","ssdeep":"","tlshash":"4bd048ea26b597093d31662a9acc5e32f8428337c95d421fbcbc6c002fb380415a8e31","first_seen":"2025-01-27T00:39:09.394406Z","last_seen":"2026-03-29T04:39:26.611157Z","times_seen":20,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=xap","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYIAxw6GbolTxOte%2B0XaXLUzj%2BIXH%2FHbYAAm5y0Pd%2Bc3dIlSRhwhLLUKXJEIDo0R4Hkk1UixwEHcZzrVh3NfOp%2FIIApy9kMi5jXGrKwFJMXt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d691f329780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=rm0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=rm0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYgd%2B3%2BMpEocLUNUpuAWuJfQGBWTRvW1%2FbRXyhU3SpCEv4MvZpRKlpZeZ1QgSSUTFbkrAUI15cWmH3rB7YmIp%2BNbv3MfLK7GmohuGWpFNdkb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c78019780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e5bbc278664b8e7239ecfd73fbc28f0","sha1":"3c796581408daf9df77ead07e00ba7cbd109a736","sha256":"d697b146b717d9e34bbc14946a55a656039ec9baae35bed60a6894699fb14d7f","sha512":"4ec4dec23ecd08ccf41d3f54f9607a26c534013db5171a37f871c639e5486b5b7a490faa2ece7923267647199fd7b9b28052030bb69f6de4b04b07cd71603fd1","ssdeep":"","tlshash":"929002555c1ca242a8d300a5990a124508643160367492884d59512990881b62044958","first_seen":"2026-02-25T18:35:49.435194Z","last_seen":"2026-02-25T18:35:49.435194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmci","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lmci HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HD3VqqDE5jAULFucv4%2Fy73xqZ48qeP0ofQkVqViv%2F712ANm1JS4eQRZUYDXNOiOJ2O93x%2FAEFnZmrHWR9p4Me%2F8D6bWHqOgfzNZuxtuZh2Tn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6cd8d69780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6f769332d4d4c9e04c01f59537b0b6a6","sha1":"3165d87cd39a5c603d9b58d21027904f96f6f09a","sha256":"2c1c0b103843e42353dc2838b50553b62072143f4e8974f662851f5b9130a678","sha512":"505dafe80ab300793aec5a88c9db3867d7f5eacdca9013c96a9ad3874e08e218a45325d94cf27080f3e6d84c7ae4333c72ea974350fe49f76a35d24f2ba46819","ssdeep":"","tlshash":"459002555c1c8243a8c310a5950a1205412431602b7596484c99522590881e62049859","first_seen":"2026-02-25T18:35:49.437168Z","last_seen":"2026-02-25T18:35:49.437168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getCoinList","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:24 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgKxMz5O25GufLEUZKcCcvx7ggLjDMwpNFS18iZTMF1TIu5sizdbS%2Biq4Zf3z9kgMhJ60hFZQ0mQk0q%2FemiiE%2FWBfW5lGSUGs7HEG3TEc3md\"}]}\r\ncf-ray: 9d394d673f8096bf-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33255,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"216c020c2080ff94fe4cc0a49b81d97a","sha1":"6da99de0454d2f50066501894c10efa0dfb6bcfc","sha256":"988d6744f021fff43410cf41ce7796a45a807dc6cf6f83f7aab02dabf4a9c182","sha512":"f0e70fa1a22c5a9b95890d471d2cf410fcd610a36aba9043442720b791e7c34ffd47058b47cdecd5d992f7aafcf7d325d11fa544eea8d658d9bc162008399b21","ssdeep":"192:VX8WX9vmXlN9bXygVWXAsXkD0X2iBXVtMXxCgslCQznVydEdSAyAQAcguHqwXiOs:PmNc56KQIfwFVpfnztGH","tlshash":"f7e21e26b15c807cc5b9c4f51dbb3e63918d343ff9c58f4a86de099486e8eb52907b0a","first_seen":"2026-02-25T18:35:49.43915Z","last_seen":"2026-02-25T18:35:49.43915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lr0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lr0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7lMkUqNkVKhnt4QDoOFh2V4GzrRAuyfptNWZbtPLmcH8SboFYJe%2BGiu0%2FGR3oVILHQFp%2BTKHLpFW5bxOPp1nsRoqsRtqVTmUUxwPGypKhuc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6988499780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6b7b7300162b4ab7a2d895866c338c48.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6b7b7300162b4ab7a2d895866c338c48.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8367\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0AB4B813933C4F11D\r\nAccept-Ranges: bytes\r\nETag: \"4056B837C75220D94C6B66A58F12BDEB\"\r\nLast-Modified: Sun, 25 Jan 2026 18:42:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10371214004347718860\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QFa4N8dSINlMa2aljxK96w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"4056b837c75220d94c6b66a58f12bdeb","sha1":"a0a6d7c7324d711c63a37d8bef74b62974f795d2","sha256":"5cbed5c86aa4c6f54fd76230c401c3a44d79f17f92d97ea9f05737eb012584d4","sha512":"bbd5bec06643e06622706b35643252208f2d8e024a5fde23c565a9dacf3c52ec9a709aab25040e13300e5e7b63713fdeb97e770434c6ddc53095733cb31bfbd2","ssdeep":"192:+Qh2dQ+niL8wFbQ+RZsYR1IrRmHMOEqycCi:++2dQSiLvFbI+ywMOz","tlshash":"d702bf46c664f94ac776b9ec2393ec652a0f0e45386e22fd6838953b9f886c71518385","first_seen":"2025-02-26T18:31:17.523Z","last_seen":"2026-07-24T23:32:32.665499Z","times_seen":38,"resource_available":false,"data":null}},"time_used":3441,"timings":{"blocked":3141,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=cy0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=cy0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LVuSLiO2OT6L0umV7oyVph6s5g1821xP3OzrSbDOdB6Yd6MzRkHHId0mrjhpu%2FKPLMvyvYZqlYMnVA%2BA1QoM5Ao5sevTFQ4Yz%2Fu3vrG6KCmr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6978269780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/296b263c40144fe0bce3fb29aa94ef49.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/296b263c40144fe0bce3fb29aa94ef49.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 450\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFAB4B813933A5F01D\r\nAccept-Ranges: bytes\r\nETag: \"AFBB5060C532B39B25A89BAB3156157A\"\r\nLast-Modified: Fri, 16 Jan 2026 17:12:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7663316858699226200\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: r7tQYMUys5slqJurMVYVeg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":450,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (450), with no line terminators","md5":"afbb5060c532b39b25a89bab3156157a","sha1":"d258e0403b6d3db02a9683bf49a758acc2951cb3","sha256":"2413ec84638e83f52b693f6228425070017cfb100c55a70ea3dc1eeee3d398f8","sha512":"94b24716df85c93e17263e2310672fe72de57df4facff3476867d687d68e17380f86418df08f35ba78825cbc99470391fb0dff9dacc43c86f60bebeb2155a987","ssdeep":"","tlshash":"b6f0dc42d28c826851438ba0bef0b260b22f206ce8dcb3e494d45720344b689ec28568","first_seen":"2026-02-25T17:49:39.153475Z","last_seen":"2026-02-25T18:35:56.266497Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2327,"timings":{"blocked":2035,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/7c07fe08e1af4619a069f3b11047deb2.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/7c07fe08e1af4619a069f3b11047deb2.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1181\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F08B90443334E0D7F4\r\nAccept-Ranges: bytes\r\nETag: \"D6DEB1AA7365929E2CF751B88E56B5D6\"\r\nLast-Modified: Sun, 25 Jan 2026 20:26:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14726560562703307949\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1t6xqnNlkp4s91G4jla11g==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d6deb1aa7365929e2cf751b88e56b5d6","sha1":"e0cda9534a323c08abd29d3ff2a056207354b0f9","sha256":"efb48136213036c6ca1e9d0dcb46c97b5b0e92ab6d12b5ba7fe6b46eb8e8089d","sha512":"69b9e0fe30ade3046b5d9a04674af070eec5fccde45e1610f24b81909c5534e6413269e1a0e13bb6139a1902d31931b6ab83e3a1264a5b6e6155796dc0e52e67","ssdeep":"","tlshash":"c821c6fda34b6d8185134b33bdb7945ffcbabcb24021d2447604b85354760091e1edc9","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-07-28T19:29:08.866861Z","times_seen":132,"resource_available":false,"data":null}},"time_used":3163,"timings":{"blocked":2889,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNULIDqFZ2xvsofTDg6YPtilmmrHEXPYrR2XPUO3NvMO%2BxHUw6ChOLtG0TECCcwMUhHzbfoXJauZrR%2FblhR%2ByMbqtfDmWTAvutGdsAI%2BltTm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6dcb469780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-07-28T19:41:49.785191Z","times_seen":325,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/resource/images/light/people.png","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /resource/images/light/people.png HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-ec47\"\r\nexpires: Fri, 27 Mar 2026 17:54:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2458\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCKozYxdWF02X3MTzVIzNNOqiMXB4cN0Icn0C9OWjmHyPI5ODU0Q0Tu7gmc4iU55U5nan8XMLbFAzFv%2BKJwk8ICyE6ZEXUf94E4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6a29da9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 232, 8-bit/color RGBA, non-interlaced","md5":"d4ddb89bdc830b6b018207125101c6db","sha1":"e2fbe9dad87f26f108f499ee393e39b5f24e0849","sha256":"8271e2f317d883deacc55dc5c8b20dec4d58c2f3c4ceadd0c57e8a0d61852888","sha512":"81be8165341f6fb87bc757ef3bd4ddfecf0e51eb6fd0ab071b14fbe4dd7257cd0e0fb9acb2b00a185fb8bda81c45510e703051e2240540ddd685fce3d06b0558","ssdeep":"1536:wPUl1XP62VNsaPJXag5oRv/aGXYgghI0x7:qlaxX9Gaupo7","tlshash":"7643028d1b50bf580c46b33c399fec9264933cab4e210e882597b4378c7dda895ba557","first_seen":"2026-02-25T17:49:39.138288Z","last_seen":"2026-02-25T18:35:56.341093Z","times_seen":10,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/70267db8b41b43859fedeac1ebf734f5.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/70267db8b41b43859fedeac1ebf734f5.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2403\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F04C8B373532800380\r\nAccept-Ranges: bytes\r\nETag: \"6ED88C45B665C3040F6355A0FA67CA8C\"\r\nLast-Modified: Sun, 25 Jan 2026 20:17:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6232551686171913327\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: btiMRbZlwwQPY1Wg+mfKjA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ed88c45b665c3040f6355a0fa67ca8c","sha1":"43ea61ee069f7a67027f6ff315c6c6b0e618c4e9","sha256":"55fdbdbf15f9415a55996ec176f50420f289cb629f7b65335960b47874056a97","sha512":"4cdc68655fcc62dd8ae3f1157a1cf577e0c319826330350827ae83f3664664bf990e363c94fc30642ed8628a17f84279776920e8d272b602b77ef539bf1af646","ssdeep":"","tlshash":"84416b730bc6fc1abd0784bb44683a1b433df994f27c1646ac1ba06e011260c3cabbc6","first_seen":"2025-06-07T20:38:42.097646Z","last_seen":"2026-07-24T23:32:32.602737Z","times_seen":46,"resource_available":false,"data":null}},"time_used":3385,"timings":{"blocked":3082,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/kline","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: vi\r\nlang: vi\r\nContent-Length: 67\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rnv%2FB%2BB3Izwu7NrfAjbJhHWX92VDV04z09NWcCLcFquX3u5OXUXmBwARE%2BfNY45NwNqdVnBQjs%2FWoyW8vWA1u1As1mP5Wguhsy%2BK2P7P9nx8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6d9ad29780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71797,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"ba3b2f8422c984abea3c9f791d592d22","sha1":"89c96c19adb53de2ae5fa937fb9b3432a00e98e2","sha256":"1a8084369ab000c6bf76b741b8ff12f021da9f13d42eccad894d12973fff118f","sha512":"4c4312f32a2a2fc7dd8211c5853906d01db95090b2700314c4b58b04946ecaf75469a7b365b727bfd308a81575d059003b04545493282bd181a4cf08c9fac51d","ssdeep":"768:KirKklSC3gEVp82XLal8eWelsJb2v/ZawR850ahecyCdbGuInVhlhk8pIla59hZ2:KihSC5XLaTGwR85VhecCe","tlshash":"7363413c8b958188d4354df66fb3bde189a334d74ecd9d81c59d0c083a90b3ba929bd6","first_seen":"2026-02-25T18:35:49.447412Z","last_seen":"2026-02-25T18:35:49.447412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ta0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ta0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3qfMrjy%2FdfqcSIxHlAUHlohevkwHS%2FQKvMvP882l4MrLGbp0CR9Z%2BH41KbfHCNmhFOoEM5LMldBbQd5gkKsQJA%2Ftiu2IblXsdfNzS2BmYJt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6978199780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getCoinList","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:24.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:24 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNz1Lk463RzGl0TNKgl5gcS%2FWkE4zXvXH%2FY59NnZzumJbWNKb%2FOWRYuQ4hbQo8gVDHmHrNDvfanBlBWkys0q947zXJ5M2fhAm6PFAY30bHwL\"}]}\r\ncf-ray: 9d394d64484c96bf-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":37,"dns":1,"connect":8,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmzi","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmzi HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7bKKIrvS7Nk3d0%2BnMv6jcaAsRpRgYTpJQa97qEykDWaDzWX2bNMD0tmTIilo1oZTC8eelWrxPv%2BwNHE4CT2W8Gnr5i5zLBq26cGx0eA8shI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d695fc39780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/resource/svg/light/broadside-btn.svg?2.2.1770477070317","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET /resource/svg/light/broadside-btn.svg?2.2.1770477070317 HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:10:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698755ca-57a\"\r\ncontent-encoding: gzip\r\nage: 2458\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCm3AuX881Mdkq%2FF5TBY5PeUVa8J1fMHafj54DX4wveQ%2FR%2BQ8Iq%2F6H8%2B8HiQEgaE40Y5qzjAojd3OAmV2nBI2zu0vd5kak5wi8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d69f9819780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c27867c5fa5001c284912358d1088c32","sha1":"72a65c57047f38e6a9eddbb45f4eea4c6f174d4d","sha256":"521cc1eb8e60fa4570402a808ee3efc57966814258a1f90f3d0c83780c3c3686","sha512":"c18de18544928f4a8973bc78eb61721724833483b3b071758208845a12026413c6c373a479809a3825dda32c61d1137a23fc2412998a819f7af9e7598061f9fc","ssdeep":"","tlshash":"7921f8cb730c50c1e601a3e8a41676ef029b70db4eda8e5f68599dbd771e4a32506170","first_seen":"2026-02-24T15:49:18.956226Z","last_seen":"2026-03-02T23:08:53.792105Z","times_seen":22,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/2d06b52ea576405b842ebfd94effd5ad.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/2d06b52ea576405b842ebfd94effd5ad.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 916\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EECE63A83630F92B5A\r\nAccept-Ranges: bytes\r\nETag: \"205321AB41EFAFD9DF52606ECF9669D6\"\r\nLast-Modified: Thu, 05 Feb 2026 01:55:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8808752217629503937\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IFMhq0Hvr9nfUmBuz5Zp1g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":916,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (916), with no line terminators","md5":"205321ab41efafd9df52606ecf9669d6","sha1":"4521bb4143b039f52a1625a102fbce86ac8c8347","sha256":"e9c10f7e0525477e11bb118275904c3e1b0bc7fe79c3e9b1490a02bf3cefb048","sha512":"0656ca9735beaf79cbfa9a36daf00812fbdb65e16ae5f87b4aa17969786dc565fe83639eb571786cd9cf79df30558dd3d581679b423107a8b9f8a88f0b9447c9","ssdeep":"","tlshash":"681100ebe39d8058c5468e8cae1368cd335e34ac7cb145c7d3b88f206715b68da01d38","first_seen":"2025-07-30T01:59:54.195894Z","last_seen":"2026-04-21T18:05:17.624021Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":689,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":551},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=ma0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=ma0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGPUFQOOeTeVv6FONvJocM28gyCxaKFQXO%2BTHdAgRUl%2FWLEUQXXX7brCG6yuFmypixkGtxqpL5VCj53AbZof0C49CpyKypLA2iuY5WHjC2nP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d692f5f9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=lmni","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=lmni HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rJScM1SJmZl8jcFQPipb6dZFzli%2FsxImIJ6qQXFeSRE08C%2BnChH1Mz6eyWpNk7oephyJmvg%2FIsoa5wfuMN2ycNgzTfx8YgAdrapbzo7TzJq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d694f9a9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/6e24418e1fb44d6f95f77dafd2f29f37.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/6e24418e1fb44d6f95f77dafd2f29f37.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 561\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EE6AFD3633315F6ED8\r\nAccept-Ranges: bytes\r\nETag: \"F0EDB9478D9F20FE416D9794348529DF\"\r\nLast-Modified: Fri, 16 Jan 2026 16:46:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15036309350262565821\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8O25R42fIP5BbZeUNIUp3w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (561), with no line terminators","md5":"f0edb9478d9f20fe416d9794348529df","sha1":"3b3220057b4a77a6c6f90cc00c088ebcc64bd78b","sha256":"3deaf39baca9a89bac2f82fb6f345be0618180ed2ee415720766bf74d9f30760","sha512":"7fb667252578637ebe786aedbd1592987bab9fef79846bdb7e61cbaf1574f273c28510ed90027073c73c225c551f7c6b6d8cb3ec096c07823823330c033cdba2","ssdeep":"","tlshash":"a4f08bed138ae088a216c0e15e5d0522e61fd081fa8f038e6494d315b1d3adb244d899","first_seen":"2025-11-12T03:40:09.606175Z","last_seen":"2026-02-25T18:35:56.366757Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1674,"timings":{"blocked":1399,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/b3ad287d0b7141e6bfd35a4bdacd4db1.svg?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/b3ad287d0b7141e6bfd35a4bdacd4db1.svg?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:27 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 491\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40EFCE63A836307B2C5A\r\nAccept-Ranges: bytes\r\nETag: \"04D01F0CB8AD295C3C9975772D8AF4E6\"\r\nLast-Modified: Fri, 16 Jan 2026 16:38:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7449483460414735751\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: BNAfDLitKVw8mXV3LYr05g==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (491), with no line terminators","md5":"04d01f0cb8ad295c3c9975772d8af4e6","sha1":"09462cbcd57935531a8854cc5dc53a756248b6a0","sha256":"a89320d9661043bede3602144128ff02b14deb044aa427e27c449128d5c5abf9","sha512":"af119c0d0371da415be1f217a686c6b5041cd5ee32339f98a279ebf90fbb085e8899061b9a74c89531d9519af08998b3766c795ecb9efb2c33be36afc4e0b981","ssdeep":"","tlshash":"a7f09ea0f7ddf48c90118791db193152615fd4f4f6aa02bd39d85330b9465cedd12198","first_seen":"2026-02-25T17:49:39.119166Z","last_seen":"2026-02-25T18:35:56.363568Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2232,"timings":{"blocked":1957,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/dea118b288f944c995a42b939da46db2.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/dea118b288f944c995a42b939da46db2.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 404\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F08B90443334A3D7F4\r\nAccept-Ranges: bytes\r\nETag: \"5E22A9302A4383454BFE530F0DDFFB53\"\r\nLast-Modified: Fri, 07 Nov 2025 14:46:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18276743004581408811\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XiKpMCpDg0VL/lMPDd/7Uw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-06T05:29:05.030411Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":2912,"timings":{"blocked":2638,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/e86dbfdad56643fa8d04888f6b652255.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/e86dbfdad56643fa8d04888f6b652255.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2808\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0EE2400373538864F\r\nAccept-Ranges: bytes\r\nETag: \"D55DD75446D505958E5210985B246BED\"\r\nLast-Modified: Fri, 07 Nov 2025 14:46:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13943290759176926731\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1V3XVEbVBZWOUhCYWyRr7Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-02T14:27:27.418081Z","times_seen":997,"resource_available":false,"data":null}},"time_used":2969,"timings":{"blocked":2662,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/58cd51becf1743cf873450424cf756df.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/58cd51becf1743cf873450424cf756df.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1307\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F06AFD363331A36FD8\r\nAccept-Ranges: bytes\r\nETag: \"4119A4119257947D75974EE50258B121\"\r\nLast-Modified: Fri, 07 Nov 2025 16:58:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16156932685160513603\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QRmkEZJXlH11l07lAlixIQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4119a4119257947d75974ee50258b121","sha1":"3485b77d3dd2df3d105f88462a0baaa1f79b3e13","sha256":"689f4313c40e98326ad30bdd24ceb7bd273b32cc0c080ef1528d425937bdeb95","sha512":"6238658ee4380acdc610ca1786d13b3a0b8265a5e32514690547a0cd9d9db1fb940dde7c9170c71d5e887ae715fe6b4b85ca9712b216a0661deb749091c24d85","ssdeep":"","tlshash":"7f2186a6c2869b1fd97ba12a87e6c185ac972145a942235cf60448cd30a814cf9d165b","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-08-02T14:27:27.444914Z","times_seen":502,"resource_available":false,"data":null}},"time_used":3260,"timings":{"blocked":2986,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"order-ress.oss-cn-hongkong.aliyuncs.com/order/dotdigital/cd3a6ad540744997901837d7b5ce2df7.png?2.2.1770477070317","fqdn":"order-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /order/dotdigital/cd3a6ad540744997901837d7b5ce2df7.png?2.2.1770477070317 HTTP/1.1\r\nHost: order-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 25 Feb 2026 18:35:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1218\r\nConnection: keep-alive\r\nx-oss-request-id: 699F40F0CE63A83630782D5A\r\nAccept-Ranges: bytes\r\nETag: \"D34183DB66626408066857B67F7900D4\"\r\nLast-Modified: Sun, 25 Jan 2026 20:19:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5782617094063956613\r\nx-oss-storage-class: IA\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 00GD22ZiZAgGaFe2f3kA1A==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-28T19:31:07.582158Z","times_seen":302,"resource_available":false,"data":null}},"time_used":3277,"timings":{"blocked":2996,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lmefxo.com/","fqdn":"lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T18:35:21.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Feb 2026 05:50:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Rsctxu5f75hkLl7vNQ73Hf9GkAKq3PvkWfJlTTAxII3AuCsS8YWFn%2B7fwsmSMQx90IiphytF0A7SKo0Jv3LjmZHm%2FcNmyUsgvw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d394d53dd978745-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7673,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1140)","md5":"c566177b7f8e48f693fc9d39b40ae258","sha1":"28b330e88b08a60768e94f55e0061f0f09e7aebe","sha256":"9ded372350df37bbde615eee2def777356a664b7375421ce05b4cd268cc5b885","sha512":"c3b0177ab4a7f12e11bdb6df8ffbf8d6d7669082f66ed47051aabe335d34635f3124e72654bde48f140c000f1c89d76d338d98bdec90873cc602a89956186c01","ssdeep":"192:TFMXUMUqRGqWK1GOiUm9Al6BIxKOZCxf62nftZb9LuB1Xi0iEffl:KsU0pexRZCxC2uSjE3l","tlshash":"58f175a72db1d90d2353822a9bebb0045a719193861ecc64b9dc55ed8fc1fd9c8c37b0","first_seen":"2026-02-25T17:49:39.095621Z","last_seen":"2026-02-25T18:35:56.288716Z","times_seen":10,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":68,"dns":37,"connect":8,"send":0,"wait":433,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=cf0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=cf0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c08r35LKqQ1CjNVHtG1N4w7zk1P5JkO86gp1s6wsHjDf81hVO8L9tBbrplCFzRmc813tFOqkro41X8wRjmgeTl8ut802EAVjASXSFcfB9Er8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c3f539780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"29c975a8b62ecb3cbe62ea168652f2be","sha1":"56ffd6331134bce20c1ab41cb5ffdb07babf5061","sha256":"851690aa0c683ba64aceb3e6cda04df7e27ac513471c3c2647372dc61b674f77","sha512":"99d5ef5614868bdc567d1c8aef39a6818585de3c52fb1efdb353f2c066ee033e745ef0a5db1dfb6d669bd3791bbdbd9db6290cdd06aa07f0a93dfcfd178347fd","ssdeep":"","tlshash":"389002566d1c8242a88300a5950a1e44402431602624d2488c99517581dc1a22144898","first_seen":"2026-02-25T18:35:49.458674Z","last_seen":"2026-02-25T18:35:49.458674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=rs0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:25.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=rs0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:25 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQ3jLVMi0kbG2E%2FV2EEELjNA3yUghMuHJgUBhHKKh2LheNoyiWp%2B%2BAEZzTVL2woW7L%2FBcXJ%2FHyzrK688FDPQ7rGToSnfH92DTpsAGj1r%2BbYx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d6c7ff59780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"82028282197a308b0867ec2b17a67513","sha1":"e6bc7295c3be83803f362c29cc71e3634435f257","sha256":"4e601a46a5b1f9409e823f9e5f4f5e2d1b8568c4834fc1488b4035b229442081","sha512":"de0455105df99ae3f6a4ef697f41c07e8282928a23da5bfaf54bb671e697601d0717bb8d09d6bc31ff34fd2b285755c3c7d51679fee54ea5bb11c7446d790a08","ssdeep":"","tlshash":"c89002555c1c9647a8c300a5d50a1204053431a0266492488c59512580881b2204896c","first_seen":"2026-02-25T18:35:49.460523Z","last_seen":"2026-02-25T18:35:49.460523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.lmefxo.com/api/common/getMt5Amount?coin=sr0001","fqdn":"h5-api.lmefxo.com","domain":"lmefxo.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lmefxo.com/","date":"2026-02-25T18:35:26.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmefxo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 16:23:01 GMT","end":"Thu, 07 May 2026 17:21:55 GMT"},"fingerprint":{"sha1":"B8:83:BB:A2:39:60:B4:F7:EB:26:51:BE:D4:38:9F:73:E2:94:D2:20","sha256":"65:D9:14:AD:11:13:DA:90:D4:CE:FF:9B:87:23:03:FD:7C:98:C7:3A:41:6E:91:9D:14:13:32:B1:34:DA:A6:D7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=sr0001 HTTP/1.1\r\nHost: h5-api.lmefxo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://lmefxo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 18:35:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lmefxo.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PsQ%2BIYzoTdGSQ4kf%2FtXMaVLaPKDxnQLgdnK1IdONqGkHTG68Na8qHlOXWXL0B4TlJy2KDqcGjYslnWogdwj3LNpaRqXsUCxDakee1Pi0f52\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d394d71fcce9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fe8b0e88b86df24d16a7b395c42ce6cc","sha1":"75b1880100425cde6d7b0cc25da7c4fcbcbc8f09","sha256":"e30a7cd8581e799ca2a02a4b64b3cffcf5fb5be00cb99e2059956b1423bce9b2","sha512":"f023f992c63b80ac13aacdd5d4eb5e075654dfbea7db2ebdeff3b3544816c12c63fa7697b4770ae1f0fb91cc113d4b2fd11dc3a1370ebc37457fe59ece89ea25","ssdeep":"","tlshash":"c99002555c1cc242a88340a6950a520800343160272492884c599125c1895a22044d98","first_seen":"2026-02-25T18:35:49.461945Z","last_seen":"2026-02-25T18:35:49.461945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"h5-api.lmefxo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}