{"report_id":"166b48d3-ed97-4066-91f6-8211d9d91d99","version":6,"status":"done","tags":[],"date":"2026-04-09T18:56:40Z","url":{"schema":"http","addr":"kkgwmexc.one","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"title":"MEXC","dom":{"size":23373,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16301)","md5":"baf6ebbc3e0c62fdb6e687f02a45b6be","sha1":"d25216a1d5a8adf2e5206eb000051088ccca8b4c","sha256":"eb4160ca4d6cd8a3fabb65ff96474c1e7cbe332581480c4c6170d64eb90fa103","sha512":"b1725735d15856d8d0f8f7b6c7472d123a75c876d26d8542488caa4b2b5401ea2f8353e3c595f22c3b153aca3487c7b2b6857414945f9788af81c3f2f9a5d4b9","ssdeep":"384:Nu+qZCxL2hQesfHQZEFFsRFqFOLF6FQsF5CF3ZDfYrOI:NYQxL2YJ/sj+OxuQk5CjDfYrOI","tlshash":"23a2fe31654005a703b7e5c0e571be1eb6d6f30fc506c551bbbe91892fc3cf5aaa2429","dom_hash":"domhasha0f98008ab29ddcc74b8dd4b28e960a2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kkgwmexc.one","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-14T18:56:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:22Z","timestamp":1775760982,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:22.838527+0000\",\"flow_id\":687405058682293,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44416,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-09T18:56:22.322997+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:22Z","timestamp":1775760982,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44408,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:22.849917+0000\",\"flow_id\":1542691961104447,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44408,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-09T18:56:22.321599+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:22Z","timestamp":1775760982,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44414,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:22.855978+0000\",\"flow_id\":2012681642371281,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44414,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-09T18:56:22.321745+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:22Z","timestamp":1775760982,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44398,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:22.870744+0000\",\"flow_id\":264243405842346,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44398,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-04-09T18:56:22.321450+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:22Z","timestamp":1775760982,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44420,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:22.902859+0000\",\"flow_id\":5836698425771,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44420,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-09T18:56:22.334251+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:22Z","timestamp":1775760982,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44392,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:22.908554+0000\",\"flow_id\":189515269859101,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44392,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-09T18:56:22.321309+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:23Z","timestamp":1775760983,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:23.088140+0000\",\"flow_id\":524539898797974,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44450,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-09T18:56:22.565142+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:23Z","timestamp":1775760983,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44428,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:23.093901+0000\",\"flow_id\":1454151210278644,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44428,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-09T18:56:22.564980+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:23Z","timestamp":1775760983,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44444,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:23.105171+0000\",\"flow_id\":2140809106726729,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44444,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-09T18:56:22.565065+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:23Z","timestamp":1775760983,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44466,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:23.117615+0000\",\"flow_id\":568692162618143,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44466,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-09T18:56:22.582431+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:23Z","timestamp":1775760983,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44426,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:23.121607+0000\",\"flow_id\":261245518650993,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44426,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-09T18:56:22.564849+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-09T18:56:23Z","timestamp":1775760983,"ip_dst":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44464,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-09T18:56:23.125800+0000\",\"flow_id\":1065117367575438,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":44464,\"dest_ip\":\"47.79.64.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo2025s.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-09T18:56:22.566158+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn-icons-png.flaticon.com","ip":{"addr":"23.36.77.104","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-05-10","domain_rank":239972,"first_seen":"2021-09-02T06:55:19Z","last_seen":"2026-04-09T04:04:38.670702Z","alert_count":0,"request_count":3,"received_data":64493,"sent_data":1319,"comment":"","tags":null,"fingerprints":null},{"fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-02-01T01:46:37.874067Z","last_seen":"2026-03-19T19:51:05.743268Z","alert_count":0,"request_count":26,"received_data":2050760,"sent_data":12145,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn4.iconfinder.com","ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-23","domain_rank":608280,"first_seen":"2012-08-14T17:19:25Z","last_seen":"2026-04-03T13:58:19.207032Z","alert_count":0,"request_count":1,"received_data":36940,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kkgwmexc.one","ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-04-08","domain_rank":0,"first_seen":"2026-04-09T18:56:43.845512Z","last_seen":"2026-04-09T18:56:43.845512Z","alert_count":0,"request_count":35,"received_data":3712496,"sent_data":14445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"webapi.kkgwmexc.one","ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-04-08","domain_rank":0,"first_seen":"2026-04-09T18:56:43.848213Z","last_seen":"2026-04-09T18:56:43.848213Z","alert_count":0,"request_count":17,"received_data":58110,"sent_data":8703,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"65cc32c48c6ca2b8b2fd44c1670ae667","sha1":"f2a116897b02c9bf0bb31247024703d913d0cd13","sha256":"83e989e9718ddc6751b336792e962c10faa616a9f3feaffc90f9c430e4c6d221","sha512":"bd8ce0e0a56f50ef5d499026d682702cf4fc60698a0152097cad28c8b889fcd4bdad15f87af7f14437f9cba7bac5e26d80af6bbc49249f7efbdc468ef39be9f4","ssdeep":"","tlshash":"11c08cc4a0c22d001602681110bf24e890244427704c5b028c98dc583e220b49237ed8","size":139,"data":"","first_seen":"2024-12-08T15:39:09.862859Z","last_seen":"2026-04-09T19:00:32.929927Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"df4586e1ce9b96195084a0b03ce18eae","sha1":"adbea5ad1a7cebd83649c66cc8369ec52a07b955","sha256":"e53d487f814a704140567ed0e93120b5bc45a7330872a2e7a09770154248e228","sha512":"d7be64d2e203620b8fecd28012e4b2962c7870e0d9e76a3ea11dd47f9d5f53299fa007e683654069a8d06bd6e4e8638fdf41dfe50d0e3cbafc7162e21b56fa40","ssdeep":"","tlshash":"9bc08cc4a1d26d001a02641161af25e490244026b0481b028c94d8482e220b08233e98","size":139,"data":"","first_seen":"2024-12-08T15:39:09.86801Z","last_seen":"2026-04-09T19:00:32.923904Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4fece27443cc040f6794c79dd1d5eefa","sha1":"1e2d4a18ebd3974b8b6342a07858ba6f7c778a17","sha256":"89c964d67b6fc42da65eb6044dd94207c8e565c2d557f4ea463bbaad19413abf","sha512":"07275a4c766270960b3d553a38c496657bce41e80e1d2cc3ecec165e057421a61115ade5e99c56884ff404f66f551d846b1788843af78fbf54f9a301fd04200a","ssdeep":"","tlshash":"3ac08cc5a0c32d011a02652010af29e4a0248027b44c1b428c94ec682e220b49233e98","size":145,"data":"","first_seen":"2024-12-08T15:39:09.852466Z","last_seen":"2026-04-09T19:00:32.932202Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2b72232ed380a528eeb3a552d77ae9c7","sha1":"6dc118004f8c5dcbcb571446e544948e5884cd56","sha256":"b7d4991a24ab4ba72ab4e3cfa67e51ed181d0f21335bd7adb062d024a1564c4a","sha512":"9a7cba48645dd78c7a719297ffad44b3da7263835e444e0fde947908fd4345a1cbb1d672b3e53338231cd6a11b38c7d45e5395f1387d368b0e8f93beea4d6347","ssdeep":"","tlshash":"77c08cc4a0c26d001602649010af34e890244027b0485b028c94d8482e220b08233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.519141Z","last_seen":"2026-04-09T19:00:32.918394Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-17e17425.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"a716cd7eb801183bede08b4d789dab57","sha1":"e2ed6d192e3cc954af72f9d8e878cf07a56e0aa5","sha256":"952af14e5993aac5e9d8be781364fcdd104a1c1895604e5bd7e11d7013ffcb50","sha512":"b3004819799aaa6dc38f42a85e9fe3550727c19966ae64df8e36a36156441d6d2a15d7010261f4cb8a0a829caa5189b1f9bade71b4fea7a08fdeb1e6e88822c6","ssdeep":"96:bw+Cfp9YIqD+wSvxQMyntb1kiGnRbT/3hvzA3X6Nth+jA:bw+Cf7YIqiwSyntbi39vhv0XQsA","tlshash":"a0a1b999f80285bfe9771444088c0410319dbbfab21588f1fbfe9d0a67b897dd754366","size":4664,"data":"","first_seen":"2026-04-09T18:56:49.781874Z","last_seen":"2026-04-09T19:00:32.91153Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cf91b633dd7aa3a910f7203ae8fe6e17","sha1":"45d58e726a623b9e8f470e616bb21e0d79b921b9","sha256":"aa19bcc17f77cb209b91962de32d71b2d5dcb71dd7c34ce623ea6bed117e3eb1","sha512":"0fee27821ca07b1d1334a207806b1d1b49a8fdd98737f499c880ca9e835ceb36c18607e7072ee36e642bfefd2ba7186545b7fc04d2f07c9fb17dde2c806355ab","ssdeep":"","tlshash":"41c080c470e27d44165565b5207f74d45034441ff459db52dcd4ec593d225b4d337db8","size":172,"data":"","first_seen":"2024-12-08T15:39:09.836814Z","last_seen":"2026-04-09T19:00:32.936227Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a2305a71cf6385d83ed606411f58dc","sha1":"cc26d62a9c807afefb1324dcb5b04e27458e257c","sha256":"9ca4556afab8e3be6cecd3448ef9d7b43228c9d9c713af3b4f39904f5bd01b93","sha512":"73814adfd6402e3d474a235696af33044befa95a47db86ba643c2d7e85caf05de05c61b5174b00beb081a9818994bd0fc061fa1004b15790468ba55f9412b8d2","ssdeep":"","tlshash":"bfc08ccaa0c26d101a0a761010af24e49024402b70486b12acd4e8492e620b08233e98","size":145,"data":"","first_seen":"2023-08-02T21:25:39Z","last_seen":"2026-04-09T19:00:32.929157Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/tw-80108ea2.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d6eca53d12cfa1c57fa5f09582ef7a4","sha1":"f46c0f76d3266d6dc3dfa9b32060572720f9c7ec","sha256":"7a2602fd14696855c68cea5749ae8a347ef9673289ae11de8f6b7ef5a59b8646","sha512":"e405663a3ed970eebc6ff5bf2301f82d4743e9bb38cd7e5ea19780a3aafd1ad83e1da3427e47f2c3094f0073c7e3e453d5c523bd85e3fbc49110a03a6db45a54","ssdeep":"768:1Bhu4hgcnMHix55Oy96wjRP89Nn82vaFRt5FG4Xtw:1LGcMszOujR7vXtw","tlshash":"d9f207c46ceedead44e3a53bb04e694260f79e89c721c0295fec59f96284b13d793720","size":37115,"data":"","first_seen":"2026-02-01T01:46:44.945047Z","last_seen":"2026-04-09T19:00:32.879854Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/charting_library/charting_library.min.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-09T19:00:32.904061Z","times_seen":642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/currencyItem-5524b6be.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"87926059f751a972646ae6693524f4f5","sha1":"61d76dc917fe0ad9e154f13225804f3c45bb6bd7","sha256":"cc82e92a9adfad1db787f3f4db3b5e9e387cd00df73cde4c63766cdb1f3b5ffc","sha512":"966b38a245e00c6b298e6545880171e152bb3818e2e35c02e22f2f769da029b3a92b7e801d75504a76f739e638367014abe0e7e98d3b460bfa66aa2794ce715e","ssdeep":"","tlshash":"a321df9aad01c7b1cbbe906285bd4414130e7bea700181c1ebed158a378a5fcd728a31","size":1206,"data":"","first_seen":"2026-04-09T18:56:49.817433Z","last_seen":"2026-04-09T19:00:32.877634Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8bbffdaee7d20c5a82fc382c243dcb3","sha1":"6d791388ff189ff8877e635bc40660c1b9b2f07c","sha256":"9468a67aae269dc233c96e38dff5dc9e1a0d7dd64b72b6506a558aae8bf74f29","sha512":"b82681643819e01789357b1d875987661f3e7d5df98c427111899a0a0e054e8aef72642557ae9647c8786bdf174843410feffd352d540ef4eed39ca0d739677a","ssdeep":"","tlshash":"e2c08cc4b0c22d102a02651114af24e49024502a78481b028cd4dc482e320b0c277e98","size":142,"data":"","first_seen":"2024-12-08T15:39:09.855706Z","last_seen":"2026-04-09T19:00:32.925385Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-c32bc07b.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"af3d2429648edadfbfd1ac664edc41eb","sha1":"4907dfbc500a5d6108241ae107190d83bdce1884","sha256":"89e1190b4014852c292aa2bcaa5168382bb53dc9d891881b5f5d5b38bb20c19b","sha512":"9de61b4bcd25856e39fcce654001eaf53535b4c3b44a11f00c963f0ae851409c0e0847a3515ad7063de8bb03e72c8474c02889c447d275782805c1d55f449dab","ssdeep":"","tlshash":"8ef00e2f7daa80721bf388eca1630820b71e1b9a3754c5a4d5c70e10d778ce7d16e218","size":510,"data":"","first_seen":"2026-04-09T18:56:49.814984Z","last_seen":"2026-04-09T19:00:32.869157Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bc59179de195fcf6653ee7c7037065d2","sha1":"6e6f7218bde1f577439df51c99dc766658ce53a8","sha256":"b305c509f4b0f5e688e42b7cd0ab8d3f83977173999a880d757bef6455c34b2f","sha512":"5ea63aa285db4dcdde9b9b05ace14cb9a29f23783eab996ff460beb9729f68f43c75cfa2020fac3df5115c47319ed032984b04fe93d6da8e629c56181e371be7","ssdeep":"","tlshash":"09c08cc4a0c67d206602652450bf24e49024442770881b828c94d8483e230b09233ed8","size":143,"data":"","first_seen":"2026-02-01T01:46:44.985092Z","last_seen":"2026-04-09T19:00:32.933048Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"eff8762701acc1c42deefe4be573f595","sha1":"824fa104a5d64c457d17883e2f807d6f6c2593ca","sha256":"689e64c6f32f3b558307001f640e6839f684a5fb86719a6298afd6c84d2b0c81","sha512":"dbba64d868868efbbd0d1b933a68396dd31643f98f3b925328ce8bf6b230fb90295b60afb90efed806f7249fe9aa87dfd363c531fe2c0fe8a57523a9177e1d4f","ssdeep":"","tlshash":"5fc08cc4b0c22d001a02642010af24e4a024402ab0482b029cd4d8482e230f08233f98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-04-09T19:00:32.921736Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"170c5aeb0fbfa79ec106e76acce07132","sha1":"9f1adc3b20187ce77b33f5b3c827b562c51a2e3a","sha256":"72311d09d22498f16737e60fa68d33cacc3e2e71ed5fc46d7559a1808efbf6c6","sha512":"205075024aef7f373dfd51895391f57c00b4ea5ce1f7289df4691c60ea0850871539fc06351f38277a3abc389c261344444c80159cfeae6d8ed36a7ad2e594af","ssdeep":"","tlshash":"d8c08cc8a0e32d001602641010bf38e49025802670481b168ca4ec483e230f08237ea8","size":142,"data":"","first_seen":"2024-09-19T22:02:28.526617Z","last_seen":"2026-04-09T19:00:32.931412Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b41b8b333cbee48e39488f327818c07","sha1":"fa85c7be6ebb2a00f60adfd9ae624f7b195e9211","sha256":"fd4356ab89824626e1262ee88445e657bf5a529cfa68c9063259a26da438fdba","sha512":"7dfb18510e04d2fd0ec530fac6aa101840831919097e588e761e0ef627146b6b9694aa5005271b5b78492091bceb9e3fd5ded18060e1d6db0cdbb1eb45826dc4","ssdeep":"","tlshash":"2511abfe195a64696303804e976b7811642290a9000a185177cc9f9dbb9abbdd0cfb8c","size":1048,"data":"","first_seen":"2026-04-09T18:56:49.860241Z","last_seen":"2026-04-09T19:00:32.919031Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-10T13:40:54.957989Z","times_seen":30466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/filters-afea0ca9.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"84e529be9abd4311cb4de39eae43c02d","sha1":"8d909db36e270ceb82882589f543a988607ecef3","sha256":"da3980c8503ad8665e419a75d1f494aa32642266b71e21dff7bf0074395f462c","sha512":"01946cc75e24d333ef716697f73017b0ec6700a2d2fdbd3d8daf8c1b7b31b782efe5f74e6e8cbc45e5569a7943cef9841ac00c621c6e3eeaf8d495b13bc85c38","ssdeep":"","tlshash":"085125edfcc7613356ee59f940288410728eae20686e0a4de54bd0455a73888e0bf768","size":3138,"data":"","first_seen":"2026-04-09T18:56:49.821622Z","last_seen":"2026-04-09T19:00:32.88277Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-a1c1f0c3.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"65f7da5c08e731323c18d78a569ee8b1","sha1":"4f2a5272aeafe8cb044ea0bd83e112223e6e514e","sha256":"1c99e2a64ae3ee97320f23b482ab8371ea5a1aaf7ee297500e585e7204999640","sha512":"99f97187518424567941584fc96b190d27aa4618287f4e3b60fedf77cafb8bf352d1dac227da9d5952d6d6bdfab9a70cad1161da63154d0f3691588c3bc50128","ssdeep":"","tlshash":"1001bdf9fd0d8ebb0ea20a4541913601140a1fddfa1419e198867e661be4950d7de72d","size":776,"data":"","first_seen":"2026-02-01T01:46:44.934596Z","last_seen":"2026-04-09T19:00:32.897836Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f02ffcfbde7b0afe29639198c8137cac","sha1":"9daf59294380c8be478844674d1b14b2ab42c5fb","sha256":"24ce4bd7ea58074683fccedf514c4762d6158f8f5d771b13c28be886db279435","sha512":"a124ddc942e46c2aecfd7afe8749354031f513c621d746cd422197f4244a4cb12a0faca8d587600c27412f1b0affe8658fdd3d7eb8ebf642be682174919f69e9","ssdeep":"","tlshash":"aec08cc4a0c22d101a02a41410af24e49028802674482b438c98e8a82e220b08233e98","size":139,"data":"","first_seen":"2024-12-08T15:39:09.853482Z","last_seen":"2026-04-09T19:00:32.924628Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9bda9aba701c4844638ad4bd9fd91e45","sha1":"2b011b14d97df1c13b7272be4976b2b9bc4da237","sha256":"3d84487c5846b0e803ddc057bd132325ccedd2ae8ec35905b44a1318e0becb0e","sha512":"8ed48d1f3c8a718c8af3e6aad7ad3b624084a794728ab48bd28237fab3a860b77f52aa3491e1643f91743efa607f973a88972dade4e462707247f104dd0bd53b","ssdeep":"","tlshash":"cbc08cc4b0c22e002a02651510af38e89024842a74482b028c98d8882e220b08233e9c","size":142,"data":"","first_seen":"2024-12-08T15:39:09.837958Z","last_seen":"2026-04-09T19:00:32.930684Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"56102952683d62ee7029530f2845f32a","sha1":"7c01a34b37fca2d0ec01cc6bf71dcd936f7f5d05","sha256":"4a45fd2126a9efe278ed9a9fb02641e636bf8f15e0c591d26067bf20ac16ab2c","sha512":"383171f283ae799bf1c3ae6aabebe105ba26cbb7c58d59794c6c1c54ebab42741f99066a76456150aba42db2a6e06bc240ae350413c43a54a7c17d6c8b75e797","ssdeep":"","tlshash":"56c08cc4b0ca3d001a02ba1410af34e49024402b70489b879c94d8583e224f0823be9c","size":145,"data":"","first_seen":"2024-09-19T22:02:28.536563Z","last_seen":"2026-04-09T19:00:32.917713Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4ec5451adeaf524eec85b5bd0538a949","sha1":"27aa1c9973fd6d1e329e3def5d9eb18053cf205e","sha256":"cc4705fafc3b0ebf0cde55bf1157e4b6fef0413c5991229f2f162265cb511899","sha512":"9d14aaf5f450a48ab982859afa3af94065f732fa87dfde550321ff42cb1733dabc21e353785022dba736cac2cced145d0215926aac60c97be3faa44ba81255fa","ssdeep":"","tlshash":"8fc08cc5a0c23d002622646024bf24f89024442670885b028ca8dc583e230b09237ea8","size":145,"data":"","first_seen":"2024-12-08T15:39:09.846423Z","last_seen":"2026-04-09T19:00:32.926934Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-10T13:40:54.959076Z","times_seen":34156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/vendor-38f76bb8.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"dde426fc60c74651d74b149b5e30072b","sha1":"1826662bd11055d1fe8e10123d3a0c8c2347eab9","sha256":"cbd45bc6c12ca4a98942ad7a86e7231fc76b0183b8bb3a3a6ca2d690c56de4cb","sha512":"54d569fc5837a14f2d53da36444287160d221c22d2505c8142d13d4d61563ca19cc437eda2ff815d729956ca1bee5c4b464661ab61686bf358a55be8d7d77798","ssdeep":"12288:WBIeDymlYRQN/CGlSVdulwN7C5cmwGxdGIioJWRjL/gVhyGx4aJ:WBIejg6KGsulwNG5cHskoJWRjL/gVkW","tlshash":"5d153bc97292f06147ab24e140bb0006f3396e59740e84a4f16dd9eb7d69d89e2b7f3c","size":931369,"data":"","first_seen":"2026-02-01T01:46:44.93087Z","last_seen":"2026-04-09T19:00:32.862293Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-f86bb6be.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"313c37e8def6b78b4e950e6110d31496","sha1":"145deebefb739190361ea928e293f2f1d5c92cca","sha256":"c82bd2b5377100c402033e52bb39f02e0c602222aa6487db2292f0351d6829ab","sha512":"e8b6c4c7ef62e7469911d69006670c2ea363286ce6fbaeae5784dd4e066d1ec922caa460cfb349ce217d7eaf1beb2ed43500926b7590c8a34778a61a6ac7789b","ssdeep":"1536:IE3QHJ/cs7EjhFCYu1gM+EvHk6to7kB+0HNnAUD:IyA/cs7E/sgM+Es6to7EX","tlshash":"2fa35d8aa40a0eff5dfd0848658f491030691f93598ccca777be6e463bfacd46399718","size":102553,"data":"","first_seen":"2026-04-09T18:56:49.836738Z","last_seen":"2026-04-09T19:00:32.837161Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2cb9030274017713592e1f1881652b10","sha1":"c2c538ff7c429114daa1991fdcf81e193d73c7f6","sha256":"c2f7de45899b9e05da2fa131157564005bc95ccd9da3e5eb7795a177201a2416","sha512":"be857146e2b7e7168f098cf884966afb33fd8283365f3171080ae2c3d808027b8648469b3531b96707d40f856d782f069833ac5d4babc1501029a2404f09d199","ssdeep":"","tlshash":"22c08cc4a0d22d041712681460af35e89024402670481b428c94d8682e220b48233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-04-09T19:00:32.923154Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1e6506abda1ffa5b9ab2721a0fee13f","sha1":"cc64d89d747a4c6f5293b262055d3cb8e175b738","sha256":"848a05dd565ed4ad22c665530b61473e4437ca86f8bd027a8c952177f73b5269","sha512":"ac564a39d053f7c5f6e636296207458bae1d069f50356ee85ac23a8045617ebbe8cb5f26870d5a19f2d3cf834bc578918ad2b9f46bb68e3d0961c68841bb6e17","ssdeep":"","tlshash":"ecc08cc4a0c32d001643641050af34e490348026b0481b428c94d8492e230b08233e98","size":139,"data":"","first_seen":"2023-06-07T05:45:46Z","last_seen":"2026-04-09T19:00:32.934574Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-98e4b612.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a92e2b49c34e666409a38ede171bbc6","sha1":"7bc7be0fd5243d68556b0a9a5b0ff701c8da0df6","sha256":"f8871a7525fb39a5459789c7c2d52be3ad8a1abc553cadf439d8ac2008353395","sha512":"fa6be5847c56a146128588372a98a1cd0f9fa9b9c94ae2b3fb2aef162ca835b01b648e2b08dcb54122219a52a538f98de6e92e0d3ec44bf018bb264073f5f963","ssdeep":"384:7ftwzD97AbSLs6I4F0akVfU2woWrgeI79h6kQcD4Wr+b+yCyKL:WNK61kVfULYsWr+b+yCyY","tlshash":"2f52e966f902993ef6ffa01140980050b6693ffb511948e2f9bc6e4e6352ef8f759708","size":13667,"data":"","first_seen":"2026-04-09T18:56:49.792699Z","last_seen":"2026-04-09T19:00:32.882074Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-09T19:00:32.922418Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5ddcf000fe640727c37a007add885f01","sha1":"c03cacf1f7fa18c439f4df83c545efdc7947979a","sha256":"1002ce8702b1ab8819bbaaa1107fcac63cc383b1ac134849914669ea3a821780","sha512":"16d0825adacbef5b34caf9e925d789b63afba408f7b8f9cf8ea2cd4de1bf92c21d1edb4a5f233fb755c7a9df1d0bdd22a86bfaac106e69457cd2832ace015a7d","ssdeep":"","tlshash":"bcc08cc8a1c26d001a06641010bf28e49034802674481b029d94d8482e320b08233ea8","size":139,"data":"","first_seen":"2024-11-12T13:07:34.2755Z","last_seen":"2026-04-09T19:00:32.935322Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d4726798ff8068ef13bc105558cb5214","sha1":"516c4c67c64898452570f3cff7085f7b6cb38c8b","sha256":"030770cf01d9f58e5628ef37f7ae8f2564abdd3be3b33bc1414b129f0e2f4888","sha512":"6f4ef01288597e18f0478e672bb347ed9fcc5d34bd5d2649965db526337193fcbdb322d4be85be5b4999f121e1613fdfd7b936ac8119fdd67f5fa6bc986bb6ea","ssdeep":"","tlshash":"b5c08cc4b2c67d105602641450af64e49034442ab0881b82dce4dc492e260b49233e98","size":145,"data":"","first_seen":"2024-12-08T15:39:09.830192Z","last_seen":"2026-04-09T19:00:32.933811Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4e21b6294a159caac1a3e807effc015a","sha1":"71a551b611567182002966a908a0f567c42dfc21","sha256":"ac00017ead4fcfda0c49b9909e5a56d786a1421624ff8538ca221b79dedc47f5","sha512":"b34650bcefc4a13674b51e7afec7db5acf6d63882e9b914be3609c0503a2313d4f294032e38179bc530d549f2569c1a56229a12b3e959674d7ec556d18bcc498","ssdeep":"","tlshash":"b3c08cc4a0d3be046612a41410af28e49024806a70889b12eca8d8883f660b08337e98","size":145,"data":"","first_seen":"2024-12-08T15:39:09.854585Z","last_seen":"2026-04-09T19:00:32.926174Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6f6515cf6ae8b8b6e7ff8f1d62280c4e","sha1":"a789878b8073d795d74c0be9bd92c2bbf5f4c6b1","sha256":"228b90c73f608a1a43ad053c62df1a8e512db8cd6aefaad49e3f2e1a602c7398","sha512":"104baf40ad35784adafb3476cee6e5dae7ae02db4312259801916224654dce31ef9788862200bb4e06790b42021f8d087f04aa548232a3eb201b54aeb7fecd70","ssdeep":"","tlshash":"bdc08cc8a0c22d101a06691020af24e4a0258027b0586b828c98d8582e620f0823bea8","size":145,"data":"","first_seen":"2024-12-08T15:39:09.845355Z","last_seen":"2026-04-09T19:00:32.920305Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4f032206eea492e3575ea5f6c7867f43","sha1":"e04fc5a06dc30cd49d365ace3220f0b3f746df7e","sha256":"a9302fb5a40bf253c5337ed2887eb01bf7efed372da5b669e65410e09735c453","sha512":"1fc125d6260218202f687d80f3b3dfd56d71b7813ecd072ae4f14e0ff95b9dd1df193b33f0696df53d1608ba024baaf3f463fac8eb0131672ac511901a6dcfbe","ssdeep":"","tlshash":"5fc08cc4a0c32d101602651011af25e890248026708c1b038ca4d84d3e220b09233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.516962Z","last_seen":"2026-04-09T19:00:32.919672Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/#/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d549d426f2be98d3d463a8f1e172be11","sha1":"b1a5a4f73c5c7ed77f24558baea0caf104bcd329","sha256":"73743816b3bf832c5542ccd44ca4da8675acd48b7c4b071e2cc4d43d808a434d","sha512":"48ad7b36b98095946472116a02425c340b48226ea5120dd3a6cc1ac3e61b6dbfaef3c8b919131030a71311016adcd79f554c0f586613840cdfb2fe39afbb3bad","ssdeep":"","tlshash":"31c08cc5b0c22d009a02642610af28e89024442670481b528c94dc482e220f08237e98","size":142,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-04-09T19:00:32.920998Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kkgwmexc.one/","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-09T18:56:18.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-1597\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5527,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"5dc94de4eb22aa9a61c725887b612ba3","sha1":"ba9233103141c4abea41fe050ffb05ce5ca0ea15","sha256":"7241a7a030b00afd353378586253eeb5f8de9ca8e6de8f3425e01b668b878eaa","sha512":"12bfb7da92b7fcb9f5eb1fc179ff95d1524b48fab2c9019fb9ce15f0adf0ead13a0336fa55c72c1ab512dd2babf677429b4bc4672095b8fc8c5d8d34d8543640","ssdeep":"96:+r82I84f53uSPWZz2I2t/+zr6TCZydHRH/g92mUsGKAiowGwuB1niHuiHuH/2:+FW9P2OuZCxfo2nfD3bwuB1niOiOf2","tlshash":"16b171b35ce48c5a2371412aaedbf018eb615183851a8c54b0cc54ee9fe5fe5c8d7b36","first_seen":"2026-04-09T18:56:49.784374Z","last_seen":"2026-04-09T19:00:32.87909Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1310,"timings":{"blocked":536,"dns":48,"connect":239,"send":0,"wait":238,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/charting_library/charting_library.min.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:19.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1a-2a6b\"\r\nexpires: Fri, 10 Apr 2026 06:56:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-09T19:00:32.904061Z","times_seen":642,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/vendor-38f76bb8.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:19.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/vendor-38f76bb8.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-e3629\"\r\nexpires: Fri, 10 Apr 2026 06:56:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":931369,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dde426fc60c74651d74b149b5e30072b","sha1":"1826662bd11055d1fe8e10123d3a0c8c2347eab9","sha256":"cbd45bc6c12ca4a98942ad7a86e7231fc76b0183b8bb3a3a6ca2d690c56de4cb","sha512":"54d569fc5837a14f2d53da36444287160d221c22d2505c8142d13d4d61563ca19cc437eda2ff815d729956ca1bee5c4b464661ab61686bf358a55be8d7d77798","ssdeep":"12288:WBIeDymlYRQN/CGlSVdulwN7C5cmwGxdGIioJWRjL/gVhyGx4aJ:WBIejg6KGsulwNG5cHskoJWRjL/gVkW","tlshash":"5d153bc97292f06147ab24e140bb0006f3396e59740e84a4f16dd9eb7d69d89e2b7f3c","first_seen":"2026-02-01T01:46:44.93087Z","last_seen":"2026-04-09T19:00:32.862293Z","times_seen":29,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getAllSetting","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":1208,"timings":{"blocked":490,"dns":37,"connect":224,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/currencyItem-15550dda.css","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-6d6\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-04-09T19:00:32.863556Z","times_seen":267,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getCoinList","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18368,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"866392b3d2d9e796442c70baab8f4ec3","sha1":"9b3da6fd30a2129afc616063dbc935260485ab9f","sha256":"73fef5648170e08ab6e52a2e23b0a6c9f2ff03401f8d6ce02f6abaa66812a99f","sha512":"3f97e43dfd99db42ce609d5b31c2e4964ae1c21faf3c8b05d68a5d8674670e2ac430b276368f77c7bdce94604fabb3d6568e84afe0e81d076810b22f091e079d","ssdeep":"192:VX7beXsAXkiSXeKcXyyX4D0XS0X341XppSUOguFwXdwY5K7KYf9CKr9njO1YIRkp:1HWZk7Jqn","tlshash":"36821f526528a5fdc4bec0c16ebf7d06618c326fe9c1cd1a96ca8d8c4ec8fb1150af06","first_seen":"2026-04-09T18:56:49.779232Z","last_seen":"2026-04-09T18:56:49.926035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getMt5Amount?coin=SILVER","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=SILVER HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getMt5Amount?coin=SILVER","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=SILVER HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"01dcc7589701f66a54a4d01671d047f8","sha1":"8f956df5327351b77df1048bf1d9e032874138ae","sha256":"f0472b2f9ae6aca8e8029c7fe86e5bb51a893e889470a7f911ddb30150c86a0f","sha512":"dc29b746256eae3e5c4c7b9a53e370381113f679af295044715254ec422c66d2f1116629821e4b6cbeadce2f0debd9ebd93e14162987dca8c51a1c892ae3f02a","ssdeep":"","tlshash":"b29002552c588242ac9314a5d5061324402431602725964ccc59912591885622140858","first_seen":"2026-04-09T18:56:49.926812Z","last_seen":"2026-04-09T18:56:49.926812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/18359/18359753.png?2.0.1774600705279","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.77.104","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:12:21 GMT","end":"Mon, 22 Jun 2026 08:12:20 GMT"},"fingerprint":{"sha1":"7D:5C:E8:83:7B:4B:E7:2D:D8:5A:4B:01:F0:D9:FB:4B:C8:E1:E4:A0","sha256":"1A:42:BD:FA:DD:C2:87:9C:97:CA:36:F8:07:8E:61:64:6F:C7:DE:57:45:E6:28:14:06:C6:33:9E:C7:89:7C:B3"}}},"request":{"raw":"GET /512/18359/18359753.png?2.0.1774600705279 HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 28817\r\netag: \"c9288de3a0ce6bfc2879c661d907afc3\"\r\nlast-modified: Wed, 23 Apr 2025 10:41:34 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=144, origin; dur=0, ak_p; desc=\"1775760982312_388255063_548309953_14491_1016_0_33_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c9288de3a0ce6bfc2879c661d907afc3","sha1":"14905a440ab9a3dd269fd54103bb7944d6e38131","sha256":"38be039cc9cb33967997908a2cb151300a5399c006f32e6c9b5534caebd9d87f","sha512":"1bf531894403f3e4f3ed7ff8f9cfb9fa1cd396ffab8d8933f7baa9adbbdbf80ae810502116a6baf624c1eb3b1e6e57564c9b8c665cdcdeac23b1522a9a22e968","ssdeep":"768:DmfZ5QZKu84oIkxnncevqeQAgCuRZln3WlSEzHuTF6pWR:JZB84oI+RYNC0ZJWlSAg8Y","tlshash":"9cd2e154545ae62de73b0c34ecb1bfc516a7aaba10dab160ce3c974b0e76f81312c436","first_seen":"2026-01-11T16:22:54.67502Z","last_seen":"2026-04-09T19:00:32.917087Z","times_seen":28,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":23,"connect":5,"send":0,"wait":147,"receive":23,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/tron.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/tron.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F65768F57931375F536D\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Mon, 20 Oct 2025 08:18:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-09T19:00:32.909659Z","times_seen":348,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":1197,"dns":0,"connect":0,"send":0,"wait":293,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s7c8aa40bb76d477da70bc7b8e2f7ccf8.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s7c8aa40bb76d477da70bc7b8e2f7ccf8.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3668\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657B1E823323752B286\r\nAccept-Ranges: bytes\r\nETag: \"A60A6E1B1774AB016EDF208B254728E8\"\r\nLast-Modified: Mon, 20 Oct 2025 12:46:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10484738173944458253\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pgpuGxd0qwFu3yCLJUco6A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a60a6e1b1774ab016edf208b254728e8","sha1":"4c81170331bc0f984c0100cf38abb2ec456ad89c","sha256":"d93d2738cf78a7056dae68db2bd09605792b34f49836ec418cccad8c86ea76ea","sha512":"3f55f94b9f743166f9167da71bff63153a257210a502125a6315654443f3046cf9f9e03b87b1cc51951baf540d4151aad42e37b56ad1e78933db693bda13f1ed","ssdeep":"","tlshash":"ec717dfdb1a8aa0cd45563379a7fc1819ca57f9e0c6ec96fb81e87e117ac00d10e0a59","first_seen":"2026-02-01T01:46:44.947233Z","last_seen":"2026-04-09T19:00:32.834951Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":1223,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e24a82bd1d5be80a39683093979692cd","sha1":"7c4c8aedb4460a8a5780171c25eb808c4dcd2a38","sha256":"4e47c779780e244647cc611152d55463b24923d1745edc97107bb198034e7ab3","sha512":"d8c49ed7e1b2f768830095a1d4d720195f81e5b3dd5fa14686431f022bf1fff977c9a7615aa5c5e37d1f8a6c7362db19ca79a72146c0d95b59f16b107b636196","ssdeep":"","tlshash":"8051291f213c8e69080948c764cdbdcad79e1b5bd7a0cc70a65bcf6c45f29bb0b1a648","first_seen":"2026-02-01T01:46:44.968709Z","last_seen":"2026-04-09T19:00:32.913373Z","times_seen":27,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/platform/dev/favicon.ico?2.0.1774600705279","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:24.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1774600705279 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:24 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 25366\r\nlast-modified: Sat, 25 Oct 2025 14:47:00 GMT\r\netag: \"68fce2e4-6316\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25366,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 7 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced, 32 bits/pixel","md5":"29ac69b882f45976289ad01c4330582c","sha1":"a519efaa6295e2ff74c34c9a1488962e7953f30b","sha256":"a9307fc801c54ed426d7dc5445f47481580be5b2bf7409ba7cbe7f106f400fa1","sha512":"10dec13307be999aac8de6d09e1aa5e311dcda859f9f5cd7c975aeb1608e39ece55acbd31a5b1d6dd4d94ee88ebcb1b11f714904b9382abae80731de5b98f03b","ssdeep":"768:681E9l0bDA9Aeb4lXjTLGauOKNS3gVw2RJiZE:+9Svab4lTTya1KNugVL9","tlshash":"6db2b05f369be82fe65fd74bdbab329ef830719e741595411626c850bf8af88803044e","first_seen":"2026-02-01T01:46:44.969489Z","last_seen":"2026-04-09T19:00:32.822808Z","times_seen":29,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getCoinList","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":1227,"timings":{"blocked":500,"dns":35,"connect":229,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/tw-80108ea2.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/tw-80108ea2.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-9287\"\r\nexpires: Fri, 10 Apr 2026 06:56:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37511,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27714)","md5":"2d6eca53d12cfa1c57fa5f09582ef7a4","sha1":"f46c0f76d3266d6dc3dfa9b32060572720f9c7ec","sha256":"7a2602fd14696855c68cea5749ae8a347ef9673289ae11de8f6b7ef5a59b8646","sha512":"e405663a3ed970eebc6ff5bf2301f82d4743e9bb38cd7e5ea19780a3aafd1ad83e1da3427e47f2c3094f0073c7e3e453d5c523bd85e3fbc49110a03a6db45a54","ssdeep":"768:1Bhu4hgcnMHix55Oy96wjRP89Nn82vaFRt5FG4Xtw:1LGcMszOujR7vXtw","tlshash":"d9f207c46ceedead44e3a53bb04e694260f79e89c721c0295fec59f96284b13d793720","first_seen":"2026-02-01T01:46:44.945047Z","last_seen":"2026-04-09T19:00:32.879854Z","times_seen":29,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/resource/svg/light/user.svg?2.0.1774600705279","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1774600705279 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-09T19:00:32.880512Z","times_seen":231,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/litecoin.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/litecoin.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F6574C8B3732374434E7\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Mon, 20 Oct 2025 08:17:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-04-09T19:00:32.8856Z","times_seen":379,"resource_available":false,"data":null}},"time_used":1473,"timings":{"blocked":1191,"dns":0,"connect":0,"send":0,"wait":268,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/solana.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/solana.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657C390C33030B98298\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Mon, 20 Oct 2025 08:18:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-09T19:00:32.909029Z","times_seen":412,"resource_available":false,"data":null}},"time_used":1464,"timings":{"blocked":1193,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/binance-coin.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/binance-coin.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657794D103231B86ADD\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Mon, 20 Oct 2025 08:17:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-04-09T19:00:32.864639Z","times_seen":424,"resource_available":false,"data":null}},"time_used":1468,"timings":{"blocked":1193,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s68fbd5a509a34f3285eb783c6a3db2c7.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s68fbd5a509a34f3285eb783c6a3db2c7.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4096\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F65768F5793137BF536D\r\nAccept-Ranges: bytes\r\nETag: \"905AF5999E8F9881B9914F01C041BA82\"\r\nLast-Modified: Mon, 20 Oct 2025 12:48:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14843586186598874018\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kFr1mZ6PmIG5kU8BwEG6gg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"905af5999e8f9881b9914f01c041ba82","sha1":"f4c4e874e1fc6f89b92228def6102cbc4a9f0046","sha256":"5386a09dc29d78eced3974bda647c0a90d5c2346889fcd682a9de81cbbd26c54","sha512":"81427b279bbe735e327afac1d166f002086c4a06363970db0bd48d4298120ee139e0d95c94f391c730a6ee62de1f183409d48074378e405f1e23ada7bde14f62","ssdeep":"","tlshash":"ff816d13bd0b5e0b514fb358c96ce0f0473e83e467a206a6c7db1bcd40a509b9978665","first_seen":"2026-02-01T01:46:44.939166Z","last_seen":"2026-04-09T19:00:32.819663Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1718,"timings":{"blocked":1432,"dns":0,"connect":0,"send":0,"wait":285,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/coinInfo.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/coinInfo.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657C78BAF3137A95CBC\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Mon, 20 Oct 2025 08:17:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-04-09T19:00:32.888627Z","times_seen":393,"resource_available":false,"data":null}},"time_used":1513,"timings":{"blocked":1193,"dns":0,"connect":0,"send":0,"wait":285,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/filters-afea0ca9.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/filters-afea0ca9.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-c42\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3137)","md5":"84e529be9abd4311cb4de39eae43c02d","sha1":"8d909db36e270ceb82882589f543a988607ecef3","sha256":"da3980c8503ad8665e419a75d1f494aa32642266b71e21dff7bf0074395f462c","sha512":"01946cc75e24d333ef716697f73017b0ec6700a2d2fdbd3d8daf8c1b7b31b782efe5f74e6e8cbc45e5569a7943cef9841ac00c621c6e3eeaf8d495b13bc85c38","ssdeep":"","tlshash":"085125edfcc7613356ee59f940288410728eae20686e0a4de54bd0455a73888e0bf768","first_seen":"2026-04-09T18:56:49.821622Z","last_seen":"2026-04-09T19:00:32.88277Z","times_seen":8,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-17e17425.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-17e17425.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-1238\"\r\nexpires: Fri, 10 Apr 2026 06:56:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4664,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4657)","md5":"a716cd7eb801183bede08b4d789dab57","sha1":"e2ed6d192e3cc954af72f9d8e878cf07a56e0aa5","sha256":"952af14e5993aac5e9d8be781364fcdd104a1c1895604e5bd7e11d7013ffcb50","sha512":"b3004819799aaa6dc38f42a85e9fe3550727c19966ae64df8e36a36156441d6d2a15d7010261f4cb8a0a829caa5189b1f9bade71b4fea7a08fdeb1e6e88822c6","ssdeep":"96:bw+Cfp9YIqD+wSvxQMyntb1kiGnRbT/3hvzA3X6Nth+jA:bw+Cf7YIqiwSyntbi39vhv0XQsA","tlshash":"a0a1b999f80285bfe9771444088c0410319dbbfab21588f1fbfe9d0a67b897dd754366","first_seen":"2026-04-09T18:56:49.781874Z","last_seen":"2026-04-09T19:00:32.91153Z","times_seen":8,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/filters-afea0ca9.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/filters-afea0ca9.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-c42\"\r\nexpires: Fri, 10 Apr 2026 06:56:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3137)","md5":"84e529be9abd4311cb4de39eae43c02d","sha1":"8d909db36e270ceb82882589f543a988607ecef3","sha256":"da3980c8503ad8665e419a75d1f494aa32642266b71e21dff7bf0074395f462c","sha512":"01946cc75e24d333ef716697f73017b0ec6700a2d2fdbd3d8daf8c1b7b31b782efe5f74e6e8cbc45e5569a7943cef9841ac00c621c6e3eeaf8d495b13bc85c38","ssdeep":"","tlshash":"085125edfcc7613356ee59f940288410728eae20686e0a4de54bd0455a73888e0bf768","first_seen":"2026-04-09T18:56:49.821622Z","last_seen":"2026-04-09T19:00:32.88277Z","times_seen":8,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s51310247ad914d608ef9d8d822731d74.png","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s51310247ad914d608ef9d8d822731d74.png HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5604\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657794D1032317D6ADD\r\nAccept-Ranges: bytes\r\nETag: \"399459B0A6C2D1F6AEA8412A49416185\"\r\nLast-Modified: Tue, 21 Oct 2025 02:01:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6879043707344820846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OZRZsKbC0fauqEEqSUFhhQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"399459b0a6c2d1f6aea8412a49416185","sha1":"6b1daa5779c7470df3afa30969836b982ebd9813","sha256":"bbfc229fa41109c5c83c5a54856a47a818961d0de79f37430b9c1da79d6025b7","sha512":"db57e2b5e8a1bf8f2aed3b2f3892a900443a1da0d18eff7d070d8680e1faa9a98c18ce0a5dfa0e691a9fbdc0dc628fe8a65815175b9f3e2793e2bbc0dccf5ef6","ssdeep":"96:G9kLJrnvKpc2K8wMdAJbPbQb2v/KqzlLGvrjowEu/YdjCo0BrE3BXonZ5:JLJrnv52K8bqtviqxLG3owMJM5","tlshash":"1fc17c97577d12ba0671007ee87de8328ac4af204d94436df8226eba7b655383c306e2","first_seen":"2026-02-01T01:46:44.930004Z","last_seen":"2026-04-09T19:00:32.878373Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2259,"timings":{"blocked":999,"dns":58,"connect":262,"send":0,"wait":264,"receive":0,"ssl":672},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s426bf2c3993d42bcb46528563a229619.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s426bf2c3993d42bcb46528563a229619.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8067\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657C78BAF3137805CBC\r\nAccept-Ranges: bytes\r\nETag: \"A6940793B69CB2FC56CB0E06A4ADD79E\"\r\nLast-Modified: Mon, 20 Oct 2025 12:03:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1973300896272251076\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ppQHk7acsvxWyw4GpK3Xng==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 200, 8-bit/color RGBA, non-interlaced","md5":"a6940793b69cb2fc56cb0e06a4add79e","sha1":"cbbb95dce33f8b0a6ac5e7f3be38c71fd8c50b89","sha256":"d499dbe77dedaa5e6efa1bd7c7cf3c33872b387ea521cbddb110b13cfb4f7006","sha512":"978d797837b2e3dab5004c544461ed122ee1540174148c1a1e2f47e12c9ff030bda49c49321cdb533a4e61b12f1bdc6852cdb54b11587897d88bb00f00f3b67f","ssdeep":"192:F12wAczIIPauwMZ9qipyLpcIZ8CBVwuRK4rFNE7mOgYbQzF:fAoIktwM9pyOI/yw5ACqK","tlshash":"7bf1afcff389782cd43776a38ad4e6c72b804c647e53c92dfc415885360a76d809b5a2","first_seen":"2026-02-01T01:46:44.95195Z","last_seen":"2026-04-09T19:00:32.848576Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2235,"timings":{"blocked":980,"dns":41,"connect":272,"send":0,"wait":274,"receive":0,"ssl":662},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/resource/svg/light/mengbanzu12.svg?2.0.1774600705279","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1774600705279 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-322\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-09T19:00:32.824465Z","times_seen":234,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/vendor-38f76bb8.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/vendor-38f76bb8.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-e3629\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":931369,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dde426fc60c74651d74b149b5e30072b","sha1":"1826662bd11055d1fe8e10123d3a0c8c2347eab9","sha256":"cbd45bc6c12ca4a98942ad7a86e7231fc76b0183b8bb3a3a6ca2d690c56de4cb","sha512":"54d569fc5837a14f2d53da36444287160d221c22d2505c8142d13d4d61563ca19cc437eda2ff815d729956ca1bee5c4b464661ab61686bf358a55be8d7d77798","ssdeep":"12288:WBIeDymlYRQN/CGlSVdulwN7C5cmwGxdGIioJWRjL/gVhyGx4aJ:WBIejg6KGsulwNG5cHskoJWRjL/gVkW","tlshash":"5d153bc97292f06147ab24e140bb0006f3396e59740e84a4f16dd9eb7d69d89e2b7f3c","first_seen":"2026-02-01T01:46:44.93087Z","last_seen":"2026-04-09T19:00:32.862293Z","times_seen":29,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-46505f61.css","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-46505f61.css HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-a01\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"421a777305f1afa9edf6f63fb2a8f4dd","sha1":"52b5e0f4f8a25109d5788207bde35b111d4a413f","sha256":"46505f61ad8cc779e83b14bea9807035175831a801d75e8660f0ea840a60a2df","sha512":"ce36f3dabd3c987b2a13e7b4c4397f0d80dd9b1cf77507b410a0c0363e205724273d2ec4f374972768e4412ec80f2a19bcf58b0a3570c646d6d111d2b21c37bf","ssdeep":"","tlshash":"1251315cfe9415314cbbe98faf585b8880007ee2e44a9dd4f54347260acf6933b2075a","first_seen":"2025-08-04T13:33:44.839567Z","last_seen":"2026-04-09T19:00:32.876904Z","times_seen":39,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-c32bc07b.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-c32bc07b.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\netag: \"69c64202-1fe\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"af3d2429648edadfbfd1ac664edc41eb","sha1":"4907dfbc500a5d6108241ae107190d83bdce1884","sha256":"89e1190b4014852c292aa2bcaa5168382bb53dc9d891881b5f5d5b38bb20c19b","sha512":"9de61b4bcd25856e39fcce654001eaf53535b4c3b44a11f00c963f0ae851409c0e0847a3515ad7063de8bb03e72c8474c02889c447d275782805c1d55f449dab","ssdeep":"","tlshash":"8ef00e2f7daa80721bf388eca1630820b71e1b9a3754c5a4d5c70e10d778ce7d16e218","first_seen":"2026-04-09T18:56:49.814984Z","last_seen":"2026-04-09T19:00:32.869157Z","times_seen":8,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/ethereum.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ethereum.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F6574C8B3732372A34E7\r\nAccept-Ranges: bytes\r\nETag: \"12D9722461759CEFFF02D9076A3D2718\"\r\nLast-Modified: Mon, 20 Oct 2025 08:17:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EtlyJGF1nO//AtkHaj0nGA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-04-09T19:00:32.890214Z","times_seen":373,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":1,"connect":255,"send":0,"wait":257,"receive":1,"ssl":679},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s45bdca21b1334f569a8082493ccc6a3a.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s45bdca21b1334f569a8082493ccc6a3a.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7514\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F658C390C33030228398\r\nAccept-Ranges: bytes\r\nETag: \"81D78026D3724B07890B98BEC4CC06FB\"\r\nLast-Modified: Mon, 20 Oct 2025 12:44:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15527257983622601881\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gdeAJtNySweJC5i+xMwG+w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"81d78026d3724b07890b98bec4cc06fb","sha1":"58f8311e23f02b4e2af8c547cc7d3df9959d125c","sha256":"ed77ffbe2e7519bd091021725155ec2d03fdc780dec3f220acbf647720106c49","sha512":"2e82f036189d4e1763a0365f5eed4597b80ec73219b92568ac2bcdeddfa8608edc76193a829335ba525506d7accf0d1f6b08432dbaad4aa1406e42f8c5a742ed","ssdeep":"96:t7AxPstkZIys03+LO9Qp/l32WE6FsBpSaJzZtqGeluuwRJmWn5ycUgJ7KnGup:gkKIysIqRl3ZFS0GeluuLo5c0KGq","tlshash":"4ef1afee26888bdb48d5d988a9c627eac07e32154ea51fc9e41350d698901cc35dc7d9","first_seen":"2026-02-01T01:46:44.959485Z","last_seen":"2026-04-09T19:00:32.836117Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1978,"timings":{"blocked":1710,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s9dfe1ee2f084403883324503e53bb1eb.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s9dfe1ee2f084403883324503e53bb1eb.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10004\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F65868F579313705546D\r\nAccept-Ranges: bytes\r\nETag: \"CB30EFEEDC5D285C5723CBF9CE028C9C\"\r\nLast-Modified: Mon, 20 Oct 2025 12:44:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15097534368846664219\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: yzDv7txdKFxXI8v5zgKMnA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"cb30efeedc5d285c5723cbf9ce028c9c","sha1":"053b2fea307d5804388ef15e48147cbfb1a546cc","sha256":"eaed459617459a6d84ed4b064d3c2a346302af1dbfbd294badb28b4c30ccde26","sha512":"aba6f5d524f0d8c7efda7e8e0ec4706dd71026bd039cd8fee95c38b1ef9c8253c07dc87092ba8d7f921e70a2da155519c830e1e5301d036bcf8a8921f4196377","ssdeep":"192:ztqfoxt0muL33wWyUxL9xQku46kpGfeUv/dP55/AWQBGES92W12gI:znYmQnrykL9bqhZ5eWj2WUgI","tlshash":"cc22c00a19790e5ac86a11795f2ee8e522f4d7b6c4f0829e7949853cb2e3394c8dff40","first_seen":"2026-02-01T01:46:44.935988Z","last_seen":"2026-04-09T19:00:32.865767Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2061,"timings":{"blocked":1771,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s1bbad1b055b2438eac9de234cf2505af.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:29.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s1bbad1b055b2438eac9de234cf2505af.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 427070\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F65DB1E823323773B786\r\nAccept-Ranges: bytes\r\nETag: \"131C7CEDFAF6C503122C2734451BF901\"\r\nLast-Modified: Tue, 21 Oct 2025 02:27:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16326524148542171094\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Exx87fr2xQMSLCc0RRv5AQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":427070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1144 x 676, 8-bit/color RGBA, non-interlaced","md5":"131c7cedfaf6c503122c2734451bf901","sha1":"fb44dc40db14e8f5028b34bbd38f3090ed909732","sha256":"282531432c0342163af31989b0ed49c4d9c5bf54e5674d4f9e68b7dd0b61e44c","sha512":"7e625996dc02b1321a6dce56b9650b66f9b68b9242d6eebcff594411e72b31221520ea184e9fd36ba6f8cc48b1911a9eaacb8a3d514be2a32b4417d9ad34ad9d","ssdeep":"12288:r+0bDxe6ItHNZn3vv39QblAVihCG1MBQvrZMWtQi:r+gD5SHD3vvtQblq6XMBQTZv+i","tlshash":"12942392d5cc85fa68ba174879ea2530c5ccad206e6081abb114cd6ffe04ec7ed2d56c","first_seen":"2026-02-01T01:46:44.956663Z","last_seen":"2026-04-09T19:00:32.902735Z","times_seen":27,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-2170d384.css","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-2170d384.css HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-27c4\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10180,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10179)","md5":"3d9a3b3467d51cc5413e92632d925b83","sha1":"f5c0e17a96207f4919fa916a066068d84229a2db","sha256":"2170d384d036d10dad4f6d019d4eccb0bbea1f6114109ade0d27eeaea80580ec","sha512":"ef20196ac737c5e04884b6c3fd1b8f88003cc7c236d1639970f20386d591954dcd382aa195d92b0ad092ae3096460198158cc51728524292476c9271deea09ca","ssdeep":"96:tYyGhezOETj+jXMp5mXUVM2tL0a5OsenD62rm8Ikc4RuyzLPg3gJCKk:tYhePf+EYveqDcwuyzLPg3gJS","tlshash":"7122422df3992738ac37e266afd80dcce11cb911e593dda4e56796220edb1e3163008d","first_seen":"2026-02-01T01:46:44.95854Z","last_seen":"2026-04-09T19:00:32.912745Z","times_seen":29,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-98e4b612.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-98e4b612.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-3563\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13667,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13666)","md5":"3a92e2b49c34e666409a38ede171bbc6","sha1":"7bc7be0fd5243d68556b0a9a5b0ff701c8da0df6","sha256":"f8871a7525fb39a5459789c7c2d52be3ad8a1abc553cadf439d8ac2008353395","sha512":"fa6be5847c56a146128588372a98a1cd0f9fa9b9c94ae2b3fb2aef162ca835b01b648e2b08dcb54122219a52a538f98de6e92e0d3ec44bf018bb264073f5f963","ssdeep":"384:7ftwzD97AbSLs6I4F0akVfU2woWrgeI79h6kQcD4Wr+b+yCyKL:WNK61kVfULYsWr+b+yCyY","tlshash":"2f52e966f902993ef6ffa01140980050b6693ffb511948e2f9bc6e4e6352ef8f759708","first_seen":"2026-04-09T18:56:49.792699Z","last_seen":"2026-04-09T19:00:32.882074Z","times_seen":8,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-c32bc07b.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-c32bc07b.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\netag: \"69c64202-1fe\"\r\nexpires: Fri, 10 Apr 2026 06:56:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"af3d2429648edadfbfd1ac664edc41eb","sha1":"4907dfbc500a5d6108241ae107190d83bdce1884","sha256":"89e1190b4014852c292aa2bcaa5168382bb53dc9d891881b5f5d5b38bb20c19b","sha512":"9de61b4bcd25856e39fcce654001eaf53535b4c3b44a11f00c963f0ae851409c0e0847a3515ad7063de8bb03e72c8474c02889c447d275782805c1d55f449dab","ssdeep":"","tlshash":"8ef00e2f7daa80721bf388eca1630820b71e1b9a3754c5a4d5c70e10d778ce7d16e218","first_seen":"2026-04-09T18:56:49.814984Z","last_seen":"2026-04-09T19:00:32.869157Z","times_seen":8,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/4318/4318318.png?2.0.1774600705279","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.77.104","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:12:21 GMT","end":"Mon, 22 Jun 2026 08:12:20 GMT"},"fingerprint":{"sha1":"7D:5C:E8:83:7B:4B:E7:2D:D8:5A:4B:01:F0:D9:FB:4B:C8:E1:E4:A0","sha256":"1A:42:BD:FA:DD:C2:87:9C:97:CA:36:F8:07:8E:61:64:6F:C7:DE:57:45:E6:28:14:06:C6:33:9E:C7:89:7C:B3"}}},"request":{"raw":"GET /512/4318/4318318.png?2.0.1774600705279 HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14060\r\netag: \"eafb9df5142c4c735040786a85d7e898\"\r\nlast-modified: Tue, 22 Apr 2025 05:04:31 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1775760982349_388255063_548309961_15_861_0_0_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"eafb9df5142c4c735040786a85d7e898","sha1":"1e866e64c80f9f357e6265cf373691b7138a298d","sha256":"1a17cf3129c2b799290361efa182916652b506ce8f4ddb8c6e276dfa745a2cb3","sha512":"5140391b82760a229c40495147c6b968296634078f4901ff02a3496fa81e3b7194336d7311328e1102611f1ace6de8bf6710ff2df01f1a42404c4468ddbaec48","ssdeep":"384:lkPAVkfN37I+REEeEh7l8OE1MP0e5+XcHS:lsAVkt7ICVc4gyS","tlshash":"62529ea6513904d3daec19f7196e42c9eee3f587a11377bc95140bf345f2016ae90eb0","first_seen":"2025-12-30T23:38:20.660054Z","last_seen":"2026-04-09T19:00:32.901096Z","times_seen":48,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":62,"dns":28,"connect":5,"send":0,"wait":3,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s2c035533adaa4f4098389bdf78a29fae.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s2c035533adaa4f4098389bdf78a29fae.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10004\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F6574C8B3732376334E7\r\nAccept-Ranges: bytes\r\nETag: \"CB30EFEEDC5D285C5723CBF9CE028C9C\"\r\nLast-Modified: Mon, 20 Oct 2025 12:44:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15097534368846664219\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: yzDv7txdKFxXI8v5zgKMnA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"cb30efeedc5d285c5723cbf9ce028c9c","sha1":"053b2fea307d5804388ef15e48147cbfb1a546cc","sha256":"eaed459617459a6d84ed4b064d3c2a346302af1dbfbd294badb28b4c30ccde26","sha512":"aba6f5d524f0d8c7efda7e8e0ec4706dd71026bd039cd8fee95c38b1ef9c8253c07dc87092ba8d7f921e70a2da155519c830e1e5301d036bcf8a8921f4196377","ssdeep":"192:ztqfoxt0muL33wWyUxL9xQku46kpGfeUv/dP55/AWQBGES92W12gI:znYmQnrykL9bqhZ5eWj2WUgI","tlshash":"cc22c00a19790e5ac86a11795f2ee8e522f4d7b6c4f0829e7949853cb2e3394c8dff40","first_seen":"2026-02-01T01:46:44.935988Z","last_seen":"2026-04-09T19:00:32.865767Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":1437,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/resource/fonts/DINOT-Medium.otf","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkgwmexc.one/assets/index-e71d3256.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-04-09T19:00:47.553173Z","times_seen":614,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s1d5c235239fd47ae863a3759cbcec1a1.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:23.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s1d5c235239fd47ae863a3759cbcec1a1.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 511852\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657B1E8233237B2B286\r\nAccept-Ranges: bytes\r\nETag: \"20F814C0966EAD8FB9C0039374D4FB7A\"\r\nLast-Modified: Tue, 21 Oct 2025 02:32:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17272770807041561532\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IPgUwJZurY+5wAOTdNT7eg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":511852,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1155 x 687, 8-bit/color RGBA, non-interlaced","md5":"20f814c0966ead8fb9c0039374d4fb7a","sha1":"637c00f54603a863fdd27e9d134167a68e8256d3","sha256":"05b8baa9fd8851915a388b4107ae1e7f8ecbff8152e2d965ac31a0d90c6d2845","sha512":"350289db9eee3ac8e06e966448ff6ffcf801c8b0d1da41fd8d0157914661f13619166f1a10e3176002576abbcc9724b1775d9eb3126b2a868495c468532063ab","ssdeep":"12288:V+s5ExRCUfzivQTfL1wOkur+9VsYyhJko+zSo+llkxmtgxuZ8Y:BEDCo7L1wOXa9kblSq8Y","tlshash":"e6b423c4aa958de09c9abadfc66b0c8990915919c7bb20e253cb4c32447fbf2537875c","first_seen":"2026-02-01T01:46:44.967592Z","last_seen":"2026-04-09T19:00:32.910316Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2111,"timings":{"blocked":825,"dns":0,"connect":0,"send":0,"wait":308,"receive":978,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/platform/dev/logo_144.png?2.0.1774600705279","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:24.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1774600705279 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 25 Oct 2025 14:44:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fce266-f93f\"\r\nexpires: Sat, 09 May 2026 18:56:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGB, non-interlaced","md5":"6bab82675330ebfff98628fd27c3196c","sha1":"6c9bba357abb0298c1faf400eed16e66b1243c70","sha256":"47d2824a0c652f0d0adc8cd349d1e7d82a4cec33f12542fadce76377009ef517","sha512":"f16eabb429f152805a4ddd9939cc408f298f43610374beb7324fd7bd4ecd05c0231039257c960d7b5d5437195df6e4dd5f956890035acf8f0fdda88396d007b5","ssdeep":"1536:LovHiQb9lFtls1O19ZzOUUVDkUtpuuixZvMYyN8BnitRuXq5:LovHxrsOpqU8kUnuTtMYTdScq5","tlshash":"f553e1cd4822f87aee68116cdb340f6d272656d989f393dcdc6c5a396d20c05bb819f8","first_seen":"2026-02-01T01:46:44.927316Z","last_seen":"2026-04-09T19:00:32.915863Z","times_seen":29,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/resource/fonts/Arial.ttf","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kkgwmexc.one/assets/index-e71d3256.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:20 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-09T19:00:47.496455Z","times_seen":888,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":662,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getAllSetting","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11998,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11666), with no line terminators","md5":"5465a1f1c89ac4530eb27775d83439bf","sha1":"96511eb494222ed7b17f4c269f38a0b7229c7eb4","sha256":"3428a5fe2eab6bab8c7f9417df7dc3dd87d1bb40c8947597f1f1d755553f5539","sha512":"8db3789392933e448e0281b62c89fccd44199f48ac849f83ad5cb7a152be40845b93c4a1d5f2dc7a5d0620fc54871de31b860b6bad28cd8e68535b75792c9557","ssdeep":"192:k1Ii2LOSpQ+oYS+Rb3uc2i1VBK8FeWei9WQHXA9vKVax1Wk8Dq2sKZ5cbvvfvGnN:3uGjDRFVHoigx1l2tevnGDjsMMyHPm2Z","tlshash":"3132365b31d8ccbdc6da59c5d0ab3a4ab99c38bbdd80dc45e4a7af5ccc599b2440b00e","first_seen":"2026-02-01T01:46:44.936759Z","last_seen":"2026-04-09T19:00:32.82129Z","times_seen":27,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/resource/svg/light/zu447.svg?2.0.1774600705279","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1774600705279 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-04-09T19:00:32.875227Z","times_seen":270,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025sc2af162a786f4f15af82ea728b858553.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sc2af162a786f4f15af82ea728b858553.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3668\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F658794D103231356BDD\r\nAccept-Ranges: bytes\r\nETag: \"A60A6E1B1774AB016EDF208B254728E8\"\r\nLast-Modified: Mon, 20 Oct 2025 12:46:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10484738173944458253\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pgpuGxd0qwFu3yCLJUco6A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a60a6e1b1774ab016edf208b254728e8","sha1":"4c81170331bc0f984c0100cf38abb2ec456ad89c","sha256":"d93d2738cf78a7056dae68db2bd09605792b34f49836ec418cccad8c86ea76ea","sha512":"3f55f94b9f743166f9167da71bff63153a257210a502125a6315654443f3046cf9f9e03b87b1cc51951baf540d4151aad42e37b56ad1e78933db693bda13f1ed","ssdeep":"","tlshash":"ec717dfdb1a8aa0cd45563379a7fc1819ca57f9e0c6ec96fb81e87e117ac00d10e0a59","first_seen":"2026-02-01T01:46:44.947233Z","last_seen":"2026-04-09T19:00:32.834951Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1978,"timings":{"blocked":1713,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getAllSetting","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11998,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11666), with no line terminators","md5":"5465a1f1c89ac4530eb27775d83439bf","sha1":"96511eb494222ed7b17f4c269f38a0b7229c7eb4","sha256":"3428a5fe2eab6bab8c7f9417df7dc3dd87d1bb40c8947597f1f1d755553f5539","sha512":"8db3789392933e448e0281b62c89fccd44199f48ac849f83ad5cb7a152be40845b93c4a1d5f2dc7a5d0620fc54871de31b860b6bad28cd8e68535b75792c9557","ssdeep":"192:k1Ii2LOSpQ+oYS+Rb3uc2i1VBK8FeWei9WQHXA9vKVax1Wk8Dq2sKZ5cbvvfvGnN:3uGjDRFVHoigx1l2tevnGDjsMMyHPm2Z","tlshash":"3132365b31d8ccbdc6da59c5d0ab3a4ab99c38bbdd80dc45e4a7af5ccc599b2440b00e","first_seen":"2026-02-01T01:46:44.936759Z","last_seen":"2026-04-09T19:00:32.82129Z","times_seen":27,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s375a738b2b664357a1d7b444fb527c04.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:26.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s375a738b2b664357a1d7b444fb527c04.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 413968\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F65AB1E8233237E3B486\r\nAccept-Ranges: bytes\r\nETag: \"EF8DA4340EA09194449797EADBBE4044\"\r\nLast-Modified: Tue, 21 Oct 2025 03:01:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10685949439234624025\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 742kNA6gkZREl5fq275ARA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":413968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1171 x 494, 8-bit/color RGBA, non-interlaced","md5":"ef8da4340ea09194449797eadbbe4044","sha1":"8aef68d60a02c0e47e8c16b2f629f4f3eda3df7a","sha256":"3edccec8435d2539e16ec156ba67f575df8377571acef687300fde88e5685656","sha512":"18dc3932b80900613258d7a7eb71752444b544010be87cbd9e7db8d3eb106fffb5e1d7eb78012218b30071689a57e2c32ee6a45fb63223a337a9e3abc9f17989","ssdeep":"12288:2kzRl/MKyrf3ElmQU4kO/5sQ24+bjgITYWIf:2kv/xynQU4k25s9bjzTYf","tlshash":"04942338015a85bccbf31d58c86b285792da530784b1983416fbda344eda24973fbfa7","first_seen":"2026-02-01T01:46:44.949037Z","last_seen":"2026-04-09T19:00:32.881281Z","times_seen":27,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-bc011be9.css","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\netag: \"69c64202-18d\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-09T19:00:32.910942Z","times_seen":375,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/currencyItem-5524b6be.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/currencyItem-5524b6be.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-4b6\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"87926059f751a972646ae6693524f4f5","sha1":"61d76dc917fe0ad9e154f13225804f3c45bb6bd7","sha256":"cc82e92a9adfad1db787f3f4db3b5e9e387cd00df73cde4c63766cdb1f3b5ffc","sha512":"966b38a245e00c6b298e6545880171e152bb3818e2e35c02e22f2f769da029b3a92b7e801d75504a76f739e638367014abe0e7e98d3b460bfa66aa2794ce715e","ssdeep":"","tlshash":"a321df9aad01c7b1cbbe906285bd4414130e7bea700181c1ebed158a378a5fcd728a31","first_seen":"2026-04-09T18:56:49.817433Z","last_seen":"2026-04-09T19:00:32.877634Z","times_seen":8,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/5572/5572192.png?2.0.1774600705279","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.77.104","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:12:21 GMT","end":"Mon, 22 Jun 2026 08:12:20 GMT"},"fingerprint":{"sha1":"7D:5C:E8:83:7B:4B:E7:2D:D8:5A:4B:01:F0:D9:FB:4B:C8:E1:E4:A0","sha256":"1A:42:BD:FA:DD:C2:87:9C:97:CA:36:F8:07:8E:61:64:6F:C7:DE:57:45:E6:28:14:06:C6:33:9E:C7:89:7C:B3"}}},"request":{"raw":"GET /512/5572/5572192.png?2.0.1774600705279 HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 20095\r\netag: \"08c2366e1561e939f1293175b61da8bc\"\r\nlast-modified: Fri, 18 Apr 2025 19:13:19 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1775760982348_388255063_548309958_42_920_0_0_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"08c2366e1561e939f1293175b61da8bc","sha1":"fe783dbc377f6f65e3ab4a3304710065d95746d3","sha256":"2cc4d49e01b3923552d5ac191e4822b04f4a97ac3539f6a729478bebced9010e","sha512":"43eaca2b7e8b4ad29be87dd5e93031c1e74603fe650a829776666723b45bbee547ccb2abe6e50b47f6189fbf45cc6b4c0f864981474c12440f6e5dc69bad479d","ssdeep":"384:bSQ73M691RagCMWm2jWNVe7/HsmdB9DbsbCIsijgWxUYynJ86kpZmsk:bSQv1YMWm2Kerr9HxPikWynJ86kpssk","tlshash":"da92c09238b905f17b5f1734a222714e33b1f8b9c91b157cf59b1072a9658cea081bf6","first_seen":"2025-12-30T23:38:20.688737Z","last_seen":"2026-04-09T19:00:32.912131Z","times_seen":48,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-f86bb6be.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:19.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-f86bb6be.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-19099\"\r\nexpires: Fri, 10 Apr 2026 06:56:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"313c37e8def6b78b4e950e6110d31496","sha1":"145deebefb739190361ea928e293f2f1d5c92cca","sha256":"c82bd2b5377100c402033e52bb39f02e0c602222aa6487db2292f0351d6829ab","sha512":"e8b6c4c7ef62e7469911d69006670c2ea363286ce6fbaeae5784dd4e066d1ec922caa460cfb349ce217d7eaf1beb2ed43500926b7590c8a34778a61a6ac7789b","ssdeep":"1536:IE3QHJ/cs7EjhFCYu1gM+EvHk6to7kB+0HNnAUD:IyA/cs7E/sgM+Es6to7EX","tlshash":"2fa35d8aa40a0eff5dfd0848658f491030691f93598ccca777be6e463bfacd46399718","first_seen":"2026-04-09T18:56:49.836738Z","last_seen":"2026-04-09T19:00:32.837161Z","times_seen":8,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.kkgwmexc.one/ws/853f47ec-f463-4a23-87ff-6ce4a87d6636","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"GET /ws/853f47ec-f463-4a23-87ff-6ce4a87d6636 HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kkgwmexc.one\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: WRWAMk1fTNEot511qDN3gQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Thu, 09 Apr 2026 18:56:22 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://kkgwmexc.one\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 5w50K1gf9ELBRri0jww9+xvaSQ0=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":2087,"timings":{"blocked":-1,"dns":682,"connect":919,"send":0,"wait":239,"receive":1,"ssl":940},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-e71d3256.css","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:19.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-e71d3256.css HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-4abca\"\r\nexpires: Fri, 10 Apr 2026 06:56:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306122,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"d96bea4905eed0c69f426fc42824d5a2","sha1":"5da563cc23fc33e54551a76c645937ff239ce368","sha256":"e71d3256dcf5b600aff85013e7813f3d93827410b20468829772892a9c125dc2","sha512":"3d07ed8533c967e94a33d4c2adf391b7532e4428674858648c59688e9710e4097ace557334c8bd24124f1bcbfced39dc783783eb85e2e33ce2882134aee0aa15","ssdeep":"6144:nevxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05TF:ev1C9dZ8w71ZACkFDS3vyf58rBeV05TF","tlshash":"7f54d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-02-01T01:46:44.943352Z","last_seen":"2026-04-09T19:00:32.905153Z","times_seen":29,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getAllSetting","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s7e35df974dbc44fbb2b50a796d72c192.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s7e35df974dbc44fbb2b50a796d72c192.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4589\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657B1E823323717B286\r\nAccept-Ranges: bytes\r\nETag: \"D9D7C87474D84053037105D135592AA7\"\r\nLast-Modified: Mon, 20 Oct 2025 12:04:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12465440849135159745\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2dfIdHTYQFMDcQXRNVkqpw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d9d7c87474d84053037105d135592aa7","sha1":"bd59479d78171663166000e16249e3d26c819f37","sha256":"34c8d0740dff131e661fa407c12489a2407594d876a7032be025a07b2690a444","sha512":"8852377b943df595f0801b1098089bcc155b9305ab1acf01f86777b0d9e1af4cb3d47f04eb15c02bed18d047d0ee65d99086e42f1fbe69ee0f33de47f4858352","ssdeep":"96:ORr0J+HPx22IYBXqTdhpA9miP1JMDNuoUGi7wa2S:O0a08BYdhpAV8gDRwVS","tlshash":"a3916d2ec339a4e283f5600b36c05b516abf4c45b191a0a7789d8f2cb87e9088bc2519","first_seen":"2026-02-01T01:46:44.965652Z","last_seen":"2026-04-09T19:00:32.883478Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2265,"timings":{"blocked":977,"dns":35,"connect":291,"send":0,"wait":293,"receive":14,"ssl":650},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s028916936891448ca9cbd361078f6b99.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s028916936891448ca9cbd361078f6b99.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4096\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F658C390C330304D8398\r\nAccept-Ranges: bytes\r\nETag: \"905AF5999E8F9881B9914F01C041BA82\"\r\nLast-Modified: Mon, 20 Oct 2025 12:48:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14843586186598874018\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kFr1mZ6PmIG5kU8BwEG6gg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"905af5999e8f9881b9914f01c041ba82","sha1":"f4c4e874e1fc6f89b92228def6102cbc4a9f0046","sha256":"5386a09dc29d78eced3974bda647c0a90d5c2346889fcd682a9de81cbbd26c54","sha512":"81427b279bbe735e327afac1d166f002086c4a06363970db0bd48d4298120ee139e0d95c94f391c730a6ee62de1f183409d48074378e405f1e23ada7bde14f62","ssdeep":"","tlshash":"ff816d13bd0b5e0b514fb358c96ce0f0473e83e467a206a6c7db1bcd40a509b9978665","first_seen":"2026-02-01T01:46:44.939166Z","last_seen":"2026-04-09T19:00:32.819663Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2196,"timings":{"blocked":1926,"dns":0,"connect":0,"send":0,"wait":269,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/type/defi_activity_type","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025sa286ed8fecfb49b8b94380ee6fcaa763.jpg?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:23.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sa286ed8fecfb49b8b94380ee6fcaa763.jpg?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 68399\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F6584C8B373237A534E7\r\nAccept-Ranges: bytes\r\nETag: \"43C7EDF069A873080F15DA013868A6B1\"\r\nLast-Modified: Tue, 21 Oct 2025 02:57:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 717557696568754727\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Q8ft8GmocwgPFdoBOGimsQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":68399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"43c7edf069a873080f15da013868a6b1","sha1":"3b2e2ed0648422daa95831fd502596dc03929cf5","sha256":"6c477d544b524c2f9c5f9e87ef7d91cf7893247be0499a00fabeb908cc32d596","sha512":"43df4c4271e264011e3c94499ec77ceaec9c4425a68497e2821819cc9b1936a1e366673f1073fc18d4b3385b220408b742a2036a8d08f1961a19401835925c1a","ssdeep":"1536:fdoRO5fW5TK5lmCX0cgfbnWjTMWngzbQ7/MLrZc9U:68fSK5A7nfbojgQAtv","tlshash":"5463e1d1fad0a480cf2716a8fc642c734ff823e45256286a077d5c6569c9f39d90f399","first_seen":"2026-02-01T01:46:44.96035Z","last_seen":"2026-04-09T19:00:32.915231Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":1016,"dns":0,"connect":0,"send":0,"wait":270,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-a1c1f0c3.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-a1c1f0c3.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\netag: \"69c64202-308\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"65f7da5c08e731323c18d78a569ee8b1","sha1":"4f2a5272aeafe8cb044ea0bd83e112223e6e514e","sha256":"1c99e2a64ae3ee97320f23b482ab8371ea5a1aaf7ee297500e585e7204999640","sha512":"99f97187518424567941584fc96b190d27aa4618287f4e3b60fedf77cafb8bf352d1dac227da9d5952d6d6bdfab9a70cad1161da63154d0f3691588c3bc50128","ssdeep":"","tlshash":"1001bdf9fd0d8ebb0ea20a4541913601140a1fddfa1419e198867e661be4950d7de72d","first_seen":"2026-02-01T01:46:44.934596Z","last_seen":"2026-04-09T19:00:32.897836Z","times_seen":29,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-98e4b612.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-98e4b612.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-3563\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13667,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13666)","md5":"3a92e2b49c34e666409a38ede171bbc6","sha1":"7bc7be0fd5243d68556b0a9a5b0ff701c8da0df6","sha256":"f8871a7525fb39a5459789c7c2d52be3ad8a1abc553cadf439d8ac2008353395","sha512":"fa6be5847c56a146128588372a98a1cd0f9fa9b9c94ae2b3fb2aef162ca835b01b648e2b08dcb54122219a52a538f98de6e92e0d3ec44bf018bb264073f5f963","ssdeep":"384:7ftwzD97AbSLs6I4F0akVfU2woWrgeI79h6kQcD4Wr+b+yCyKL:WNK61kVfULYsWr+b+yCyY","tlshash":"2f52e966f902993ef6ffa01140980050b6693ffb511948e2f9bc6e4e6352ef8f759708","first_seen":"2026-04-09T18:56:49.792699Z","last_seen":"2026-04-09T19:00:32.882074Z","times_seen":8,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4242,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a366e628f82c910ad0242b2c0e87220a","sha1":"6d2d6e9cc84ed996fc44864bb1b9446e65274511","sha256":"2735ebc03ebc3b56e67afb5e52792dee5727c695cd42b0647039a9f0bd6c726f","sha512":"b3c1661257e2ce9e6eac6ba7432311e3be120a33be3f40495280bbbf439bfab0a5777b9520a40a2aacfe0b0d91686c3d91a8058444ddb3ba54c23869459a7b27","ssdeep":"96:h0l2cSYvjwrYl2cSYvjYl2cSYvjBagZUiNuMvjFlJJZbRvjAGjJZbRvjq:mgcVvjGYgcVvjYgcVvjBaTwuMvjF7RvW","tlshash":"a791bc0e5279dfad084685c724c8bdc9926e07d7c6e8cc309b9adfac45f1a7a1f16144","first_seen":"2026-02-01T01:46:44.94815Z","last_seen":"2026-04-09T19:00:32.913995Z","times_seen":27,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025sc966886db5814c4b928d50ba42ac90f6.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:23.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sc966886db5814c4b928d50ba42ac90f6.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 361408\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657C78BAF3137EA5CBC\r\nAccept-Ranges: bytes\r\nETag: \"F051672021B0B45B03FBD1B4A2A32167\"\r\nLast-Modified: Tue, 21 Oct 2025 02:22:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7603470132221886014\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8FFnICGwtFsD+9G0oqMhZw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":361408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1134 x 710, 8-bit/color RGBA, non-interlaced","md5":"f051672021b0b45b03fbd1b4a2a32167","sha1":"06ddb1ef291bf8df39e675a7bfd58df307766569","sha256":"55c73a8ab860e883c59a747ab10791417032fb9c29222f427d27d752b51f8ac2","sha512":"8ab4f21d3b56d2c7eb0447fdfb1b7bebf3691ad6a78b7def16c6ded064e5aaefcda891ac06c3c3816d4f5932f5b25cee6558e19d7d9d8fe6b75a11f6356c7b05","ssdeep":"6144:gtBfdb2zAkwK0jdI+g1SEW4Mu1YjMSt6cYMKqGqJ/r49i4HGz6YhKa+HcgfzJ:gtBfMzA3TjdI+gJpD1YjMSt9YMNJ/87j","tlshash":"3f7423932a4d2c01a57e0810b0ef5b96ddc592bbb1e7c362a1ff55e04addd43a6c2de0","first_seen":"2026-02-01T01:46:44.970541Z","last_seen":"2026-04-09T19:00:32.914639Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":816,"dns":0,"connect":0,"send":0,"wait":287,"receive":635,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-17e17425.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-17e17425.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-1238\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4664,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4657)","md5":"a716cd7eb801183bede08b4d789dab57","sha1":"e2ed6d192e3cc954af72f9d8e878cf07a56e0aa5","sha256":"952af14e5993aac5e9d8be781364fcdd104a1c1895604e5bd7e11d7013ffcb50","sha512":"b3004819799aaa6dc38f42a85e9fe3550727c19966ae64df8e36a36156441d6d2a15d7010261f4cb8a0a829caa5189b1f9bade71b4fea7a08fdeb1e6e88822c6","ssdeep":"96:bw+Cfp9YIqD+wSvxQMyntb1kiGnRbT/3hvzA3X6Nth+jA:bw+Cf7YIqiwSyntbi39vhv0XQsA","tlshash":"a0a1b999f80285bfe9771444088c0410319dbbfab21588f1fbfe9d0a67b897dd754366","first_seen":"2026-04-09T18:56:49.781874Z","last_seen":"2026-04-09T19:00:32.91153Z","times_seen":8,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/ripple.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ripple.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F65768F579313718536D\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Mon, 20 Oct 2025 08:18:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-09T19:00:32.908248Z","times_seen":399,"resource_available":false,"data":null}},"time_used":2151,"timings":{"blocked":936,"dns":7,"connect":282,"send":0,"wait":284,"receive":0,"ssl":637},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025sdb75e6458336447fb051734e82eba2fc.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sdb75e6458336447fb051734e82eba2fc.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7514\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657C390C33030EA8298\r\nAccept-Ranges: bytes\r\nETag: \"81D78026D3724B07890B98BEC4CC06FB\"\r\nLast-Modified: Mon, 20 Oct 2025 12:44:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15527257983622601881\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gdeAJtNySweJC5i+xMwG+w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"81d78026d3724b07890b98bec4cc06fb","sha1":"58f8311e23f02b4e2af8c547cc7d3df9959d125c","sha256":"ed77ffbe2e7519bd091021725155ec2d03fdc780dec3f220acbf647720106c49","sha512":"2e82f036189d4e1763a0365f5eed4597b80ec73219b92568ac2bcdeddfa8608edc76193a829335ba525506d7accf0d1f6b08432dbaad4aa1406e42f8c5a742ed","ssdeep":"96:t7AxPstkZIys03+LO9Qp/l32WE6FsBpSaJzZtqGeluuwRJmWn5ycUgJ7KnGup:gkKIysIqRl3ZFS0GeluuLo5c0KGq","tlshash":"4ef1afee26888bdb48d5d988a9c627eac07e32154ea51fc9e41350d698901cc35dc7d9","first_seen":"2026-02-01T01:46:44.959485Z","last_seen":"2026-04-09T19:00:32.836117Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1708,"timings":{"blocked":1437,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s8ab323a44c5a4e1cba567d85e3e4b69e.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s8ab323a44c5a4e1cba567d85e3e4b69e.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6173\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F658794D103231756BDD\r\nAccept-Ranges: bytes\r\nETag: \"015C72A1C7782B8E7479D7162852F14E\"\r\nLast-Modified: Mon, 20 Oct 2025 12:07:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9684364431294695896\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: AVxyocd4K450edcWKFLxTg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"015c72a1c7782b8e7479d7162852f14e","sha1":"31a1fc5d7fc2b673b669189e7512c8509eccde37","sha256":"0505918efb40681f8c4be1e9ae0f1f4cf63748a6ebe5d84faebcf80e4a352238","sha512":"3221fced8599e5c73a8f015eae32baf9dc6b3f4bb5067bfe43d7cfd8a9c8a4e19b5d2b0b09662e755357479547b43f13942acf82ae0322272119495c0c2fd24b","ssdeep":"192:UAw01XEVSxq6FcTZV8zBWSbq14m3D2l9VHl:UAw01XEVq/2TZmBjqN2pF","tlshash":"1dd18eacfe029e53daa9bc448537b79ad927818d645cb10616be3020616afc8b4bc4c7","first_seen":"2026-02-01T01:46:44.933364Z","last_seen":"2026-04-09T19:00:32.850315Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2191,"timings":{"blocked":1924,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/echo2025s555c270b0e404e8a983ef413ea7b2f41.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s555c270b0e404e8a983ef413ea7b2f41.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6173\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657794D103231E56ADD\r\nAccept-Ranges: bytes\r\nETag: \"015C72A1C7782B8E7479D7162852F14E\"\r\nLast-Modified: Mon, 20 Oct 2025 12:07:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9684364431294695896\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: AVxyocd4K450edcWKFLxTg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"015c72a1c7782b8e7479d7162852f14e","sha1":"31a1fc5d7fc2b673b669189e7512c8509eccde37","sha256":"0505918efb40681f8c4be1e9ae0f1f4cf63748a6ebe5d84faebcf80e4a352238","sha512":"3221fced8599e5c73a8f015eae32baf9dc6b3f4bb5067bfe43d7cfd8a9c8a4e19b5d2b0b09662e755357479547b43f13942acf82ae0322272119495c0c2fd24b","ssdeep":"192:UAw01XEVSxq6FcTZV8zBWSbq14m3D2l9VHl:UAw01XEVq/2TZmBjqN2pF","tlshash":"1dd18eacfe029e53daa9bc448537b79ad927818d645cb10616be3020616afc8b4bc4c7","first_seen":"2026-02-01T01:46:44.933364Z","last_seen":"2026-04-09T19:00:32.850315Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1656,"timings":{"blocked":1389,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/type/defi_activity_type","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-04-09T19:00:32.889432Z","times_seen":486,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-a1c1f0c3.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-a1c1f0c3.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\netag: \"69c64202-308\"\r\nexpires: Fri, 10 Apr 2026 06:56:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"65f7da5c08e731323c18d78a569ee8b1","sha1":"4f2a5272aeafe8cb044ea0bd83e112223e6e514e","sha256":"1c99e2a64ae3ee97320f23b482ab8371ea5a1aaf7ee297500e585e7204999640","sha512":"99f97187518424567941584fc96b190d27aa4618287f4e3b60fedf77cafb8bf352d1dac227da9d5952d6d6bdfab9a70cad1161da63154d0f3691588c3bc50128","ssdeep":"","tlshash":"1001bdf9fd0d8ebb0ea20a4541913601140a1fddfa1419e198867e661be4950d7de72d","first_seen":"2026-02-01T01:46:44.934596Z","last_seen":"2026-04-09T19:00:32.897836Z","times_seen":29,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getMt5Amount?coin=XAUUSD","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=XAUUSD HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T13:55:53.446124Z","times_seen":13580227,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.iconfinder.com/data/icons/bitcoin-technology-vol-1/128/bitcoin-mining-512.png?2.0.1774600705279","fqdn":"cdn4.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 00:16:57 GMT","end":"Mon, 08 Jun 2026 01:14:35 GMT"},"fingerprint":{"sha1":"3F:B7:67:85:CA:67:A1:3D:40:52:1F:20:9A:78:1A:CF:72:BC:69:D6","sha256":"37:EF:E3:68:E1:77:61:74:D0:20:4B:CC:B2:4C:06:F3:B2:E9:28:B7:A8:52:1E:8E:49:31:EF:99:91:E6:1B:21"}}},"request":{"raw":"GET /data/icons/bitcoin-technology-vol-1/128/bitcoin-mining-512.png?2.0.1774600705279 HTTP/1.1\r\nHost: cdn4.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 35741\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"3068921.png\"\r\ncontent-security-policy: script-src 'none'\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=ih7S7dbimdbEkl86jmQ7bzteDw0RzYYZoowH7r5j%2BsE%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1775233544\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=ih7S7dbimdbEkl86jmQ7bzteDw0RzYYZoowH7r5j%2BsE%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1775233544\"\r\nserver: cloudflare\r\nvia: 2.0 heroku-router\r\nx-request-id: a1e4495b-dfa7-3d53-ef6d-a818d86dc902\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Apr 2026 16:25:44 GMT\r\nexpires: Fri, 09 Apr 2027 18:56:22 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9e9bbb3b7cf356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b05fe31bde412ce5669c0f612516aac9","sha1":"c62bd1f252f9c8c871e76df1a8e4bb374f7c98a3","sha256":"f728c403bd2a8e20cddf61a65fdae71f5295c83fb195e0c4fae3cb0e696f0dd2","sha512":"7d65e8f22d823fea8d1c43e49bbc2c22531bbf88047daf1f1426e6b86b9bbc31074f9634d520d291da62d16961cb280daa6539699c7ec1962f02775466701cfe","ssdeep":"768:JMjGEW3T6OOHnbZmIKUaW5qA2BuYPN4jvfH9LPQSK1LiGpzlt:JM6F6R71kgDzqa39bv0i2lt","tlshash":"d8f2f1848f174a21bdd39578bf5b131c13b5a3c5500026fae6b3640558e2d7abe4ed37","first_seen":"2025-12-30T23:38:20.665452Z","last_seen":"2026-04-09T19:00:32.844753Z","times_seen":48,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":42,"dns":20,"connect":1,"send":0,"wait":80,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/resource/svg/light/mengbanzu13.svg?2.0.1774600705279","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1774600705279 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1c-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-04-09T19:00:32.884197Z","times_seen":212,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/resource/svg/light/zu29.svg?2.0.1774600705279","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1774600705279 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-348\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-04-09T19:00:32.884914Z","times_seen":218,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo2025s.oss-cn-hongkong.aliyuncs.com/waihui/bitcoin.png?2.0.1774600705279","fqdn":"echo2025s.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.221","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bitcoin.png?2.0.1774600705279 HTTP/1.1\r\nHost: echo2025s.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 09 Apr 2026 18:56:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 69D7F657C390C330309D8298\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Mon, 20 Oct 2025 08:17:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-10T04:43:05.715724Z","times_seen":19971,"resource_available":false,"data":null}},"time_used":1210,"timings":{"blocked":-1,"dns":6,"connect":265,"send":0,"wait":265,"receive":0,"ssl":673},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/vendor-4b39a398.css","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:19.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-16c35\"\r\nexpires: Fri, 10 Apr 2026 06:56:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-04-09T19:00:32.899512Z","times_seen":131,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/index-d253bac1.css","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\netag: \"69c64202-3d\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-09T19:00:32.916478Z","times_seen":201,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":495,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/assets/currencyItem-5524b6be.js","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:21.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /assets/currencyItem-5524b6be.js HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 08:38:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c64202-4b6\"\r\nexpires: Fri, 10 Apr 2026 06:56:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"87926059f751a972646ae6693524f4f5","sha1":"61d76dc917fe0ad9e154f13225804f3c45bb6bd7","sha256":"cc82e92a9adfad1db787f3f4db3b5e9e387cd00df73cde4c63766cdb1f3b5ffc","sha512":"966b38a245e00c6b298e6545880171e152bb3818e2e35c02e22f2f769da029b3a92b7e801d75504a76f739e638367014abe0e7e98d3b460bfa66aa2794ce715e","ssdeep":"","tlshash":"a321df9aad01c7b1cbbe906285bd4414130e7bea700181c1ebed158a378a5fcd728a31","first_seen":"2026-04-09T18:56:49.817433Z","last_seen":"2026-04-09T19:00:32.877634Z","times_seen":8,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.kkgwmexc.one/api/common/getMt5Amount?coin=XAUUSD","fqdn":"webapi.kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:22.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 06:56:47 GMT","end":"Tue, 07 Jul 2026 06:56:46 GMT"},"fingerprint":{"sha1":"FE:EF:3C:1B:A8:B9:71:7A:B5:40:8B:0A:18:3A:82:2E:8D:04:39:85","sha256":"CC:DC:1D:82:17:33:1C:92:4B:60:4F:27:1E:1B:44:37:EC:08:FE:E2:4A:F3:93:6A:CE:DB:9A:EA:52:AC:08:A7"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=XAUUSD HTTP/1.1\r\nHost: webapi.kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://kkgwmexc.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kkgwmexc.one\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"983ea0bc1f7924236259b17b06ddf44c","sha1":"cac9d9757fd839076d008e856e7d7b6736f208fc","sha256":"a56cea6e306c06e28b0723830545ce0ef3ea33711f477cc67e4f9e195bccdc50","sha512":"09bcf30170373d20b3f317c8c7bc4f7c69a8bd87e88c27fd342ee841c4058023436d878dc22d419cad290c097d852e49b9cd934c3cc32d450da2695c6d132cab","ssdeep":"","tlshash":"0f9002552c188242ac9314a995161204002432602725e648cc599126a4881622040859","first_seen":"2026-04-09T18:56:49.969406Z","last_seen":"2026-04-09T18:56:49.969406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkgwmexc.one/platform/dev/config.js?1775760980920","fqdn":"kkgwmexc.one","domain":"kkgwmexc.one","tld":"one"},"ip":{"addr":"202.79.166.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kkgwmexc.one/","date":"2026-04-09T18:56:20.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkgwmexc.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 07:07:05 GMT","end":"Tue, 07 Jul 2026 07:07:04 GMT"},"fingerprint":{"sha1":"67:8D:65:04:C2:60:EF:E5:58:E8:DC:85:4F:41:D1:75:00:24:F7:85","sha256":"E6:54:C8:33:B7:41:1D:81:C6:9A:38:68:B1:B5:42:57:1B:67:14:C0:ED:33:1E:7A:E3:FF:09:9D:DC:A7:CA:FF"}}},"request":{"raw":"GET /platform/dev/config.js?1775760980920 HTTP/1.1\r\nHost: kkgwmexc.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Apr 2026 18:56:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-18a\"\r\nexpires: Fri, 10 Apr 2026 06:56:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-09T19:00:32.906037Z","times_seen":265,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}