{"report_id":"1a65aa4b-6322-43ab-9289-dfbaec6cb3df","version":6,"status":"done","tags":[],"date":"2026-01-24T21:55:18Z","url":{"schema":"https","addr":"kzhjz.cn/","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kzhjz.cn/","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"title":"欧易交易所-欧易app下载_okx支持usdt交易app-欧意交易所下载","dom":{"size":18128,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (459)","md5":"895be7d459f2113123a355e8c3892945","sha1":"6b4aee62b45e53a7d83983f22e11fecb238b2b16","sha256":"d8208a2709a3f0ef30333ccc82568e71d2ef2c6a037e399c5dec3f0761571d3d","sha512":"10f179ca4dff61a4660d4f9eeca7057cda7c117f92d7e9b22e9e98fd28e825a655145fac757f321907ac20131e935218d0fa18063b6dc51aeaea1df1c76e9598","ssdeep":"192:GE9RWr5uWA4G77yhV8Y298bMYxVAYCWF5aY3WL0F5+0rnM8EykEFzmkEIYp:FIux4G7GhDJpV9BO","tlshash":"6c82cea23d43682a205f01df627b5b0e60c1dfd8ea27b5d5a6f0d36817b4cd2bbe6144","dom_hash":"domhash59f873689175e377faaca0ec378684c2","first_seen":"2026-01-24T18:48:39.860656Z","last_seen":"2026-01-24T21:55:18.970168Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kzhjz.cn/","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T21:55:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kzhjz.cn","ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-31","domain_rank":0,"first_seen":"2026-01-24T18:48:36.351824Z","last_seen":"2026-01-24T18:48:36.351824Z","alert_count":14,"request_count":14,"received_data":323198,"sent_data":5884,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kzhjz.cn/1.js","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ce056b0f1c8d429689922515eeb3ac9","sha1":"91a52f7fc41f7077d119196fa3a4fc8f0c35c48b","sha256":"3c293feee6722427c581079775f88f2b1b5b80e76535534654ca83a647c401cb","sha512":"ebe7dfdbac0014d26cae850ac0a83962fc5f4351d228655e48babc7e2cbc0402bd5f2de07e2b9f4b8d083469beb6ceabd7bee635b4c0fba65d8d1bff1baa82a8","ssdeep":"","tlshash":"bbf0c86bf5816c18136f25eed82ff74d3653e705bc9bc408006c9570f414d478206d86","size":574,"data":"","first_seen":"2026-01-16T20:08:54.038099Z","last_seen":"2026-01-24T21:55:18.973121Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kzhjz.cn/3.css","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /3.css HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 May 2023 17:33:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6457e102-9dda\"\r\nexpires: Sun, 25 Jan 2026 06:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11200\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJYr2i1S%2BMXDsYoS%2B2Smr%2FVat4nxLyvwoIvxYhaadg8Vc6X%2BpYKm%2Bh8WKqGXl%2BAZzki%2BpSR6ncto6Yn6QCS%2Fe%2Bu3Z9TMRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b75c3756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40410,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (35784)","md5":"c76514eefafe4f48345a360cdf897edd","sha1":"b7e62f1c149d278e1d91ffdaa5283b0df93eb6a2","sha256":"0762bdaff38c23ac6736f8e3181e73f961d95c3161cf0805b7cbd879f6a8bbd1","sha512":"85832d06f6c5e8f9a2f80dd8563ca6ded3f0b3c84fec06e25919da1b6dd758e244cbd003fb579259bbc7365a697112107fc3fa509a5c33371030ec596d8ef626","ssdeep":"192:bFrAi9dUuM0pMQAgPpUE86UUJTQ084duqUuzxZIOTZgl7ys9R08ghDkI6Hi9dUu4:B6UB8/UNDkIpkO93mou9uquKusXyS","tlshash":"270335917d434229713f3a0b6063aa8c25344ccde67db6d2f4619933f5b2de2b3e0a95","first_seen":"2026-01-24T18:48:39.872576Z","last_seen":"2026-01-24T21:55:18.971574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/4.css","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /4.css HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Mar 2023 08:04:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"640c35f2-1b655\"\r\nexpires: Sun, 25 Jan 2026 06:48:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11199\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1R4e0JJ4v2EbkvutVRyUIh5MlnLjaPn%2FjcxrIoiZJG%2BFrP3mqeJxvTUOB7OwZYV286CdYLhkeppY17TlJnAwe6fJD4Bj%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b75c3856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112213,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"4164b04c0b64a9cf2c9d5d39115e6cc7","sha1":"a2da930229c5a3c9e8a937758d11551f9626d0cc","sha256":"dca241e8d7fd2139c7caa1bbcd1f127c2a8b7a7a32b60ac9a9970fc6f6f3f437","sha512":"c312367f03ada2fca413d8f96e92a8e35398f3757f89b383e9ca5973b00d9eecb0199a7d9a000ce113e7e7792fd7df654ec5f209103bd864312369baff4e00b1","ssdeep":"768:Bf6VYI8DUx0rgxPm0Em67bKIMs3P8nqvAyBPGSz0y9UmaW/+01GfQL7x9HqHGuf4:BJGJmTG01GfQL7WmufiOYRDfvD","tlshash":"13b363237d072109222f492b5683768c62a4d5c5ee537be9fc91e807c7fbc943b3295a","first_seen":"2023-04-10T03:44:19Z","last_seen":"2026-08-07T20:20:16.916632Z","times_seen":226,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/1.js","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 16 Jan 2026 15:20:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 25 Jan 2026 06:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 11200\r\ncf-cache-status: HIT\r\netag: W/\"696a5748-23e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ozGmXWq%2BhU%2BN8OVuRljqzLb4IGMI%2Fp80LjlK%2FSU%2B1kLY97XadfWZqn%2B%2BgoMDzmkWv1Pert3C%2FDGRJVVe4yNso73fR5V0A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c32c5b76c3c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7ce056b0f1c8d429689922515eeb3ac9","sha1":"91a52f7fc41f7077d119196fa3a4fc8f0c35c48b","sha256":"3c293feee6722427c581079775f88f2b1b5b80e76535534654ca83a647c401cb","sha512":"ebe7dfdbac0014d26cae850ac0a83962fc5f4351d228655e48babc7e2cbc0402bd5f2de07e2b9f4b8d083469beb6ceabd7bee635b4c0fba65d8d1bff1baa82a8","ssdeep":"","tlshash":"bbf0c86bf5816c18136f25eed82ff74d3653e705bc9bc408006c9570f414d478206d86","first_seen":"2026-01-16T20:08:54.038099Z","last_seen":"2026-01-24T21:55:18.973121Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/TFee-1.png","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /TFee-1.png HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 988\r\nlast-modified: Sat, 10 Jun 2023 07:23:38 GMT\r\netag: \"648424fa-3dc\"\r\nexpires: Mon, 23 Feb 2026 18:48:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 11196\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRLTT6YIE4O9U8jdKjdI7g7%2F7ASHF28hiZ6992BK9mgaiqRepM8vh6%2ByW6jsx9oWUV%2B6IgUT7IkSrCwMrHrcg%2BKgTiESMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c32c5b81c4456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit colormap, non-interlaced","md5":"882d21e5987227b8e15597e1d5f2e6a4","sha1":"40ca12d334caa99db2f23e7ca1ebedd8f377bc2b","sha256":"be6b0d8e76b3ee9d3b2f8ea67b41167a36289bb813013e3c1a2a28fb5ec9bd45","sha512":"a250dc6371ada2db6c9fd8bde9dd12ce87d83f09f15c9062ee5c0ed8c1d991c48257cbf6182a2c1d941be5d73b2dba841bcd0160bb48c37c70fc695c111c2551","ssdeep":"","tlshash":"9711a81b41c0183e8b5333bc0d6801a3ce671ba3cac2452fd59d348ce865350d2415cd","first_seen":"2025-09-18T07:21:00.48678Z","last_seen":"2026-06-08T08:24:54.322956Z","times_seen":29,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/o.ico","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /o.ico HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:58 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Fri, 31 Oct 2025 13:02:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6904b348-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g0EuM9VSHzrSYIuZdj6g3ce8tn3og3RXvS4Laa%2BoBUbeAGxyIkMgKnIvIoybwqtP%2BybDD3Y2ig8Tv6Mjy%2Bz3yzpdLWWrdg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c32c5b85c4956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"35ca1d0eef6f431da7ffbca5f906e3f5","sha1":"6f2b8c51c29c80ce712eadc3165735dc7aec291a","sha256":"76b7b15543d2b882d09ef7e4f2423cc84bcf8af35cbd9e50f34bd1c73c5ce1b0","sha512":"ba0732dec5f8279240e597b3f1ade6e57ef2d829b0b6b03ddb5e19a8e592f0e729667b759cacbe297f08df38279c4801be77f0cbfb4634276327be4dada59371","ssdeep":"6:sfylprV4lSlGia6a6a6a6a6a6a6a6a6a6a6a/aaaaaaaaPKa6a6a6a6a6a6a6a6T:suZV4o4eFX4otZlLn","tlshash":"1591c5013241c068c01802310c27c6fe29a5bd9aefb4a22376ea3fdf3c721b82521b60","first_seen":"2025-04-13T03:01:47.203846Z","last_seen":"2026-06-21T09:05:04.635586Z","times_seen":198,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":804,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/2.css","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /2.css HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 May 2023 16:24:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"645d16d3-2dbf\"\r\nexpires: Sun, 25 Jan 2026 06:48:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11200\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmJOUOvthUfOvfV4BzUASUtOTz7%2B%2F3M%2F2l%2BqITGza2WWZ3fPV0cMWFPmKyoNnIHEE%2FE2bZvLsRWAy7MJvjjYTmp8tMDByw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b75c3656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11711,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (307)","md5":"a9b83bf77085435d7b46118f6b6ec9e3","sha1":"9814e142c477406c60d59a630f14efb913f81369","sha256":"3eb5140d92c80683f64a974261f39a52e65125166fee924e2b4614aa069cb398","sha512":"f202a05fb936471f2867ffc8042c12c2b2315d675bdffb4503433817e78c7cf32b19c99901c1c201545b4d49814fee82421bb790befb0281ccc798a92164a046","ssdeep":"192:81BfdFN2311F6P+TOoI6Nhob6hSQF4+mFnFa:ofdFwPtkEo4FgFY","tlshash":"1b322113fbd3100af02794a8a9637bfd7b6a50535706cdf5aa923360cf4a2db157224d","first_seen":"2026-01-24T18:48:39.883737Z","last_seen":"2026-01-24T21:55:18.974904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/logo.png","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Jun 2023 07:23:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"648424f7-276d\"\r\nexpires: Mon, 23 Feb 2026 18:48:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11200\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iGOlWbxaZ2OJBU%2FL8u2SAYDhK%2FFEL22GwZTfLujR5Y7GGHILHbLgcz81wEVwCE1OsKqlkqoibv1BV2D8hnAqYdy9jsR39w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b75c3956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 180, 8-bit/color RGBA, non-interlaced","md5":"ea491559afaec15cabc1ea64d5be4bd7","sha1":"0dd51f3f4c697220ba5076d66df683a001c3d486","sha256":"38373b0ff2e633a5ed8c3ce48ba9009b8ba1ca4a9d0bfcf30b835fefca7101b1","sha512":"86de3a28b2e54aece7283b1e2eefeb14478d852e182c5edd35242a40774a8f0c71f00e0fb5276ec0c025e840529da48ec99a9ec5ea221b8c80276015397d7397","ssdeep":"192:WSxknmtJBqlIBR0rtc7jkbWYorwTT/PK9pQrQ1JRHhH0zMX1Rslub8vmRWN2NvhS:5KnmtJSIBRqc7u9xn/Q1J1mzMlulubhE","tlshash":"4e22afdbab078dccfed799602a16157281977bd57101ec323cda5c22ea65093f21e0ea","first_seen":"2026-01-24T18:48:39.87523Z","last_seen":"2026-05-08T19:35:10.095664Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/ouyi.png","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /ouyi.png HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Jun 2023 07:23:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"648424f8-fa7a\"\r\nexpires: Mon, 23 Feb 2026 18:48:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11200\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0YIbin%2BntNT%2FS8dtUatbqAz7DvS4YCKc8uyTwsz%2B0VC5u%2FYaft%2FCWUjGpUWVkt0rNA3IyeE2mTmsyDsf4iN7WqQFpwypQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b75c3b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 992 x 992, 8-bit colormap, non-interlaced","md5":"1af494b32ef0dae7c3e936b70ab7d8a9","sha1":"912ee1ab16dff3fcecfc2db210d772dbcc4d5159","sha256":"586f522872c67e73d49a28b1a956a723526aa65faabaaffcd3d76df0328b5f64","sha512":"fb7a8de251d8d386a9a6d38971facc987d4425836c05ab819954fe11c62d9736fa58284dddc1fcda382ccbc5a0a53f3de0cd912f68e5c84ea45017bbf324ef39","ssdeep":"1536:VxEcod2PNxoy5J5M7Zb5IUx1krX6L2wvlWwk:VLoQNxpKFbhkrklWwk","tlshash":"ba53025cf424184fc6f2fbb0944ab8a8b337a5d6b41a04987066fc5e30c769486a7fc5","first_seen":"2026-01-24T18:48:39.888605Z","last_seen":"2026-04-10T14:31:06.695181Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/au0fee-1.png","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /au0fee-1.png HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Jun 2023 07:23:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"648424f4-176a\"\r\nexpires: Mon, 23 Feb 2026 18:48:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11196\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvXW7O5OFIsBK1ZAbMIMqCSvH1gunj3ZH6bjukAeL63gC5XmJApUxSi2Lu9hRPG%2FpCa5zHA2ZrUfEnOGdNCHsumabJnqEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b81c4556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"1bbc7c2a2d1098faff3ac120812798b3","sha1":"86f398f11c1edb7e14a8ebcadaddeaf3fc5e704a","sha256":"906bc67d8088bb83a2350d4fc5f3142eb0214c74d70aebe2f997840688d247d7","sha512":"c72226167e3f4bd66aebaafe1f5090b10c686120a717ed352315b6b7ce0438dc66a1b375e9eba5cca6421bb4362594fdfece0a289390ad9a61d7f13311265dd1","ssdeep":"96:Rc+M2x1XRpCmHTNyYrswkRpyFuiyVV06isG9EPgFEeBuX+ex22os/3f+n9:G+xhjHgYhMp41yVV0pjEonBY+exfL3fe","tlshash":"32c17dd78ade21af6c1d723b8cab75e2715d900d94630c293a299f19e1e0e2b4ac3654","first_seen":"2025-09-18T07:21:00.449911Z","last_seen":"2026-06-08T08:24:54.319143Z","times_seen":29,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/Support-1.png","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /Support-1.png HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Jun 2023 07:23:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"648424f9-633\"\r\nexpires: Mon, 23 Feb 2026 18:48:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11197\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9Dz1hrNznF3rFSNko%2Fy6LnR7U3j6dMbrdTrlDEsiVTJ%2BONkHKg1IEu8JozG%2FeuaAk2czcFEWEmwXwHJhUjb39Q7IC8BUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b82c4756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit colormap, non-interlaced","md5":"a6b04b0d2e421e10a186bee7c09dd0fc","sha1":"8f0aab284b67da548ad64771c666e89aaebf7624","sha256":"d07ef9581af7ef84416d72b162746556f514fdf09a58fd8d07c9978e6d834d0c","sha512":"900a800c5e296fe1f6b93ff544af7454ce0bdd1a01c685bad10fa6fc2c9578d758d61033cd4d3bf13e4b4dbaefb01eae1ddd9f0876be3a4cf2dc21a715ef0c2a","ssdeep":"","tlshash":"563107ff27610f21e8e881beca3ba6bf49845de912378f4a200c9700d34941126b4bb7","first_seen":"2025-09-18T07:21:00.45612Z","last_seen":"2026-06-08T08:24:54.302461Z","times_seen":29,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/Security-1.png","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /Security-1.png HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Jun 2023 07:23:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"648424f9-62e\"\r\nexpires: Mon, 23 Feb 2026 18:48:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11196\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTCJk2sHemb%2FPCBRjRMsRftYZc3l%2BcnhYX47w9w9Ex0UQJ07vrKG8KKwWi80iFuGwYE9%2BssJTziWPkuFbuZaGV6d%2FdrPxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b81c4656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit colormap, non-interlaced","md5":"acecc1bf5e9b012791af55b92967939b","sha1":"9145e1533aef0d4747c62fcd5fa19a1dc2464dd6","sha256":"b2c833b5a7c6ea4959447a43716d38711ec620df7f1b69348586ef857abecad1","sha512":"2e2a3725c73de531e6efa61876ea81dd99b4fd62ad93384503759f77936ed03dda935d5ae34683956c8581f99804ed0a469f7db076ab11afd3673566ba7af3fa","ssdeep":"","tlshash":"3d310cef5d135f6dd530614f4254f73b9a01cb97b49ab14c73553434aa17340b04493d","first_seen":"2025-09-18T07:21:00.497189Z","last_seen":"2026-06-08T08:24:54.319725Z","times_seen":29,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T21:54:56.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 08:08:33 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5%2BxGbBhrcWVmBNXgAL6hSiAIB5Yqa12r83TIbbphL7cItMHEmJvQRmueOAz8QpFsRVXeK9Ff35AGSO93GGQFfEJFAha85EI\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c32c5b11c60120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18524,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (459)","md5":"1b5ba8fc2468e3a4213ba4ebc8148c77","sha1":"bed02482ca65f7480266ff8512e9a3b7d93f6da6","sha256":"3c515db0918c139bc4f5b1986a0fea31385d7c1709421a732f013862ae2c642f","sha512":"237d053363a64ed21a39e7578d67e0ce183cc4c862eb87f79288aeffe00bf706e4c944501d4f9811fb2e502ab25941f33c817fb17f5c479d0f9ced15b622bd61","ssdeep":"192:OE9RWr5uHA4v7y3VB9298bx9xVt9CWF5393WL0F5+rwnM+GyuuFzkWEIYg:9Iug4vG3JJfr/Wk","tlshash":"3e82dea23d436826205f01dfa27b5b0e60c1dfd8ea27b5d5a6f0d36817b4cd2bbe6144","first_seen":"2026-01-24T18:48:39.866967Z","last_seen":"2026-01-24T21:55:18.978774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":967,"timings":{"blocked":70,"dns":54,"connect":1,"send":0,"wait":824,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/ok.png","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /ok.png HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 10 Jun 2023 07:23:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"648424f7-94a\"\r\nexpires: Mon, 23 Feb 2026 18:48:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11200\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3hPsI6KFDVBQX6E9v4juRP71AnIVMIdZgV1pedoVHYJPJgD1W2FBCnvrPQpEp97S0xeq3uJzFmCBmNV4jsSB13WU%2Bx0V2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b75c3a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 251 x 256, 8-bit gray+alpha, non-interlaced","md5":"5fd7dc0e1f8ab66ed2284250daf81bb2","sha1":"e15cb2a18c970374a7fee90c28e031362d2be8fd","sha256":"2249be75e8debec529633dec9a717262695cd69db532f669e1a4057690907e12","sha512":"c7911e3a62b26b8a070864f02b0ad0fe7d3aca3dc2f3a79da214c75bcea3397069fc2e0fdbfc700add98d2b085d3999301ff97e7ce215cd2f0cff17b3b1c2b37","ssdeep":"","tlshash":"4841a67de8081d00039e9902d8e7b35bf936cdd6e0c2a009ae8bad4710d19e8ad047a3","first_seen":"2026-01-24T18:48:39.886689Z","last_seen":"2026-01-24T21:55:18.979444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kzhjz.cn/1.css","fqdn":"kzhjz.cn","domain":"kzhjz.cn","tld":"cn"},"ip":{"addr":"172.67.194.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kzhjz.cn/","date":"2026-01-24T21:54:57.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kzhjz.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:06:14 GMT","end":"Mon, 06 Apr 2026 14:57:43 GMT"},"fingerprint":{"sha1":"04:C7:85:AA:57:2C:CC:C2:40:91:29:73:6D:7F:AB:91:BD:A2:08:5C","sha256":"2E:5B:F4:EE:6B:BC:94:0C:53:52:B3:A5:93:3F:99:B0:93:8A:F5:E7:90:EA:4A:3A:DD:A0:86:B9:88:20:38:24"}}},"request":{"raw":"GET /1.css HTTP/1.1\r\nHost: kzhjz.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kzhjz.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 21:54:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Oct 2024 06:08:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6715effa-954f\"\r\nexpires: Sun, 25 Jan 2026 06:48:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 11199\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M3D6LiI57Kv47FmsXA2FHq1PxabBMZeoxJql7D7o4ZJvrbhICSrDB6UXboywlpEbuTQupcOAk3pl7Uvw5YU%2Fsla5OucGXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c32c5b75c3556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38223,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (553)","md5":"d038f426dab8341d90401dfcd2093d68","sha1":"ed6c924b56e95ebcab1767497e651555981f4e44","sha256":"54fb89f9e4614b65fc3214e422b9ae76f6fb3c016997ea0458a0e44ee5b5ce0d","sha512":"afe9442e314e62402c450a62fafb62fcf8224406c4df250ecc79571e8f0a3c49ff7657f3eb372f6c5c2eab7a3a8b8af5cb6c82438f18dc11811b623133e0b23d","ssdeep":"768:yA2XtjRSwFrdDiVg/JBv8VnbsJlBS9SgCNF8HgfR7A63gvCev+Jw:6X19rZiVgxBv8VnbsJbSUgw8HgfR7t3u","tlshash":"0403313697152385b227e3f57eb7975e53298012f25216fcbfea3468c28f8180133ad6","first_seen":"2026-01-24T18:48:39.869761Z","last_seen":"2026-01-24T21:55:18.980064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"kzhjz.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}