{"report_id":"2747227f-e780-4729-9a56-69d0657a735b","version":0,"status":"done","tags":[],"date":"2026-07-28T18:33:22Z","url":{"schema":"http","addr":"kucoin.care","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"13.249.8.16","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kucoin.care/#/","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"title":"kuCoin","dom":{"size":7054,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2555)","md5":"ea6ba616b064591a5d06714a460c8670","sha1":"b7f03c643967a184f2e618b652033ab0c14ba33c","sha256":"db3dfcdce8db90265787e1b3a2b05966f9b90a941bdcf49a4be9638315c84cc0","sha512":"e716d306c1b7496148ff1a0297f80ffd900d435b837121110bd6572ab869efe1d3299f5fd070399177117a6b9a0f092585929e037e0250d03b357f7713ec252d","ssdeep":"96:er8tR4prCuj7SFWTda0t/UJr6TCZydHRH/9a2mUsGKAiowGejtdB1nPEPHJPEPHf:e3T7KWQZCxfw2nfD3bexdB1nYpY4fw","tlshash":"28e164bb7ca0c81e73155616ead7b4489ea2511784188cb1f0de45ed8fd0ff288dba39","dom_hash":"domhash092d4ab4f862407643c679eee6daee37","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kucoin.care","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"13.249.8.16","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T18:33:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webapi.16djht.com","ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2025-10-18","domain_rank":0,"first_seen":"2026-02-27T16:35:03.09947Z","last_seen":"2026-07-28T18:23:39.668087Z","alert_count":0,"request_count":31,"received_data":4466,"sent_data":18939,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kucoin.care","ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-20T23:47:09.181773Z","last_seen":"2026-07-28T18:23:40.591797Z","alert_count":72,"request_count":24,"received_data":2576891,"sent_data":10407,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kucoin.care/#/","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-29T22:18:09.430126Z","times_seen":99444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/charting_library/charting_library.min.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-28T19:41:49.814721Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/currencyItem-ab89a818.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a83534560371a2f45a468c4f2e050398","sha1":"9334d859fbf55358998f58f9586b6369732dc976","sha256":"9af97eff2cd26e6c08a9561a296e29bc699957d48bfe1feb3fcd63c73b3db0bc","sha512":"47a3163d54db6a8ce35d9279d45774ed7799f5f8d48f1aaddaacef2dc445db02f2858d2357274a668c3a2040ad4fa90c51ab97827e0e09ba3ee6de34db497b22","ssdeep":"","tlshash":"bf21dc9aa902cbb1dbbe9162c17d0414035d7bda701181c1ffed044a3b8aafcd728a31","size":1211,"data":"","first_seen":"2026-02-28T00:18:02.704396Z","last_seen":"2026-07-28T19:24:50.800168Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/#/","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.78001Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/filters-5469ab35.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c3b01abd92c571ec8e9507d881fa3e6","sha1":"fc378e5103af22609924b7f5262ce8996dc20ea6","sha256":"69e1edeb3775d426d1d59e44d16741690598c421cd49d82a9d5e0ed06b0d6338","sha512":"57f2b724e720c2184a93a01314e3918c052b999873168ea15522d13cfbf3d8a7145f831ccfa7ba2353f169deea02ad3d06b286b5ab08e8fb22f612d3eacd27d9","ssdeep":"","tlshash":"9f5113edf8c7613396e95af940188275718ebe10686e4a4df54be0415a63888e0bf764","size":3098,"data":"","first_seen":"2026-02-28T00:18:02.720876Z","last_seen":"2026-07-28T19:24:50.797724Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-abf52d03.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbac301b8d69bdf5ba034d0fe87e670f","sha1":"8a785940a13ddc54bbce79afe8528a9932abe119","sha256":"aab072be1a28c05f16e32769b22dec4d69fdbb7af3f9b52d39e062a8bfe5886c","sha512":"557b6db11563f3340b6ca025dc643e4aed4efdc614cd6d5baca17d2b7b58143c3d5579702549ff6ef64fc46a6d8466db126ce1806f391288361065478a491048","ssdeep":"","tlshash":"5c01109bbc58c53b3bb748b8465a0815340eaf49a3346ef64d8c242017aacd2870d70e","size":741,"data":"","first_seen":"2026-02-28T00:18:02.749024Z","last_seen":"2026-07-28T19:24:50.807505Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/info-091edad2.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20a1ecfe25cca2d8b3682213553a4e3a","sha1":"01e288a8446d8bb7e5a78d9e2db9e40e71013983","sha256":"7fa1d3efe03ff8f82b162675c773ad6ca1ecc055c9231aefc5ba5619576dc184","sha512":"3d714a8700c024d4a00945cdeb7868ab217816bd77d46213ee197f0fe913117ef68e639858a28d5a7e3a46f20d79a00e5f626f91ca665fb3605f099c4bb33d00","ssdeep":"","tlshash":"06c0804b0a1387f39275359571e05d122192587cafd34dfc00158d424df4cc2555dd14","size":179,"data":"","first_seen":"2026-02-28T00:18:02.701333Z","last_seen":"2026-07-28T19:24:50.801368Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"557ea5d494138fded026dce3b7340b9a","sha1":"766b3fceafe406a6fab92b1fd273aa662972a0a7","sha256":"78c9c8aff20d71398a7d87c8f842658fd8f9314da62f295b1e808ce2b1728bc0","sha512":"d742d9f9bbb9b7aefcc64233db6045950a4b0ade59ccd4d7516b7f9b331efceec10433f0a365145f6eeb339dee7c4a3935ca4fbbc280449b264806586d6fcb97","ssdeep":"","tlshash":"2a116bfe191aa02d6303404f976b7915642650b9401a185173cc9e9dbb9ab7dd0cfb8d","size":1034,"data":"","first_seen":"2026-07-28T18:23:41.540321Z","last_seen":"2026-07-28T19:24:50.809457Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-29T19:11:20.418756Z","times_seen":40863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-29T19:11:20.419431Z","times_seen":42386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/vendor-41cad6c7.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e82feeb4086c6af6a22a0dcd606e681","sha1":"cac678f3c9517340895a67efb5faa40e2ec20632","sha256":"4142575970109144fc3f9092d6332369257588f6073adc78ef114b7f0d25209c","sha512":"39811da1fa8180674a86964c8fc3bac261856930e55022f65cb434be70a0d6bf5ad75304756953a00c2d4c6fcdf5b5e58a1c9a5d0ce931eade22954630e26d25","ssdeep":"24576:WBIeNg6mi8fTCPzh5wAmVjOYM9HdWQq3agx/:WBIeNg6milmVjJM9HdWQqKgx/","tlshash":"34153ac97692f06157ab20e240bb0006f3396e59740e8494f16dd8eb7d69d89e2b7f3c","size":929027,"data":"","first_seen":"2025-10-28T12:27:40.36684Z","last_seen":"2026-07-28T19:24:50.806979Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-0f899e09.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cb4e92b9887efe1c55e824ede5c19cf","sha1":"3de028c3870138ffaca8ee7ba73fa28255bb9c43","sha256":"182be9180798a240300672f0db4142e218046a50a2f83e6f61e9057813aad279","sha512":"8d66c6837bd89aceec9414756d4afbf160f3e44930538e3cdfe3abe384a886ba8f5bb08ffeb31d41baa845dc04ab220c5d3e5e1ca65a588fe805e2c8e16a87f1","ssdeep":"","tlshash":"f901dcf9fd0dcfbb5fa2460141d02600140a1feefa1819e698877d661be8890da9f72d","size":771,"data":"","first_seen":"2025-10-28T12:27:40.415775Z","last_seen":"2026-07-28T19:24:50.796542Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-f548e1b0.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86f7d827c4143dc9eb362431fa2648a","sha1":"33116b817d9a61200c34dab07323cc6eb1aa06f4","sha256":"637aa4b49b2dd40ceac846884a5395ef78bddac85a5ce0ffb99e3bac9f28ff9d","sha512":"c9cb9af3873e5b8e0a3eb4322e053589ea56d383cec6f71cd15f37bb62ee5845426dbc507528f181db7a352a8072f0189e753420c59db9212b6f0ca7317641ee","ssdeep":"1536:6kmZiqEs1COCI50LqC7yWQefQ60V6d1zfh2M+99SK:9vqEs1COOt7yWQefQ60V6ddCj","tlshash":"11b33b8d750a0fff69fe0884b9ca145021791f83a9cc8ce3b7aa6d5927facc45247b15","size":108196,"data":"","first_seen":"2026-02-28T00:18:02.726914Z","last_seen":"2026-07-28T19:24:50.806421Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-0422503f.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36eb59c69f4705cc7785b6f2335ed490","sha1":"78b9e82c7bb3a23698901d7feb1f2e4f9ac61544","sha256":"88bce2a2905c6d6bc82e4cf671f9faff5a288658fbe51df13687465411b96a20","sha512":"75faecae67f79085b4bdcf58351ac2c9a43239146367e4d21a463e93e83746d53346887a8cc4c65acb3f244d8e7495d37843f10a16b9e5ff0290da049a890db3","ssdeep":"192:L3itwf15YsrNCwypGiMwRFtDO5JqFahgT9wbEzZ+:L3hf10pPRFtDmJqcCT9wbEU","tlshash":"31d1b789f8028d799e77a8808498001261583ff7a11848f7f6fead1b77b5df99741339","size":6285,"data":"","first_seen":"2026-02-28T00:18:02.788184Z","last_seen":"2026-07-28T19:24:50.795959Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-8ca1abf6.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee9c535ff59a48b6e936ae3562c4e8d2","sha1":"571a48b04fcfa3c6cc31a7d4c8d3b300f473e645","sha256":"b5b859cf8a99c8b80674d5eb3e138fd91d5be7fd8763974361af1a1e17de04bc","sha512":"3c5da146a86846edea87b6dfd7dadb94a889694ac7e457aa2cff9247ec3f0b9d75ca491a6dab499c2c1199d0be871d477dd26ffcc2ef1300c9aabc2b40f0ad19","ssdeep":"384:cAjCgoWU5g3eDBFc4xGiflLQiqbBPbzGB1ZcHjCmQUK:cAjzoWdYzc4xGElwxQ1ZcHjC2K","tlshash":"1362c581f9068a3cf577a06150d80810726d7fde504e8ae1b5bdac8b6766efc7349b38","size":15662,"data":"","first_seen":"2026-02-28T00:18:02.775759Z","last_seen":"2026-07-28T19:24:50.805261Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-4d23aaad.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3918285bb543938ead485fee9e17725","sha1":"4ed216fba24995d81e1b0272de601062fbb0f31a","sha256":"4911b38379545c9e8d61c3dc741e6b7e38cbd18842db5b9889d4325af4068e6e","sha512":"643833b012892a579ccd75b272063e00097dbe275182131eb863b5e0ceecda29430dce90b3c2ea49aec630a65babb673ce5bffd03c199082c2087d019b7ccf00","ssdeep":"","tlshash":"8ef0c02f792754716ba384f8d123181173280e4a33a0c5b9e54a060047384dbd14e618","size":515,"data":"","first_seen":"2026-02-28T00:18:02.744315Z","last_seen":"2026-07-28T19:24:50.797184Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/2d205638-1bfc-4cef-8299-bf2e0a70832e","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:16.168Z","timestamp":1785263596168,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/2d205638-1bfc-4cef-8299-bf2e0a70832e HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: k9DdqyrjsV0H7rXrR039RQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/7a202383-3ae6-4a00-aa71-13c54228f94b","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:07.779Z","timestamp":1785263587779,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/7a202383-3ae6-4a00-aa71-13c54228f94b HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: srJI8lplgHWjBoNCXPRMgQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/12ca64c3-43d9-4630-a782-ccb794098cc2","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:11.957Z","timestamp":1785263591957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/12ca64c3-43d9-4630-a782-ccb794098cc2 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9V5YTbFIXbSe4MsGyoDHPw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/platform/dev/config.js?1785263575733","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.738Z","timestamp":1785263575738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /platform/dev/config.js?1785263575733 HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 394\r\nlast-modified: Sat, 07 Feb 2026 15:12:23 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 13:55:38 GMT\r\netag: \"4bc52b1aa6813b98e0af16a138354c00\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NJveGUI-EIyRJeV2DF1kC3BbiSatcitqYOR5vViuOwQR-CIqQtogaQ==\r\nage: 16638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":855,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.748559Z","times_seen":509,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-da543910.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.011Z","timestamp":1785263576011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-da543910.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 104\r\ndate: Tue, 28 Jul 2026 01:52:11 GMT\r\nlast-modified: Sat, 07 Feb 2026 15:11:55 GMT\r\netag: \"dc92c35dc5fc5101b7a25f7fd8bff985\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: A_oUdVwmVyqry19-dEz3X7bMDuqlkBw5FhCoJfYMvmciafdK288ieg==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":535,"mime_type":"text/css","magic":"ASCII text","md5":"dc92c35dc5fc5101b7a25f7fd8bff985","sha1":"8b1fb0cc83d638c6529146d75301f465b0c374ff","sha256":"da5439103f3c05ed1475a48c5ff54f0c75528d41835804ddc03c15e3797417de","sha512":"30d6e81958c3e89faa1e709227d6b5ec39ef3b4aac601c8f034cfbfb8ce8cddcfe0638b46386419695cbaf537aa75e51970fbfbdf49158f508edcc107c163b7a","ssdeep":"","tlshash":"d1b01260e4f4206d9473c0cdafe14f0c150861013217eccd79d25231897f42224b9307","first_seen":"2025-10-28T12:27:40.360166Z","last_seen":"2026-07-28T19:24:50.803626Z","times_seen":32,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/f5ef054e-94c0-45c2-abe0-cb01224fea4d","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:11.113Z","timestamp":1785263591113,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/f5ef054e-94c0-45c2-abe0-cb01224fea4d HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: fRyzOloaqVAjwnars8BXPw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-e2df3fc8.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.017Z","timestamp":1785263576017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-e2df3fc8.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:11:55 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: W/\"fa3a94d7bf9c1c13a990ba7d8fca2b16\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: GBYajdYOcY5Z4V4hUSLbGLbFMdMEzPXSvYWThwBtOlXuDCc4OPsVag==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10342,"size_decoded":2400,"mime_type":"text/css","magic":"ASCII text, with very long lines (10341)","md5":"fa3a94d7bf9c1c13a990ba7d8fca2b16","sha1":"c26726e308cf8c73fa1a653249db7b424eb8fab6","sha256":"e2df3fc8833ed6ab97a02807589d0ef701de489c98774b1348d2ac52520b0ccd","sha512":"7b9c3db63cc895a4019e80394df20653551c1c2921f9e0071fddc0dd7e40d5afab28115122e50c5db680dd900a8ec95f9e062ddd01a1d8b7136c207520f3cb19","ssdeep":"96:5A2GOG7myu2OezOETjHa5OYBO08eMvqkigNU9u62rW0/oYgl2s8xPS5D8tTW84ue:5ALyTePfHgelTs7f+Ls5nyG","tlshash":"d222672db3592638ac37d08bbf5c4a8ce115be11ea83dde1e65786630ccb6d71a2014d","first_seen":"2025-10-28T12:27:40.347878Z","last_seen":"2026-07-28T19:24:50.801977Z","times_seen":30,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/90c66c14-b886-47ac-9057-9e6a90ac4c6b","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:10.283Z","timestamp":1785263590283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/90c66c14-b886-47ac-9057-9e6a90ac4c6b HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YzmrEM+YJIkaMmRdAF67Fg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:10 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/ebe7abe5-4725-4dee-86fb-b86198bd9b0a","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:20.333Z","timestamp":1785263600333,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ws/ebe7abe5-4725-4dee-86fb-b86198bd9b0a HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SuAs0fa+hDde96D/Al9PcA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/filters-5469ab35.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.013Z","timestamp":1785263576013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/filters-5469ab35.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:51 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: W/\"8c3b01abd92c571ec8e9507d881fa3e6\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: CdGpIB-ZyMGk5PH38k4IASI21ppdyP58u6FRQN-VkOEHjdGpT7HrEQ==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3098,"size_decoded":1471,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3097)","md5":"8c3b01abd92c571ec8e9507d881fa3e6","sha1":"fc378e5103af22609924b7f5262ce8996dc20ea6","sha256":"69e1edeb3775d426d1d59e44d16741690598c421cd49d82a9d5e0ed06b0d6338","sha512":"57f2b724e720c2184a93a01314e3918c052b999873168ea15522d13cfbf3d8a7145f831ccfa7ba2353f169deea02ad3d06b286b5ab08e8fb22f612d3eacd27d9","ssdeep":"","tlshash":"9f5113edf8c7613396e95af940188275718ebe10686e4a4df54be0415a63888e0bf764","first_seen":"2026-02-28T00:18:02.720876Z","last_seen":"2026-07-28T19:24:50.797724Z","times_seen":14,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/d6dfadab-b97d-4117-88cc-999ef20d7406","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:01.026Z","timestamp":1785263581026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/d6dfadab-b97d-4117-88cc-999ef20d7406 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DvxKDm3FwM+7urwK0Hop/Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/d1fbb2b7-c4be-4962-bc11-73612b546503","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:02.701Z","timestamp":1785263582701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/d1fbb2b7-c4be-4962-bc11-73612b546503 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KlclBOTxtnK6H/XXQ7s4oA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:03 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/e4595af3-0e4a-4a41-850f-d7b719a4a9dd","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:08.601Z","timestamp":1785263588601,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/e4595af3-0e4a-4a41-850f-d7b719a4a9dd HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9ECzYulMzYl6dms2e8T/mA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/f25b3de1-11ae-4765-933c-5b72f3a88f8a","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:18.656Z","timestamp":1785263598656,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/f25b3de1-11ae-4765-933c-5b72f3a88f8a HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nJnJq4xJqL6ni5vRh1vLlw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-718e97e8.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.006Z","timestamp":1785263576006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-718e97e8.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:11:54 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: W/\"99147448861bbe9fa856273a827f28a0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6FOLVZ1TeavugG2dLMU99Er8wbXXh3yCLcoX84-LG8fNOZpVj_2JMw==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3132,"size_decoded":1211,"mime_type":"text/css","magic":"ASCII text, with very long lines (3131)","md5":"99147448861bbe9fa856273a827f28a0","sha1":"5bd421bea48d5d469990f6c3686d50a242fdb681","sha256":"718e97e84a5efa0e5dd658233e8ff869657a79d2c3f7daefebbc14633c96e722","sha512":"701e2e6569639d935076a8c5b7d45a40060a95696df554926bb6d85a10ac98a69299f928995a9945c152a1dff95d3ffff6b94512478dff3a986205646701b2ec","ssdeep":"","tlshash":"6c512e59f7a925352c77dacfbe848e4cd5102e92f09badc4e14397120acf6d31a2531a","first_seen":"2025-10-28T12:27:40.377996Z","last_seen":"2026-07-28T19:24:50.802497Z","times_seen":31,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-91b121a0.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.008Z","timestamp":1785263576008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-91b121a0.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Sat, 07 Feb 2026 15:11:54 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: \"14420442c23830c7572ebce9b337300b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vI2bHw4BgMbJxjTucPUpZbgemcXuh_-5rLsCebaO_96onpBWKWNd5A==\r\nage: 16639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":61,"size_decoded":491,"mime_type":"text/css","magic":"ASCII text","md5":"14420442c23830c7572ebce9b337300b","sha1":"4c7c2f4bd2f0d9eb2470e0dcbb58a250772f1f4c","sha256":"91b121a06897fec309d4c6f84e4793777a254960d0c97a6fdcd35a940add7175","sha512":"dbbdbac5bdbfe3c429247a6aec8e78bba326e136a72230e102785f8b50d83dd79005a9d256ccbba011574c64644ed29c098ef9d154f855333fda04e2fb902a62","ssdeep":"","tlshash":"dea0026d17162408f2276145f12a4f0dcf48ad22aed75246e38359913547e8d2560219","first_seen":"2025-10-28T12:27:40.386195Z","last_seen":"2026-07-28T19:24:50.803091Z","times_seen":32,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/vendor-4b39a398.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.448Z","timestamp":1785263575448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:12:04 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:55 GMT\r\netag: W/\"2491919d901ad15e82d6c1245fb28968\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cwjfFQQK6nU5wEoiIlA0et6BpjWoV7JBtcYlcC7a93figapACJZDwQ==\r\nage: 48627\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":93237,"size_decoded":36443,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-07-28T19:41:49.743883Z","times_seen":237,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/currencyItem-15550dda.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.015Z","timestamp":1785263576015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:11:50 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: W/\"0a88af6b4dca3c130c74addeb274fb10\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _vKJB9NWyC1xyK9NH9hLPkD6UzAs29cfJE1SfkOXBEzQmBn8hcP8MQ==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":908,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-07-28T19:24:50.808886Z","times_seen":420,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/fce99d8b-c147-48bd-8291-070b10b63df6","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:57.691Z","timestamp":1785263577691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/fce99d8b-c147-48bd-8291-070b10b63df6 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: v0b9c0Lm5RDSlgkMiJEf0A==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:32:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-4d23aaad.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.007Z","timestamp":1785263576007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-4d23aaad.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 515\r\nlast-modified: Sat, 07 Feb 2026 15:11:53 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 13:55:38 GMT\r\netag: \"e3918285bb543938ead485fee9e17725\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fM5Zzw9Us5SjmHoM-ItaXfYes9-ug67X8IfuQUbDLQAX3SoechhwxA==\r\nage: 16639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":976,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (514)","md5":"e3918285bb543938ead485fee9e17725","sha1":"4ed216fba24995d81e1b0272de601062fbb0f31a","sha256":"4911b38379545c9e8d61c3dc741e6b7e38cbd18842db5b9889d4325af4068e6e","sha512":"643833b012892a579ccd75b272063e00097dbe275182131eb863b5e0ceecda29430dce90b3c2ea49aec630a65babb673ce5bffd03c199082c2087d019b7ccf00","ssdeep":"","tlshash":"8ef0c02f792754716ba384f8d123181173280e4a33a0c5b9e54a060047384dbd14e618","first_seen":"2026-02-28T00:18:02.744315Z","last_seen":"2026-07-28T19:24:50.797184Z","times_seen":14,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/8c8de3e8-93ee-4ae0-a3e1-42b86918a6cb","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:01.850Z","timestamp":1785263581850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/8c8de3e8-93ee-4ae0-a3e1-42b86918a6cb HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TWdAZFbkkbLoDJ8IjBv46w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:02 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/492a559b-0e2a-47d3-8658-bb33c42447be","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:06.089Z","timestamp":1785263586089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/492a559b-0e2a-47d3-8658-bb33c42447be HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: WW2jl0iWxCqlMqeCWQlj/Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:06 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/91d70b38-7392-45fa-82ab-e22e2d416b1d","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.996Z","timestamp":1785263575996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/91d70b38-7392-45fa-82ab-e22e2d416b1d HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: RTixe0prAEOLBys/YUzjtw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:32:57 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/currencyItem-ab89a818.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.014Z","timestamp":1785263576014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/currencyItem-ab89a818.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:50 GMT\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: W/\"a83534560371a2f45a468c4f2e050398\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ll5gWm62RTdoU2RdCeIS8j3san6KcFMa4yR3HJJV-on-DNaCeluW4A==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":1073,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1210)","md5":"a83534560371a2f45a468c4f2e050398","sha1":"9334d859fbf55358998f58f9586b6369732dc976","sha256":"9af97eff2cd26e6c08a9561a296e29bc699957d48bfe1feb3fcd63c73b3db0bc","sha512":"47a3163d54db6a8ce35d9279d45774ed7799f5f8d48f1aaddaacef2dc445db02f2858d2357274a668c3a2040ad4fa90c51ab97827e0e09ba3ee6de34db497b22","ssdeep":"","tlshash":"bf21dc9aa902cbb1dbbe9162c17d0414035d7bda701181c1ffed044a3b8aafcd728a31","first_seen":"2026-02-28T00:18:02.704396Z","last_seen":"2026-07-28T19:24:50.800168Z","times_seen":14,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/platform/dev/logo_144.png?2.0.1770477009008","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.304Z","timestamp":1785263576304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1770477009008 HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2648\r\ndate: Mon, 27 Jul 2026 20:29:08 GMT\r\nlast-modified: Sat, 07 Feb 2026 15:12:23 GMT\r\netag: \"b7ab57e8e49861420fb5876b5db96d9b\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2-cTuc3Nz6QBig_KSeTaXtHQdQmoNQAFzqQA06HkkJqllFPscwQbHQ==\r\nage: 79429\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2648,"size_decoded":3081,"mime_type":"image/png","magic":"PNG image data, 122 x 29, 8-bit/color RGBA, non-interlaced","md5":"b7ab57e8e49861420fb5876b5db96d9b","sha1":"49abd42a4155f65c094cd88f65568c167c1724e0","sha256":"bf5fe635a36e7ac98ae1fc14f6ca9629198983b813a09e645b18e73a7924a4ca","sha512":"6f948283d5b933e1a32baf90293c25263d390e934b380dd3c8476a88be14b4837faaa9d86ca123e8beb53d0cb2a0fff8e6fa50f90b9a5b727657d3ea8ca52c54","ssdeep":"","tlshash":"24513b776a10cdec815c4fb1d9024108d6488d932eab02a4bdbc5b34ab55ae9b07c947","first_seen":"2025-10-28T12:27:40.360915Z","last_seen":"2026-07-28T19:24:50.804204Z","times_seen":41,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/5fef3188-f001-4ada-ae26-14d31cf131ae","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:05.264Z","timestamp":1785263585264,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/5fef3188-f001-4ada-ae26-14d31cf131ae HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 39DbZTbBB38IYWy29MUB/w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/f52b1547-12aa-4664-b91d-f999ac7abb82","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:09.457Z","timestamp":1785263589457,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/f52b1547-12aa-4664-b91d-f999ac7abb82 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Z97J0Qe66UQxd7kFmsUPEA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:10 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/7d01acd4-908f-4d78-95c0-8f5407b35c4e","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:06.919Z","timestamp":1785263586919,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/7d01acd4-908f-4d78-95c0-8f5407b35c4e HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0aAs1q2vgD4uLa3nZL/A8g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/67a59200-a6a2-492d-b205-fae804d6e3a0","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:14.486Z","timestamp":1785263594486,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/67a59200-a6a2-492d-b205-fae804d6e3a0 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vbSkdXmRSiX7QgxwwcMmcA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/3f4b3dc9-a90c-4140-a95f-5093ce73e05e","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:58.527Z","timestamp":1785263578527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/3f4b3dc9-a90c-4140-a95f-5093ce73e05e HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: o6XeyK/B2o4G+J/vubREIA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:32:59 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/cdf61e64-0bd0-4841-a3c9-cc6a2e15240d","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:59.353Z","timestamp":1785263579353,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/cdf61e64-0bd0-4841-a3c9-cc6a2e15240d HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nHg95tOpiuBUcyLAGrAIZQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/fd97c5ed-e05f-490c-9f16-8495ad8f593e","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:03.565Z","timestamp":1785263583565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/fd97c5ed-e05f-490c-9f16-8495ad8f593e HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: w1Rj41xAifGz/lPHtpXsrw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/8320c4b5-543c-4abe-8bb1-8fc9eacbfec6","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:12.783Z","timestamp":1785263592783,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/8320c4b5-543c-4abe-8bb1-8fc9eacbfec6 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Zlf5vAnv7CNmA/4/bWChxw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/8bfb7d78-d7c5-44cf-bc13-bc633532cc63","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:17.828Z","timestamp":1785263597828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/8bfb7d78-d7c5-44cf-bc13-bc633532cc63 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Q9G8oecafCTuz5f8kt4LZg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T18:32:54.615Z","timestamp":1785263574615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 07 Feb 2026 15:12:17 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:28:03 GMT\r\netag: W/\"9e05df6f8dbbba3905836c3adc3e44eb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YcsKq-4oDfP2p37ZJ4QPLGv6FgZMrM1ino7iIm1AzK9oknJ4UGwsTA==\r\nage: 3892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5625,"size_decoded":2067,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1289), with CRLF, LF line terminators","md5":"9e05df6f8dbbba3905836c3adc3e44eb","sha1":"3e6891ec7f3fc3bd4833cfb5c9dd8c413e72a72a","sha256":"03a165bf3379f94f40d40adf28774b9dcd127c0bce3ef122ce50dc98202e517f","sha512":"c64d745c979c2d2f6e4eab56f1e3c22f2e5762915ab7b52e0edbd03a237537d1e57d2414c6d4af8a51467b2de93540080ef34d5a51c9b9781d9e4c5feb95589a","ssdeep":"96:+r8wirf53uSPEGTUVZt/dmr6TCZydHRH/ga2mUsGKAiowGwuB1niHJiHYH/2:+29PEjqZCxfP2nfD3bwuB1nipi4f2","tlshash":"b3c141b769a0c81a2372412aeed7b018df625563841d4d90b0cc44ea8fe5fe584db736","first_seen":"2026-02-28T00:18:02.802437Z","last_seen":"2026-07-28T19:24:50.798935Z","times_seen":14,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":608,"connect":1,"send":0,"wait":25,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.16djht.com/api/common/getAllSetting","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.994Z","timestamp":1785263575994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kucoin.care\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":133,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":271,"send":0,"wait":271,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-bc011be9.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.004Z","timestamp":1785263576004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Sat, 07 Feb 2026 15:11:55 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: \"5353ff252ee4a5e7a3d0176de6a6c712\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5rRrG2wY4dezg0ZrO5ANTD2YSygpKOgjDxvKoizHgFvPOw1LkXo5rQ==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":397,"size_decoded":828,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.755943Z","times_seen":1463,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.16djht.com/api/common/getCoinList","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.020Z","timestamp":1785263576020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://kucoin.care\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":133,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":273,"send":0,"wait":271,"receive":0,"ssl":276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/a2beb5f1-0e20-4a24-85ce-4f3faab29b01","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:04.409Z","timestamp":1785263584409,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/a2beb5f1-0e20-4a24-85ce-4f3faab29b01 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: wvg8ithsW0TPSD5wE6lk2Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/beb2317a-3369-41bd-8ff7-4fde0e270f22","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:15.311Z","timestamp":1785263595311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/beb2317a-3369-41bd-8ff7-4fde0e270f22 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /Uesmfu8MTzAIWORP1/o0A==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/charting_library/charting_library.min.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.444Z","timestamp":1785263575444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Tue, 28 Jul 2026 01:52:09 GMT\r\nlast-modified: Sat, 07 Feb 2026 15:12:05 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\netag: W/\"2a5fa40461c4e10123b62c021ab0a4ed\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: SgPEsCJHZ5WDA2-jU_0xNQIp9TYPzWUR-V8ZWdMq1N2rJWwwVgHsQQ==\r\nage: 60047\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":3453,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-28T19:41:49.814721Z","times_seen":1298,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/vendor-41cad6c7.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.446Z","timestamp":1785263575446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/vendor-41cad6c7.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:12:04 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:55 GMT\r\netag: W/\"2e82feeb4086c6af6a22a0dcd606e681\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: nk-1nJfzlzYLfrygMVxvp39uHAW9GFJ2QQSuMpAbj2dCYBub6lc9og==\r\nage: 16640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":929027,"size_decoded":285562,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2e82feeb4086c6af6a22a0dcd606e681","sha1":"cac678f3c9517340895a67efb5faa40e2ec20632","sha256":"4142575970109144fc3f9092d6332369257588f6073adc78ef114b7f0d25209c","sha512":"39811da1fa8180674a86964c8fc3bac261856930e55022f65cb434be70a0d6bf5ad75304756953a00c2d4c6fcdf5b5e58a1c9a5d0ce931eade22954630e26d25","ssdeep":"24576:WBIeNg6mi8fTCPzh5wAmVjOYM9HdWQq3agx/:WBIeNg6milmVjJM9HdWQqKgx/","tlshash":"34153ac97692f06157ab20e240bb0006f3396e59740e8494f16dd8eb7d69d89e2b7f3c","first_seen":"2025-10-28T12:27:40.36684Z","last_seen":"2026-07-28T19:24:50.806979Z","times_seen":32,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/resource/fonts/Arial.ttf","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.519Z","timestamp":1785263575519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kucoin.care/assets/index-38676ad4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\ndate: Tue, 28 Jul 2026 18:23:08 GMT\r\nlast-modified: Sat, 07 Feb 2026 15:12:30 GMT\r\netag: \"ffe66dbfc4b07f36ef38dd621ad2c7cc\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9sf1v7dGfB4cpYXBlK4kQl7F76FPlfC598QgN4JlvBFDCupoYS69Cg==\r\nage: 587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1047012,"size_decoded":1047461,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-28T19:41:49.748408Z","times_seen":2198,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-0422503f.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.001Z","timestamp":1785263576001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-0422503f.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:53 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: W/\"36eb59c69f4705cc7785b6f2335ed490\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -9QZvktbfAJpFdoenh-LoAlXGulAfeEJZAQvSjJPCAF5qKLKwWSMkg==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6285,"size_decoded":2765,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6282)","md5":"36eb59c69f4705cc7785b6f2335ed490","sha1":"78b9e82c7bb3a23698901d7feb1f2e4f9ac61544","sha256":"88bce2a2905c6d6bc82e4cf671f9faff5a288658fbe51df13687465411b96a20","sha512":"75faecae67f79085b4bdcf58351ac2c9a43239146367e4d21a463e93e83746d53346887a8cc4c65acb3f244d8e7495d37843f10a16b9e5ff0290da049a890db3","ssdeep":"192:L3itwf15YsrNCwypGiMwRFtDO5JqFahgT9wbEzZ+:L3hf10pPRFtDmJqcCT9wbEU","tlshash":"31d1b789f8028d799e77a8808498001261583ff7a11848f7f6fead1b77b5df99741339","first_seen":"2026-02-28T00:18:02.788184Z","last_seen":"2026-07-28T19:24:50.795959Z","times_seen":14,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/info-091edad2.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.012Z","timestamp":1785263576012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/info-091edad2.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 179\r\nlast-modified: Sat, 07 Feb 2026 15:11:57 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 13:55:38 GMT\r\netag: \"20a1ecfe25cca2d8b3682213553a4e3a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: yX95mFTSUqEvNhPiolhQyuxyZNs4R90F4srTES4KgoTHnZFcHV98wg==\r\nage: 16639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":179,"size_decoded":640,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"20a1ecfe25cca2d8b3682213553a4e3a","sha1":"01e288a8446d8bb7e5a78d9e2db9e40e71013983","sha256":"7fa1d3efe03ff8f82b162675c773ad6ca1ecc055c9231aefc5ba5619576dc184","sha512":"3d714a8700c024d4a00945cdeb7868ab217816bd77d46213ee197f0fe913117ef68e639858a28d5a7e3a46f20d79a00e5f626f91ca665fb3605f099c4bb33d00","ssdeep":"","tlshash":"06c0804b0a1387f39275359571e05d122192587cafd34dfc00158d424df4cc2555dd14","first_seen":"2026-02-28T00:18:02.701333Z","last_seen":"2026-07-28T19:24:50.801368Z","times_seen":14,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/platform/dev/favicon.ico?2.0.1770477009008","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.305Z","timestamp":1785263576305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1770477009008 HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 16958\r\nlast-modified: Sat, 07 Feb 2026 15:12:23 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 07:55:03 GMT\r\netag: \"0d7feda020772da8686a371ad1f3a930\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6kTFBCBdWRj2Cu7k5xinuUkWaL170vwi4L2vxr7XQ24WJ3Ilyf50Kw==\r\nage: 38274\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":17430,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"0d7feda020772da8686a371ad1f3a930","sha1":"d6785fb8f89870c73e0ab3dc43c2a056cc5897f0","sha256":"4c68f3c98f9da1e9a39d71ce9de69a49f005dcf7de136847a8989b3cb88795a9","sha512":"42e3d1d2261c4912d552055f2807662ab44edfee12455f7de77cc0874f0b6ce0a54991410557819744eb2b392f6fd076fc31794fe9e5ef23acf08259bbaf67a5","ssdeep":"192:rB1xrHL5wvhIX+wpqAKUuOP/cL+VgldTTTplPZfgxQEDzB1D0RG:TxrrQSXVKUuC6Ag7TJBZfgxQozB1DL","tlshash":"f0723676b5bfcfaec5ad12b080395eb44bc9de604fc513bfe201a16c86747688c61276","first_seen":"2025-10-28T12:27:40.367549Z","last_seen":"2026-07-28T19:24:50.804744Z","times_seen":41,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-abf52d03.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.009Z","timestamp":1785263576009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-abf52d03.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 741\r\nlast-modified: Sat, 07 Feb 2026 15:11:54 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 13:55:38 GMT\r\netag: \"dbac301b8d69bdf5ba034d0fe87e670f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _oZ8UiJ-4cWo7YMF-LGyLNiCQQOt9PMKeRbPgl59v4DxD2HHviPovA==\r\nage: 16639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":741,"size_decoded":1202,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (740)","md5":"dbac301b8d69bdf5ba034d0fe87e670f","sha1":"8a785940a13ddc54bbce79afe8528a9932abe119","sha256":"aab072be1a28c05f16e32769b22dec4d69fdbb7af3f9b52d39e062a8bfe5886c","sha512":"557b6db11563f3340b6ca025dc643e4aed4efdc614cd6d5baca17d2b7b58143c3d5579702549ff6ef64fc46a6d8466db126ce1806f391288361065478a491048","ssdeep":"","tlshash":"5c01109bbc58c53b3bb748b8465a0815340eaf49a3346ef64d8c242017aacd2870d70e","first_seen":"2026-02-28T00:18:02.749024Z","last_seen":"2026-07-28T19:24:50.807505Z","times_seen":14,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/8b48eb69-95e7-48c0-a12d-fbde247f7543","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:17.004Z","timestamp":1785263597004,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/8b48eb69-95e7-48c0-a12d-fbde247f7543 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nQIjCynGxdSy4y62LJwvjA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/9661373b-6de6-4d4b-841c-0855b376d94c","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:19.482Z","timestamp":1785263599482,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/9661373b-6de6-4d4b-841c-0855b376d94c HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SgmBjlp6e4SlbiRkzmHrvw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-8ca1abf6.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.999Z","timestamp":1785263575999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-8ca1abf6.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:54 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:56 GMT\r\netag: W/\"ee9c535ff59a48b6e936ae3562c4e8d2\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: o9LfHDnm9zemk5EMTmVVXgrWyOcTxJgn8D6HG3HDDGLn0LXIido_DQ==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":15662,"size_decoded":4822,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (15661)","md5":"ee9c535ff59a48b6e936ae3562c4e8d2","sha1":"571a48b04fcfa3c6cc31a7d4c8d3b300f473e645","sha256":"b5b859cf8a99c8b80674d5eb3e138fd91d5be7fd8763974361af1a1e17de04bc","sha512":"3c5da146a86846edea87b6dfd7dadb94a889694ac7e457aa2cff9247ec3f0b9d75ca491a6dab499c2c1199d0be871d477dd26ffcc2ef1300c9aabc2b40f0ad19","ssdeep":"384:cAjCgoWU5g3eDBFc4xGiflLQiqbBPbzGB1ZcHjCmQUK:cAjzoWdYzc4xGElwxQ1ZcHjC2K","tlshash":"1362c581f9068a3cf577a06150d80810726d7fde504e8ae1b5bdac8b6766efc7349b38","first_seen":"2026-02-28T00:18:02.775759Z","last_seen":"2026-07-28T19:24:50.805261Z","times_seen":14,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/e84dc8cc-6432-463e-b464-1c98efdaa73a","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:00.181Z","timestamp":1785263580181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/e84dc8cc-6432-463e-b464-1c98efdaa73a HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tg2VJQg/bvI+fRmNFGqffw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.16djht.com/ws/179ce62b-5d17-40dc-bebf-1ee92570a097","fqdn":"webapi.16djht.com","domain":"16djht.com","tld":"com"},"ip":{"addr":"52.193.112.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kucoin.care/","date":"2026-07-28T18:33:13.620Z","timestamp":1785263593620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.16djht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 04:03:51 GMT","end":"Mon, 28 Sep 2026 04:03:50 GMT"},"fingerprint":{"sha1":"94:86:B5:F9:C2:DD:8A:7B:BC:13:8A:EE:D5:79:E0:1E:8C:4E:F4:7B","sha256":"80:A2:5F:14:B7:C5:8B:91:32:DF:21:20:F8:51:D5:81:B8:75:5E:95:C1:8D:67:E4:64:50:E7:F9:1C:A3:01:FC"}}},"request":{"raw":"GET /ws/179ce62b-5d17-40dc-bebf-1ee92570a097 HTTP/1.1\r\nHost: webapi.16djht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kucoin.care\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: V/anrYAR6dKy+BGY3FnIQQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: Tue, 28 Jul 2026 18:33:14 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T22:24:54.286643Z","times_seen":17605972,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-f548e1b0.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.445Z","timestamp":1785263575445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-f548e1b0.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 07 Feb 2026 15:11:55 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 13:55:36 GMT\r\netag: W/\"d86f7d827c4143dc9eb362431fa2648a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Zi0Qh_U3r7l-_zlOHwYjkNka5XueNOxjJNrzh2JE-GPEaa1sgaVvrg==\r\nage: 16640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":108196,"size_decoded":27970,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators","md5":"d86f7d827c4143dc9eb362431fa2648a","sha1":"33116b817d9a61200c34dab07323cc6eb1aa06f4","sha256":"637aa4b49b2dd40ceac846884a5395ef78bddac85a5ce0ffb99e3bac9f28ff9d","sha512":"c9cb9af3873e5b8e0a3eb4322e053589ea56d383cec6f71cd15f37bb62ee5845426dbc507528f181db7a352a8072f0189e753420c59db9212b6f0ca7317641ee","ssdeep":"1536:6kmZiqEs1COCI50LqC7yWQefQ60V6d1zfh2M+99SK:9vqEs1COOt7yWQefQ60V6ddCj","tlshash":"11b33b8d750a0fff69fe0884b9ca145021791f83a9cc8ce3b7aa6d5927facc45247b15","first_seen":"2026-02-28T00:18:02.726914Z","last_seen":"2026-07-28T19:24:50.806421Z","times_seen":14,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-38676ad4.css","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:55.451Z","timestamp":1785263575451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-38676ad4.css HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 15:11:53 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 18:32:55 GMT\r\netag: W/\"f4a946974b11fa7f470cf83d5f172868\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: tGVseoWcKgcCcBQQerGPxwiGoTVUnbzC2c-jV90Tj580r9KzNE_Bwg==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":307744,"size_decoded":62510,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"f4a946974b11fa7f470cf83d5f172868","sha1":"333106f2a69125a68de65a4693a7f9a10ad9301a","sha256":"38676ad4f09ea60b86ee8876a53838f98e59a2a8c4c6a964a922363a102af0d2","sha512":"584fba51a1d4e6f9327ee916086513275c37b960e7ea52d233c568708de4b4cc128bd2adec82a73da69d17838e606fc7f64ee2eea26991bf14d348b987524a71","ssdeep":"6144:nOvxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05TR:Ov1C9dZ8w71ZACkFDS3vyf58rBeV05TR","tlshash":"2b64d7a9a590117c6f27aa7597ce5ad8f23ce6719c118de8f20160094fc3ffa2363617","first_seen":"2025-10-28T12:27:40.339431Z","last_seen":"2026-07-28T19:24:50.795435Z","times_seen":30,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kucoin.care/assets/index-0f899e09.js","fqdn":"kucoin.care","domain":"kucoin.care","tld":"care"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kucoin.care/","date":"2026-07-28T18:32:56.002Z","timestamp":1785263576002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kucoin.help","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AD:4B:27:9B:A1:F8:FA:DB:1F:9B:B9:2A:E4:66:50:2F:5A:29:A1:95","sha256":"9F:4B:A9:02:1C:E9:A3:3E:42:D3:6D:9F:D6:E0:DD:B3:3F:E5:24:A6:A9:24:6F:FC:57:E5:D7:7A:70:45:88:9C"}}},"request":{"raw":"GET /assets/index-0f899e09.js HTTP/1.1\r\nHost: kucoin.care\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 771\r\nlast-modified: Sat, 07 Feb 2026 15:11:53 GMT\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 01:52:11 GMT\r\netag: \"2cb4e92b9887efe1c55e824ede5c19cf\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: RH1BBTgqAwYHHuG7qR8okPulEvNN_kJyBJJxot6fd2A1yW0NrUbn2A==\r\nage: 60046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":771,"size_decoded":1232,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (770)","md5":"2cb4e92b9887efe1c55e824ede5c19cf","sha1":"3de028c3870138ffaca8ee7ba73fa28255bb9c43","sha256":"182be9180798a240300672f0db4142e218046a50a2f83e6f61e9057813aad279","sha512":"8d66c6837bd89aceec9414756d4afbf160f3e44930538e3cdfe3abe384a886ba8f5bb08ffeb31d41baa845dc04ab220c5d3e5e1ca65a588fe805e2c8e16a87f1","ssdeep":"","tlshash":"f901dcf9fd0dcfbb5fa2460141d02600140a1feefa1819e698877d661be8890da9f72d","first_seen":"2025-10-28T12:27:40.415775Z","last_seen":"2026-07-28T19:24:50.796542Z","times_seen":32,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"kucoin.care","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"kucoin.care","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}