{"report_id":"3451ae1e-1d8c-4483-9131-8ab3a56b8554","version":6,"status":"done","tags":[],"date":"2026-04-22T18:23:39Z","url":{"schema":"http","addr":"kcexx280.com","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"title":"KCEX","dom":{"size":267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"f2b46f0e3a4400514655fcfa44c0124b","sha1":"3cbc9b1c7b7cfcd628a88c0fa0884864345185e5","sha256":"1cf432fc9595130bb06c654fe72b88fdecbae9bddf18dab6799b1e5a2011d194","sha512":"2d5a4b30e02eb2a1cdb23efa48a5d256e5fef23421a9826ea0e74904710c396c3e3afd56056391898d9f65c2ae2404ac97ad01c4659678cf161d1c42e9baa551","ssdeep":"","tlshash":"86d02b9fcc21c14e880166d88691f558584bf21e5714ce8cfce034b8d5496ad0cd3288","dom_hash":"domhashe9551ca6980fee53ee15afe26c1cd5b2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kcexx280.com","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T18:23:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.huobi.pro","ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-04-19T16:00:38.013034Z","alert_count":0,"request_count":42,"received_data":31092,"sent_data":21391,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-04-22T06:56:53.121021Z","alert_count":0,"request_count":3,"received_data":1409450,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":1,"received_data":161181,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-04-16T12:03:56.62648Z","alert_count":0,"request_count":2,"received_data":2042,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":6149,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kcexx280.com","ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-01","domain_rank":0,"first_seen":"2026-04-03T18:42:52.925702Z","last_seen":"2026-04-22T18:23:17.110909Z","alert_count":102,"request_count":51,"received_data":4146519,"sent_data":25666,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"image.providesupport.com","ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-09-04","domain_rank":225098,"first_seen":"2014-06-19T18:41:57Z","last_seen":"2026-04-17T10:50:46.043977Z","alert_count":0,"request_count":4,"received_data":18750,"sent_data":1902,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-04-22T06:56:53.113577Z","alert_count":0,"request_count":3,"received_data":3673,"sent_data":1855,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"202.181.25.20","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-04-18T10:11:58.126269Z","alert_count":1,"request_count":1,"received_data":93687,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb1ba546ada0b7bd4b7f89f1b8d1cc0c","sha1":"8e62837ecda98839b1d2884876d31fb52352ff3e","sha256":"07b77af75f3f217fa12ebeafd10ff3e56ef95d28f48d61cc7b5c1ab61137a8fc","sha512":"b61bd5a88873c2834f8454a2c00fbea3fdd636782a220219d958b58067d3324fb4283646de18c70247e00905f462a803753ff996d5c4f1167635186d00990a09","ssdeep":"","tlshash":"62e02696a906a13d86aa5096a6dfaa40a4a1216c28b1c4814464cca02828eb793badc9","size":313,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:26:19.988396Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e26430b47e80cc275cc8c2c3df1e34ec","sha1":"677488dc66730ccdc80cab85d1ee9e42bd8a32c0","sha256":"f024a25d7c636d96b8c450498bac0358db2f4c5808e5ff446b733034858ab2d0","sha512":"860ae8c19fee776f1db9fbf3c6abb0b7383637088c17dfe1c20a8436827db711c7d6f2df65fd398d2cdb78ef44fe50db9849b2f908f03b3966b3221caebb0ed5","ssdeep":"384:ubYpA2XqL6zngB4iJl+f9u8Dkn446NwMhHgyWfGhsGqPV/pv3aM6BFYzXbZGs+Bz:uH+gUTQyW+hsZ7vxgFiXsG0","tlshash":"e5e242e2e7bcab364a96015fa6cf81e1e725d039362bc58e395cc1281791d3897363f4","size":31518,"data":"","first_seen":"2025-11-27T17:09:49.651895Z","last_seen":"2026-04-22T18:24:40.22869Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11944f96ddb914d6b0426d8e668bba1f","sha1":"3fe2ec69ce9987e299d3093ed220d6033c6b453c","sha256":"3a827d9885131ac0184de9f294c935d11c5a61ad995d8dcc69bf40a52f0c7a27","sha512":"b29a4b40f1419fa6855283038d4b24f4e0a596bde5ee6b87adf06a8d2e6db2e77497579107be3e6d707c3b927de08094c1dc2bd9cd240b92f5dc8502ec0281da","ssdeep":"384:vInEviJS3nrtb5n+j29cMw87zfyz5Lbv9/:vQMcYr5xyIo4721DJ","tlshash":"0c420938fa9b245c39a334148f6f005434d8a583c705cb153dadeac26fb552ba4badde","size":12632,"data":"","first_seen":"2025-11-27T17:09:49.658262Z","last_seen":"2026-04-22T18:24:40.231086Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3d9d4e4763e3e7f637700a47dd5d842c","sha1":"b7126cb67a7e05fd2d3499e761d513fdeaa398e9","sha256":"37a1a50377b00dd662ddf8091e4e326d2a474b00ec800e559a7b8f50a8a17139","sha512":"84a623e505e53881d38b11a1272395a01bd0e866453a0f4ad179ad7eb3bfd3bc301ea3fc9b1adc96a91de73a0adf269d0da5582d114a4d175be6ca69df567bae","ssdeep":"","tlshash":"5b410082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1990,"data":"","first_seen":"2026-04-22T18:22:44.170486Z","last_seen":"2026-04-22T18:24:40.233948Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"449d3adc719357ac5f6263412e9a6af7","sha1":"8c4014a2c16c7fe4380700a448b5cef664d0d452","sha256":"5a7e3624aa3530d1fb5af9140a2e1582f97a2b98457a47a2c0cb80a745551f4f","sha512":"3e6d02a2f39bae1d55f51da5fea667b885a08d0e2b429d346ebfbfa2d46ce2fb35f0f80619667453b69eb1ce4d83cefe5ce2515e4a885f64c1e103b818ef598f","ssdeep":"","tlshash":"3f11cb01931b5cd83af2a56f1f5381120c392413684bca283f0dd6e09fede539555dad","size":1100,"data":"","first_seen":"2025-11-27T17:09:49.664143Z","last_seen":"2026-04-22T18:24:40.23339Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","size":16345,"data":"","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-22T18:24:40.171544Z","times_seen":2552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f970323fe286aa570ae97486d77cb646","sha1":"b6e0c47107be73e0046e993c6555884cb67d5933","sha256":"935875f4ee2dce57d7804c53519186354e4ae1450d2aa18a4310fccdf6b91c94","sha512":"559596a0171f9b703bad763b267ed018959f35fb860da1487d87cb826bc280c471ba0a03acd53605ccc070a322b05a4a556c28832039fc05cacd63d6105fb4ac","ssdeep":"","tlshash":"fc4100c0c0003c00c0c3003c0cf00000f0300000c030c0000c0cc0cc00ccc33c000c0c","size":1996,"data":"","first_seen":"2026-04-22T18:23:09.944018Z","last_seen":"2026-04-22T18:24:23.746973Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","size":14496,"data":"","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-22T20:49:43.793179Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","size":1281,"data":"","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-22T18:26:19.966909Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25b6d15f572fc63d464c548d79358c18","sha1":"6b38f5db55ac3fac29e4f7b3f8fd49ba202434df","sha256":"13519e4ca14c1fb83c72b9b23233c57ba83577a0db5cf7d56fc2dc7de06a50ca","sha512":"1f9e44a6d8b890ed050f6fa9b51f619fc3e7da029119a109afdce655df8fbca952a73a396dd2dc564c09a630ffe8cfebcab2363d1e7187fe7e6163e012725493","ssdeep":"","tlshash":"03f0845e1a0ed3fa40a8427a5b71c2df75d05bdb080a6905fe8f02231fac425bc81fe2","size":572,"data":"","first_seen":"2025-11-27T17:09:49.664958Z","last_seen":"2026-04-22T18:24:40.234806Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/js/coin.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","size":45868,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:24:40.178868Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882199166","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea3116606d6350e1e3a63350a1d6eb7a","sha1":"e1382607300597e3f9f1211445623a6d2cf7e2aa","sha256":"803bc7f6c29e81b64be56a0c1cdd29678e493ce0cbd77a70348b0f393adefe53","sha512":"67017f0cdf3debbe3cc934dcdff695303c3e6e3a7109fbfacf5fd8c50765224700f87d0f7d93bd2864a905d27aa9787d44957483e4d28e4aa3f567bccdc82e97","ssdeep":"","tlshash":"0021f1774508237a82091df7e56f2e0e9a32581faae9c7d5c5344e50506e73ab431ae8","size":1199,"data":"","first_seen":"2026-04-22T18:23:44.63593Z","last_seen":"2026-04-22T18:23:44.63593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"82538862f750e4af0e4d31d9cc5f9f89","sha1":"2ceb5e40c6dd39a9ac9f57f32b9a60ef4c6527d8","sha256":"13eb507f58506b71dbd4eef9bc2e77d37ac210b143ad4c903ed573665a64f319","sha512":"857c339c699dabb51a2fa801e6f3afc0702b7bb4e0e0bd392a9865729809b73e6272c78e1132059d2dc19e3dfe51d669e327e411ca2275a6e7d17aec439e0ba7","ssdeep":"","tlshash":"704100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1992,"data":"","first_seen":"2026-04-22T18:22:44.172958Z","last_seen":"2026-04-22T18:24:40.237034Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/js/axios.min.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","size":29799,"data":"","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-22T18:24:40.18565Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4033dd87f906c92926a2b213a83002f","sha1":"ed2ccca6d3d93877c57a8614f2b5765452930665","sha256":"e5c97568860884408b75a5ec61ec252f2ea3fe57bba4302301a69aa32fd2642f","sha512":"2cb1ae773ca03fdd26c7ee7db683325f4602da218730363824d2fe1ac4a730fe8e4b0fe377e45ff7cdca6f27ba1ad4cd5840c44c22e535e7efd43323384740a5","ssdeep":"","tlshash":"0641020a487300b8944367bd1b5f910c267125532417ed10390ea750ef59ebc95adffc","size":1919,"data":"","first_seen":"2025-11-27T17:09:49.66577Z","last_seen":"2026-04-22T18:24:40.235292Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9af77ec196334c476628b867d7e945c6","sha1":"2fcdd41674765b878327d2311e2aee1e8996358f","sha256":"9e60f9328e42e3b7861acb1106d6ff7110dbb2bc081c071c19b803a109f8c061","sha512":"99870d1c3ddb87ee590f88fb2fe1cc2f3f73d05b954789cd102323c73da661dc5bbe8e4ece94239837fef8fed008faac350817c0f98b71e4e93d949fa892de85","ssdeep":"","tlshash":"bce0a78575921017a0af30ba45cf3980246cd20f021acd4c382dbac44f99cacd2b5f2c","size":298,"data":"","first_seen":"2025-11-27T17:09:49.66663Z","last_seen":"2026-04-22T18:24:40.237599Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd26749d6ce6d2748d4da4e2461c61b","sha1":"a58fe48c5cfcba2900dc7465b85fe9d6341858c5","sha256":"7e8a1c14399902b2f2339515015e02d83ac304db944069190b67e41983b17e6b","sha512":"1c5f9d29c47bf268dd1f88b77c6149e5098e58b6342ef7e037e50a73b481452a68fdca00a4ba69f38c0a931dc36ffc821cb959f9f6ab2aa896de19a09a2d7b46","ssdeep":"12288:AVciXSnka9BGfTsHI5e4lARLgGqg45s/1OZ6:slXSkFTsHI5eRpPqh5s/d","tlshash":"924528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1196802,"data":"","first_seen":"2026-03-06T10:13:01.556157Z","last_seen":"2026-04-22T18:24:40.230546Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3060d9e02a3d9515af4a0fafa8039c35","sha1":"d346c0e63e00b492013c091c3f1cf5e25f7aa716","sha256":"5cc19e71bc6dc6c88f1694a343d12edb1862648171f783cdfcaaf3dc9e2f4dbd","sha512":"7c7eeb168acb3c1967112a2437505df2c3106c47c1250d1b81bf2f5b8052bc80abf9df6b18911b1d05abf54922c638bb670ad685c622cb0e526e03f212c9eaea","ssdeep":"","tlshash":"544100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1986,"data":"","first_seen":"2026-04-22T18:22:44.168812Z","last_seen":"2026-04-22T18:24:40.23228Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.20","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T22:21:19.915341Z","times_seen":18938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a19014a82b6431020a77783ac142457f","sha1":"cd34bc7a4b8089979b3e82fbef84dbd275f20daf","sha256":"e25b0694eceb824fc684eae117b909d55e0bf829bd776d9085709d1a38bf7640","sha512":"a5c0b04ed4b906ffd57f1cc4ae4c593d18755bb21d86b98324e464efebfbf09d3a9c8124b7b97a52752484f496f327f6c4d61e604c0112a3e7696c4fdc5c6a90","ssdeep":"","tlshash":"54f0dc1aa4f315681473b0a94bff8c2570a1301ba24cde227f4d41459f1a1880e50f08","size":507,"data":"","first_seen":"2025-11-27T17:09:49.667563Z","last_seen":"2026-04-22T18:24:40.239373Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-22T18:24:40.204636Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"2a172d2a20945eeeff97ffd4d5539b98","sha1":"258e4e8e228b1d4a818a674db123af64a69f6b51","sha256":"d16ddb6e490a2a98a9740790dee2d164724b4a8b0a823b3795f036670d27bd64","sha512":"e39d5cd0da43a789c7c9d4f965360146af286b7fc9d58e1315a863dc2c88f36f8180205fd6d40960f7255dd038381518d8a08e8bc872a2832e0d80002944fcba","ssdeep":"","tlshash":"54410080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1984,"data":"","first_seen":"2026-04-22T18:22:44.174435Z","last_seen":"2026-04-22T18:24:40.231702Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home-p-facebook.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-facebook.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"690a1c3c-348\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRWA9gRkiDvSFjWnofsWKNJ%2FWOJZE1H9pE0d8b3lg77oxFEJV5805upD%2BlkAqc2j87RYMMyQpxsNH%2BoQqY5nNYGuKDVI%2BebYoeCHcr0Aa4gHRVvVM68oBM1P4fuTAUM%3D\"}]}\r\ncf-ray: 9f06a8a7bc1ab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3db779ec4a481ae2eae484d954e87833","sha1":"43397b3ab06d07d17d3a377170e2f1572415ae9f","sha256":"3ad52d01c6831d3321b33c3b554d91655c55e6fcf91a0d57a17abe83a7106e8d","sha512":"f96622bb1d670985bda68477010139bd92c03e5e4b25283c0130194e1b1a80abf84371f1a281b568acf1fd210ecf2c4563193993703a42daf917ded5d59b9cf1","ssdeep":"","tlshash":"6701f6f4d29cc480c5409b0f41ab94f15776b3b785aad5de7b8d25c6f90c09f0a75e80","first_seen":"2025-11-27T17:09:49.647954Z","last_seen":"2026-04-22T18:24:40.162907Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home-p-medium.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-medium.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"690a1c3c-3f7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4uTqfj39PSlxcCotTN4q3e15NvFHFJNY%2BeG8SoX8tukignv4slvRvt2m0opG5ePCW8GxyDGU5K7xf20r%2BG5R9F4uz5XkO%2B7RI0A01Ogef7Y7GmWNSP0OmknDYWH4bM%3D\"}]}\r\ncf-ray: 9f06a8a7bc1fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf0a868a55e55325345883fa63a26236","sha1":"74bae04091f5f40fdb574a1897ee28b378d64e2c","sha256":"733cd7bd386603a6c43c560e20c379b0e98183f17348e37ffa0017f7dd478ad2","sha512":"53d7403b5acf323f471fc88cbb4a0d3c98028f018590eda7166bc2520adebc3db36f284f00c5c320fc632afe5451bddccdaec3b58c2e5d1da59ba49ac336ae1b","ssdeep":"","tlshash":"9d1102e5235de9fdcb06df8aa639d8287446b0b5ae3fce0a13dd2c85b40841d38c0099","first_seen":"2025-11-27T17:09:49.599129Z","last_seen":"2026-04-22T18:24:40.171002Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 6c911d27c2347d36569527919387d401\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d24334d0e6bc5dc691dbe1848f2fc063\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: O_s4amZ6JacrSCR9ZypA0lZk8JjOsWfK844hXvtTJtcPJ5baTn0tAw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ad88f4dd91f3dd98d77b1380287499a","sha1":"95e1df70d407e8ec3b58f449386622515b427a50","sha256":"3bed72cbb73fa84c62f37d05682f76948e5d15104026e2f6bf1909f81322ac4e","sha512":"4a27fce772373db457dd6714cb0497035f2e5bf87bdaac5803141face76333090ccb095732bdb907c9399259c3329d347bad4332528e3e52a211984685f31443","ssdeep":"","tlshash":"fcb012100f9b053f3d8c405832b7052106ec88c031fd054031cc413044dfcf1ea05180","first_seen":"2026-04-22T18:23:44.571Z","last_seen":"2026-04-22T18:23:44.571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Sep 2021 13:34:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"614f2572-2c9e\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWhxdwp6zfpYKnrg1nCtDrG8IixWtky1satFu3r%2B8be92ImXR3IJQFyFlB2cFeImnMrzqwRIBT1w2%2B2d8e8uI96JyzX60Lv7P6qFu4ewtG4KcOhRrJKAcTmqiJIhkos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7cc29b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/1.mp4","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.mp4 HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 106025\r\nlast-modified: Tue, 04 Nov 2025 14:06:37 GMT\r\netag: \"690a086d-19e29\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 21\r\ncontent-range: bytes 0-106024/106025\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0h%2FclWM93JqebVhHyPqTKfPR3lN4kElGGVHQDoEupF7m7Mm9O210tI2oTlM5nAnjXzMns5YgT9Tce%2B3gCoZfXvq5kDqNm5btjbUodSWSzlttBDLY75ZNhFOWL2kncg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06a8aa0ccfb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106025,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4ffaa7b2bd0a06af61652e6ab0b9d39d","sha1":"d37874760cfb26605cf651ae519f5de1d9df786e","sha256":"83d355cd527de9fa037fc2321fa56efc00fd54add9c9d9d8a9b000a272c5acd1","sha512":"cc9005cfe2b58354b356cbd92a68709b9e142b542a82b1d06df945c65c3dd6165d463d6fe8c38a2d423ba97f48df1e11e11f6ad14f78d8b3779f45bd89644e15","ssdeep":"1536:VuE1rm1vlIuf0/xSsfy8X6YC97jH8MBgUoWWZ9ING9zQey2Ac64UNre0+JDmopft:kv1NI20JS+y9eZUSHINHN3NreHmo7i3G","tlshash":"fca302e1d75da14ae278433ce2f1a1da5f32e0352b99634373958c2ffa34a459fa0358","first_seen":"2025-11-27T17:09:49.620604Z","last_seen":"2026-04-22T18:24:40.173299Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/doge.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-838\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWZ%2B4TTv7Qi8IhwRRIeVMRTxrjswSj8VwzWDy%2FMsRy4Q4RE%2FlXyHmKVVieiL9qNPadQiPUmY9RPyEdFb5wZ0x7XLSw%2FBocIaplhMAmlDfiGmaZcBTb4EgAEBZghdlro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a78c00b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:50.076588Z","times_seen":5331,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/Icoinfont/icon/new_banner-bg4.mp4","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/new_banner-bg4.mp4 HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 491691\r\nlast-modified: Wed, 26 Nov 2025 14:06:14 GMT\r\netag: \"69270956-780ab\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 23\r\ncontent-range: bytes 0-491690/491691\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G4AMlQzN3C8ZQFVrAriu6fmIYb0iVgdaObCH1L12YyRW6hThspZfFoYAGWQFz7vN1dEYzu4TZnWrDHBuxZ7AIUoy07oi9oylNEoqb%2BPZHFDHATX%2B8KoFYUIuK77xa0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06a8aa0cceb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":491691,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"796e6846277d840027311df7480285fb","sha1":"76ec44a1d63b87bd0114950f8a555828fbf70bbb","sha256":"8ac2fa3dccc7459f7086fac2b547d23e267e94562ff5beae5e7b93c01a1c4168","sha512":"1d2e8f7309d703ab5bd597c7c42dababf10a4ec347c6ece2e281b67c392252eb246a3d6d34010b2eaa0842ff049e7febca736229d5d1fbe6f6d14090e3e59188","ssdeep":"12288:sZ1ja8fCh9dZerTqe0hiu3VFtV85Wo0rM/Tap55sVAkaOTMtTxDL:sfWyChDZ5eVWjjo0KTap55CAoyP","tlshash":"3aa42345a320abd4d3187b76d8db5b893064ca95d2b2936b0b700e74bd0a3571c3bbf9","first_seen":"2025-11-27T17:09:49.626703Z","last_seen":"2026-04-22T18:24:40.15498Z","times_seen":9,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: e3fd8d1090eccc7b2f9fee0fed35ed4d\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: db9b032311c0a31793e5716f6f774cc3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: N_Qg6sZRYF3y7FWi0aJWFsYa7u-f3rVMkX2sgNE9eqDO49kDkz2z8g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b8a7be2d27df153fb10c0a136193869","sha1":"207c641ac420e54241836ce7d219eb88e1b3e911","sha256":"71d4c103ceb487368cb8bd3f23b5144fd8398cea76b2daffe79496963664e859","sha512":"b38dda7f24fa1bb3af4a9e3f52375cea3ccbc0742f116413a0a0b6d0111014ded22e4b2d1c0f94e8b9456f175c634782e01c708850d03cf843cd0312da82d2df","ssdeep":"","tlshash":"72d022827e0c52e44e2417c9e8641c301b5a868201868a46a7f98b2021d08b6b21acbb","first_seen":"2026-04-22T18:23:44.574509Z","last_seen":"2026-04-22T18:23:44.574509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882199604\u0026ps_l=https%3A//kcexx280.com/\u0026ps_r=\u0026ps_s=kW7XSv4ohVxMCFlX","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882199604\u0026ps_l=https%3A//kcexx280.com/\u0026ps_r=\u0026ps_s=kW7XSv4ohVxMCFlX HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\ncontent-type: application/json\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: no-cache\r\npragma: no-cache\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: Origin, accept-encoding\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:23:19-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f06a8b38f930b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce33080b5c32e9a112da47c27b074f72","sha1":"7f8a374b0bef60327a18ab1fdd9cc459c5185526","sha256":"c69f9256ca3a89dbdbf2063f177728e38f6f5e2c383f01bd2aa84716aad4b296","sha512":"9281c915fedd5d977deb662f36a5b5b03ff27cc582921afb8d70cbe7fde501ca8e9d71e6be6a293453889fa9696f758057d4ea2d3bd371387f748e3e28eec0db","ssdeep":"","tlshash":"9390008c88e338ec00088b22ff82030ac3200caeb008fb08c2a00a0230cb3e82030003","first_seen":"2025-04-07T11:37:33.935595Z","last_seen":"2026-04-22T18:26:19.97631Z","times_seen":357,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:20.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx280.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 7\r\nreq-arrive-time: 1776882200632\r\nresp-start-time: 1776882200639\r\nx-envoy-upstream-service-time: 6\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1894\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:20 GMT\r\nEO-LOG-UUID: 16836215758546553325\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6193b180c937f27cb174d60a54780ae7","sha1":"bc0b6b03a8f0db8235f09d122bc861e7e221bf35","sha256":"420be45bef67d8c9d58b4fcccb6fa2faadf77795f069b0ff241bf14660302d54","sha512":"6e113d3c0205d20cfae7c7da570f15ef25cf5d4eca287eeefb6f9a7bc6240f87293b9a32909a1082839469e95a8a085ab2134463ab8fe1e7653051db8c36cc22","ssdeep":"","tlshash":"214102451082ad38925ef68dd6e9b905d55d304bb5c05f22d7f6cf1871cf24e2b033a5","first_seen":"2026-04-22T18:22:44.108489Z","last_seen":"2026-04-22T18:24:40.205158Z","times_seen":8,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":201,"dns":156,"connect":19,"send":0,"wait":241,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:28.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:28 GMT\r\nx-request-id: d711d46d193a1555e0e5b14acd831450\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 445f53a724c7fb5486c0ce23079b33cf\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0V2xpeHz6X600K9Y0t9Kn9aNhhOI5-wxDspG8GM5ghnru9I2AgBR4g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9d9e2431bae1fc6c7a729e26bf3f5b48","sha1":"0adb8658f4a7ca317500d64076e09bdf2fecf88f","sha256":"6822b03e478149f34ec003a2061ff1066bab73a74d796c90d371b32d888d580f","sha512":"c58a52d821519428cb5efde24ba1eaaa783522d412dccb33e6c81b4459c4ce1629ee098cc50649a488501949e11b48400fd0fc2d48c29c4387ecebe72cc87d47","ssdeep":"","tlshash":"01d097613b0209a00861b0c0a6220e708a9902a700c617c592fb980162c00a4f024427","first_seen":"2026-04-22T18:23:44.576494Z","last_seen":"2026-04-22T18:23:44.576494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/js/coin.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/js/coin.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 23 Dec 2022 09:50:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a579c8-b3e6\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMIGR24lnW%2FdqGOeFQTazgCsmR2praX6VZ9ijwojVkH%2Fv9X6djyqiq8Wuibo7mTfKQPnibLNNwZse95es3aRHDe2NAk6vH1RdwMKQlJfJqe8rXCyenVlYJXQ9rJ0p8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a75bebb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46054,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44565)","md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:24:40.178868Z","times_seen":501,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:27.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:27 GMT\r\nx-request-id: 1413dc1923a4cd4cfff2fe5a77cfa4ab\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 14f5ba71b8aa862e7d002a0cd5f12e35\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sNs5RcRlf6cCPZ0d9RSPQf4CRXNCeSSKLMaUNtN1CsmOG8HXhRywJg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"98893113802223bfe43fd0e31d3938fc","sha1":"0c8a608239dc72450467e674ad080f6128219cb5","sha256":"ec40b7ac705f27f246dead33ab4d3b1d5ef4529d96229dd6c92253528069d473","sha512":"0680e7ca0e4e1215ec32ca4610dbe5ee0cbc0f93debdf519a9d6a9afe72261618e2bf13fbf33673dd32db75db10817abb80f243448fb3defa3079139f0fa3b51","ssdeep":"","tlshash":"01d02282ae0d12f04d3025c4e42a5d312f68578990864207eafe5f1022c05a4f31ac27","first_seen":"2026-04-22T18:23:44.578004Z","last_seen":"2026-04-22T18:23:44.578004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/1613786496962262.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a83\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHPOJWqyQ77PhWLJ%2B4ES6oydzuTrstWMAh7UmzH1Qw7V1waG7raPuiWgWjT1YyOaN91BqfC6aLk0a8jW3NWNCRU95yJ418M8A4pm%2FOwZaZ6Fm%2FdfJJHjZ1q4QgxKFoY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a78bffb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-22T21:20:06.772271Z","times_seen":21103,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/download.mp4","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/download.mp4 HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 694742\r\nlast-modified: Tue, 04 Nov 2025 14:15:35 GMT\r\netag: \"690a0a87-a99d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 24\r\ncontent-range: bytes 0-694741/694742\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZJ85yyUgtHVewXjrE3FGT247YltMZlZccjqCCIxAgHwNUgoageQRFF%2FCM3dNLOYwZ5Z5Ca%2FW0ybVSGgya%2Be6Xoko6yWV1QHNh1CQiMtF2O17IPsVjii4UKom4J1vaw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06a8aa0cd1b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465936,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"95cf44cd0b4beb34fef0d171a883006d","sha1":"b7e7df7f42286dfcca624dc0e2e24441233a2414","sha256":"decd061d1321363d715322347105d289c868cc3f75a89384e5d92292cfe1981a","sha512":"7bd1982793ba1a34671e373764461b4faa8ace0e79b8349c7646d8cd7edb1cd8ae5075d2c8c14adeacb866c3df9202fdecfed64a09cb27363945781f79912e8d","ssdeep":"6144:9wrLSP/PnyWxlkBLJ1FjLuWPWncuqNoIm+0q8pdT/L06IHlbk6P0LfxNi:9uSyWDkBjFjqZsm+0qm/SHdfYfq","tlshash":"dca423cbd8c05957ce7d1bb041e6a2d5323d92cae1b2c7eb300e49388b587676f886c5","first_seen":"2026-04-22T18:23:44.579335Z","last_seen":"2026-04-22T18:23:44.579335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/3.mp4","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.mp4 HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 121640\r\nlast-modified: Tue, 04 Nov 2025 14:15:11 GMT\r\netag: \"690a0a6f-1db28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 24\r\ncontent-range: bytes 0-121639/121640\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEyepB5frAgF3A6LrYzcz9ILKxhCMPYb2oqeWFz07HkptZ6Ykgw6RjOPcL0gBLMCQ5d89Rz1waZiYg3MsVCUrAS%2F3ashCV6rhF2g4H2Ntlb9IlDjexESprU9gzsQyeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06a8aa0cd0b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121640,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"da3ea4a39c2859ee768f761a9e0be05c","sha1":"034a64a707d6b555f4764c0d1c9a0001d3e7c5b9","sha256":"9116095e316a6990fa66dd78fff172f068874d982536df3ccc5bd2f9e418ac5e","sha512":"b93873599b5a076ea4de17eb6e194a45ffd1be02eb19cd6b5022ef4b7e928df413341924e37758e6c095ba1e6037c9745cb1eb244cd32efafc6f851431f8f577","ssdeep":"3072:a87rXai5wjTncEtCBYNliaZtHlowthNZb6iAMK/eHY:j7jIcEOYWafew3NZbAMyeHY","tlshash":"cdc302926732b02fcb5a71398dea2354f631ce226b834b4f8385a176dc827761f5644a","first_seen":"2025-11-27T17:09:49.570574Z","last_seen":"2026-04-22T18:24:40.200273Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/mods/rvmShowPoweredBy.min.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-501\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:08-04:00\r\ncontent-encoding: br\r\nage: 191\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06a8b37f7a0b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-22T18:26:19.966909Z","times_seen":629,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:34.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:35 GMT\r\nx-request-id: 5054f9ba378cf5a7c129d18476602ec0\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 1e85eb6a434b7af249ea4b061bcbcdb3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: KoQNK6tQTj0ccvwIQYxyfiJ2LvWebcz2GH-NrckkNiTjc_0ZUB1uAA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"63f309a3044bc7f353c519236118ed37","sha1":"aafd192d3314825f2431acc3c0ae2b4cea6cd4ee","sha256":"96d2f30f4fcef6f7a5f733d19ce61463f53125723837e3381ff6be43e1fba521","sha512":"d02ffe0f01f0444e4f9f5d3d0b860aa58f2cff75ecd29bac3c3e6dd20246aa316a9a8637728a748c2851f62ada8293afc267cafef65ac08d8fe4f727b975b0fa","ssdeep":"","tlshash":"58d023317f0410203491b1c4f9d55e10839827c300e60347dafb3c4033cc0a9b026032","first_seen":"2026-04-22T18:23:44.58122Z","last_seen":"2026-04-22T18:23:44.58122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T18:23:16.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFSUseN18fQTQ0R7QLfat5e2lMV9YWi%2B0IXbhiwxbzIcJJJCkVeC%2BhssWRrRPJ5Km6KBrWLZ%2FQTOI5GH3IVtjaHmMXsZR2POTuk5z9Oc8%2B428%2FtA16AU7mHjNd7v0OU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f06a8a25c8556ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":115713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"9d476f118154c959da7592dad10abfa0","sha1":"54df18eda4c43299cd1c7a023b009fb0a44b22a3","sha256":"97d3ae2061fb782b664d852b557257e612bec5f38451aaaefa20a438ba031c34","sha512":"467c1e1d422460adf4e7bddc95673beed94a15dbf5dc0a6cd82f92a8790b956e23e7118ab9d0a92430085ca871a3407d3eabf35270d2365adb185054a08b290a","ssdeep":"1536:0KYL+cc44wlhVH+tQyW0C7vxmiXvX6hSfHnmNuSJ:wa4LlhoIxmKvX6hSfHnmNb","tlshash":"27b30a70e7fa19391023909b9beb52567ae5e437c20bca043ebd47604f96c2599337ec","first_seen":"2026-04-22T18:22:44.100892Z","last_seen":"2026-04-22T18:24:40.182557Z","times_seen":8,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":622,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home-p-twitter.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-twitter.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"690a1c3d-1c1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfiNuUialYTAViG2ZyXLyiyLh6LuU3N%2FT%2F1%2F3mBpjg5fbmG%2FDsZgySCzvkh0jJ5tQm9cP0CKT7BIiYNi82YKQmFxoyCG%2FcBsMOqA46Bpac6A1utJDk%2FDaYQHFBOhF80%3D\"}]}\r\ncf-ray: 9f06a8a7ac14b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f55b9b1ba41f191f7d83f1410fb8a10","sha1":"9347c4d57e67d27d7b945926eb91dc2a6c69a5a1","sha256":"d3c653cb211a91f44bb8d772d67d996beeeda8315a484e982ae087ac8b20dedf","sha512":"17027af1a28466b84c30eb1b272906ee749de9db56db60f064604867cc941a6c702f3bb3585fd6489c874f94d2ebaed5d6609b6a854d702a3f70cc9137b077bb","ssdeep":"","tlshash":"10f0554193acf4c8c508de60230a3255b3fb32e379a4c3c0d2c89901a47c1af1e0e6e4","first_seen":"2025-11-27T17:09:49.565881Z","last_seen":"2026-04-22T18:24:40.20808Z","times_seen":17,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 215\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: e7387992170c7ba4c760e0a2cd5c943b\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 3c45e34512a10ef46ad2a4e74b5c6222\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: y2ZgNQqRXal5Dd0xkARmAeEjCH0qLRAkkAv1yaCWYtNBzsQazCx9ZA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7281ab7173a99aca0cf1b62938e5dc11","sha1":"b10e182e8cd066d3e43f71d67e36350f6eb42fbd","sha256":"4187de2fbd9a375b45c87d748599ee7eb84478a15c5aab07957d513333746c6f","sha512":"ad6a01de5a1019e32069941ff55589c07a32ad2e4ecf584c61ae01a60a151dee6a8eda49adbc7760c4ea79e53884cbef012f06b50eac8c507e649b13fe103868","ssdeep":"","tlshash":"85d023473b841590cd7371c2fc111d717d09150254c9470747ed9c3075860f1f429c77","first_seen":"2026-04-22T18:23:44.583021Z","last_seen":"2026-04-22T18:23:44.583021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 46f1b5399eac6dfc48d904aa0b52328e\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: c8c2f6e15fbdd334532caf52d746ef9f\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: DVydX0EthZW8Ht-00IePlcA09ZB-tYmRkpzrmd46PCi4nVmYfX7-jw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"56682f35480ca98aa742aa5f5e688776","sha1":"6f1a828a8f5828cd8090c60e4fe6809cb33498f8","sha256":"443ac8797c2fa29fd67804321c9ef8172d540e9a35963c505b204c10472dca63","sha512":"9b07e7fcc29043954555dea9568412510e53d379735943fe8d0119db90d1e6d34967fcee3b5b8cbda6bbd7eb3aec153949b9983a0a8347e6749732a9041dca95","ssdeep":"","tlshash":"31d023157b5415441c4512d7dc2479b0dac9154910840d4b57ed4d1196c5875bc5d432","first_seen":"2026-04-22T18:23:44.583842Z","last_seen":"2026-04-22T18:23:44.583842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:32.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:32 GMT\r\nx-request-id: a4678af1669ee58e38fb5923f1fa2412\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 6a4f7b2965a62810e32aaacfad7b1bc4\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: heAUO9Z3bic_VX4sk9yKYbkpMKKsL7Ob76pRvz_FF9mrf9gUPBqN4Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e659b5c52d40e702f8803617e2fc9fe6","sha1":"d929ada4117612ea906737d706f6a82d5a342fa3","sha256":"4506c5c52dd6e0c9c148f8f1fc5c133f8ba4adea56c7e328a40d2d4e8b7de1b0","sha512":"fa10197f382fe751eb23cf6a28446d5592c99d8c0f6a2c90dd5a1e13105be51681444dff59fe8e13bcbe2e3053f4708863d8e896d9ad3d12102ad3677a4c2a23","ssdeep":"","tlshash":"bcd0a746fb0412256c911090ac5585305668298608435613a2df5c419794afb7a1dc33","first_seen":"2026-04-22T18:23:44.584764Z","last_seen":"2026-04-22T18:23:44.584764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Jun 2022 03:16:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a94f00-2f0fa\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2hekCdEHmti03N68yDihXNoRG0b9c1ExcR%2Ba7cAE2Tc8a5%2BsuWRyPSMaaA299DVqOOihBw%2F6l3yQdZf2%2F%2Fu1F1zsxfvqLmZpmvAKcHVqLRyeVHL8Mv1LjVqDxT4ip8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a75becb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.066152Z","times_seen":3243,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:24.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:24 GMT\r\nx-request-id: e9effe1fa9b4561e4375237e5da0c2ec\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: fd30ca3b193d5765a7b92d85ce7afb30\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: qWgOoMDttGrcEyd-vIMILc2YojMaoEHWwzyzgEEWnXDGXp7W_J9RaA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fe2132f09837f38f59d55fc81374b80c","sha1":"7ac904b1fed46af7287cff9b7d845e022950b6e6","sha256":"e3f28479c7498b1256f90de68f7d78d0b2d8293f3254e78f91161be39737fc29","sha512":"ff1244eb806b2bcbaf36e7d5a32f20e19214f13e87d137f8e2f1033b0ae72475e962392a4983935caf75d614e41094ea9549f9eb78a5b179de8858700e1f8942","ssdeep":"","tlshash":"2ad023557f415a6149d3b5c8ff255e64965623d301c54fc6e6fb280133d10a8b03d867","first_seen":"2026-04-22T18:23:44.586049Z","last_seen":"2026-04-22T18:23:44.586049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:25.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:25 GMT\r\nx-request-id: 5eaa9b00d6a2ce72bc5266c910c59c1e\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 7bce015bbbaf2235b204cdee7f614fae\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ZTxgcLFaXoQi0anrsBjnxjWoDTSAFDbJYKXQycy4zjjKDWKZ4Vi_wQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f5a38217b8af4a19d7a6e01b1410ca73","sha1":"63ff1b0a48bdc076ab6ac3f63a17e2d30e18804a","sha256":"a40b669ea89e40f68418867b3c8fdc30931e880a390a4b5508cb6d57ee486101","sha512":"df4e6cddf2ec8774de26b04e6801edda25ad2995fe8f69006d72c47b132522ccbfe812b3e36fa9cd4e3c18bc171374a140a843c04b6caa4737cd25b36a506de6","ssdeep":"","tlshash":"9ad023207f091dd05d531280f9525b5045fc31c504d7054753fd1e0015c50b47b09c3f","first_seen":"2026-04-22T18:23:44.586872Z","last_seen":"2026-04-22T18:23:44.586872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/fil.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/fil.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Nov 2021 07:13:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e50a-8bf\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQaUij33Y4rmBEArLg7FbtyOjY4QihtNu5kSSfK3NumJcwufNHa8fKPTMjifnDdQIhOSsbivokhuv8L2oMPbU748aCcBU1Swdzsyj5vbjgDXwCxWmZFpdu%2BaFwmbQ04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a79c05b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"bc0baed91ad63da79ebfd092f42c76dd","sha1":"8a4f9cb9ee821242971e3f29a770e5078218bdf9","sha256":"ac4d8dcc1a755104c19551dcd96fbf097a93e529f86f540d8e0d55328c09a16d","sha512":"7cd155866ec8308b41049d32de0fa72b16dd774355f36ffba0f8256b1acaa2fe9fc5ae6695166f22c655aefe314b161d525f1cd8eb78ed746c3374905b0406bd","ssdeep":"","tlshash":"0e413eb67b9fc403c77f858708ed5e6544225f0a69248d50051a7e6ebd2f1e8c5915cc","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.931033Z","times_seen":3525,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/Public/Static/bootstrap/fonts/bootstrap-icons.css\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\nlast-modified: Thu, 30 May 2024 01:29:40 GMT\r\netag: \"6657d684-1a13c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=riPmOvGOpz0%2F0aN8fe%2FUN7B5XDd0o5LiLXHngEszJCJiT3Wm%2BSSwjNraZzyJgZRB2LpMZG7Pp%2FgSuOiVVpvfc%2BEj3Q9aEjiCSC%2FLIhrsY2a0oDmdS8g27NEw8vHdytE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06a8ab4d6bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:28:09.60369Z","times_seen":10291,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:32.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:32 GMT\r\nx-request-id: 338f1849f48ccde03b318f2f07eaa3bc\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 430cced8b70fefec061b044f397c5b7b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _U_ZDPPZGnL5tYCBgrti4FI5E2p5EYFp-Sf8OJ4DNuJEzRIlLKVjzg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"482ea45550c9e144d625d7dc9aa3dda1","sha1":"c320b5c3665aeb67cf25fe906f2060b0b4a4bb87","sha256":"c949ce95f4eb08f93bbb597a0f3d62a6cd9a1e8bc9d345f208004e31f8ee6958","sha512":"e9d54d1f28c649a4b497377f2f837f953f08d4c79cca6cce9c6b448929efb76884fa13b67cb21c355142a9b71d241ea30f49dc84ed7f1949534c6e5b1a395718","ssdeep":"","tlshash":"51d023c25f802140455153d4dd587d38567d1c8f404e460347fd6d5305d4475f51943b","first_seen":"2026-04-22T18:23:44.589037Z","last_seen":"2026-04-22T18:23:44.589037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/js/axios.min.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/js/axios.min.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Dec 2022 08:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a4173a-7467\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNdlFIZ120UqrcXFzvmLx6RY9kyA7qaiLEprDjTYJnRFq%2FRdx9VHecYFgeU%2B9eaIPQ%2F2y2H4nn2aOJgCvBhDwVEZjluhKYR9djhqv3M7A9HTYbgaPSk6OnEvN%2FguMX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a74be9b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29761)","md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-22T18:24:40.18565Z","times_seen":477,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Upload/public/6908ae4acc918.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Upload/public/6908ae4acc918.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 13:29:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908ae4a-1276e\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lWD9eCFZziafrBEhiYzJ2wqK1yWm7MBkAmn9RQtLwlKiqKaanRLxZMqCqW%2Bel0cRyUgZAjQCq08sRburUIEIo%2FYKTtO9dtXvRJGUFLF7a46pRt%2Ff2FGUDqGzOu%2F6TE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a76bf2b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"940c91feba7ba1ebfa57dc3f39110e3f","sha1":"85e5a05c752a781f310b790194cf60fb51f86de6","sha256":"15ad6d37a3689d95c72dce231274ff7fa0c61e65fa2a5cdd6d9527a239bb2b89","sha512":"1bd2eb66246ad84af700f504c7c62777761582e5bc0433d595f21b65990cd3f12f6a05da2ffd7e6a0ee4b67abf3c96b331189d3f0bc7aa64a4758d8f183160ab","ssdeep":"1536:Vq6RBCsQ5i1eM80/gCFS5O+6yEha1EpY9mSaKpRWdkjDlJBGVLVOzb:sYB4Y80/PAlS81EpOxpoy5wVeb","tlshash":"7573f1ae93884b7272d25e05a9ab5b0eb454fbce172bd0d2870472a4317d0c5e37dc67","first_seen":"2025-11-27T17:09:49.573687Z","last_seen":"2026-04-22T18:24:40.198342Z","times_seen":11,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/jst.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/jst.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 20 Mar 2022 06:16:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6236c6be-4b7b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9O8oYOVrj8Tzd5ec%2BKeknWshTNhU5gHModBx%2FCJd%2FAI393RjLCUjej%2F2EPnCkqoFnKogXTq9IPzj5oKp7BOje4ewxmbqpzqad%2F%2FeN%2FKbJVmtyxd9our3H7I%2B%2FWsRrGI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a79c0bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b993b0a39d50c323edbb5886a19d56cb","sha1":"8e183944ff4dd3741c2b18f3a2d8962b1662b1a4","sha256":"450fcc35ab762f1b121f48150a7465b6a506fee918e24a80811134ee3a1d88c6","sha512":"754b0b31db60b3b2b0b2dcbc5f32e950bd8245c08d60d4d84a8bfd7a887167dd636d8f001232639952575ac6d2ac97103c66e04a016502472412283cffd680e6","ssdeep":"192:cu7OzkWdAPKtyK2Pe+6fsKO2uY/E4vVAAm7gbK1QQlS/exkPXGmZ7ayFePl5a0FJ:cuiz5dU7h2QuagXq36Np2aE/ao54Cgq","tlshash":"6a82238d9f564f6a9485b3fdafea5050648740ec39a8e2f4e7b44473f80c6a50c48de7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.949961Z","times_seen":3148,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx280.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:20.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx280.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://kcexx280.com/\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx280.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:20 GMT\r\nEO-LOG-UUID: 13002713781598511529\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T01:09:28.207913Z","times_seen":14081750,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:26.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:26 GMT\r\nx-request-id: 936112ecb780b62f2ffe902989c5b9f0\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 32ad2ffb93bf4327e061bc67c5413ea0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: MrPR1rKvMbQNGnRwAP4BjWrG8ZSIDffSLwSAPFbY34JRhTMQBuBFow==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5597c0f88eb4e2f882a56f18e8e1a05b","sha1":"f9715d1307a49273d0d51e7fa84449467ba824b6","sha256":"ad3df043c143c926125bc0516c6b8d09097a5ff58cb4a9076abd4176647c4157","sha512":"090fb7047116e4338839886b85f8f6ffe283971c4e039c224ca8fa3844516f06319821385a46bd5af7f67d402a7353b953e5c97e34a5a9410cdfc0bb32c237e8","ssdeep":"","tlshash":"83d023517f41176054d3b5c8ff255f54965653d301c547c6d6fb280133d10e8f025c67","first_seen":"2026-04-22T18:23:44.591981Z","last_seen":"2026-04-22T18:23:44.591981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:28.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:28 GMT\r\nx-request-id: b9d755e0058d220e70aac819e03139a1\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: ecdddfa593f8ae79b2924713df30510f\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: pkeqihnf9Irz8RrbnjXe7ySrMjESaNckgHTwwA66Yj4PDaniAnLwnQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"376f019486f01e9140bb177a7276b40b","sha1":"8bb5e863984363d3f00b7be5308bb93ed7157eb1","sha256":"9442ad3ed6e0269724be72a5f8b32be52c86d848c7a82989ac9908ca1b29e586","sha512":"d8b816ac3ce73e92f5d9b6aa227c328c88d0d7e1eb408d1fc382f2a7713704286e7ff6bc09e825b70f9aa47136f41f1f970908ccb4fb2db0163ebe77408fb64e","ssdeep":"","tlshash":"71b012000b9f093b2d888088217745210bec84c031f8014111cc402044dfcf0da05186","first_seen":"2026-04-22T18:23:44.592884Z","last_seen":"2026-04-22T18:23:44.592884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:31.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 204\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:31 GMT\r\nx-request-id: 02bdd3139aa2e0e4882a7454d2edfb6d\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 8820f9a5948fdfb2a4a835e9a97243f4\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: CTXWU-1oS0-Oj6wK2vyS1GrSQTqEncVHxD2NeqB7xqN9cRzCGIHhqg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3b715e77fd4852eee19905df5d106673","sha1":"6b9751d5ee4fa0f02037d2ff29ef40a9eccd15c9","sha256":"d4e88eaf0fd9136cb8d0caa0f2d2c3ed8507cab64c77c79a6e7a91089096436f","sha512":"fe2b1f7ced209496f3cd356231f5ed5c78a0e15d594949d79f1b30dbe35119746691b4d5da93eab5b39eaf266d3019c78d6c0107d9cdf465bdbbe0c2486ae20d","ssdeep":"","tlshash":"cdd022056be425e088b11188ec649bf09b9c6bc220524d470aee8c0191b02b4310ec37","first_seen":"2026-04-22T18:23:44.593687Z","last_seen":"2026-04-22T18:23:44.593687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:33.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:33 GMT\r\nx-request-id: 176ebbaf5072e13c31bc23eb246c7761\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 65a102e64f0d3d6b8e3d371030c7b1f4\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: r9XHt3n1iIcr0XrsAZQz3bwHnaxB1l_Ju5QNjiTobsJYD8skXkmonQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2779224cd8fc5941893d268693697639","sha1":"61298c195a6d641d902315c1dd4ef35e45159818","sha256":"a4f4ea31c0de7f5a796c5fad35f8181fa17bd302ae7dd967ab2c443221871c2c","sha512":"b809b189417c041f0dfcdf8cb389bbaf8320505cb4e7d12fe0b0fc6655c95695d8f61fc205157bce28d6991dd978f2f53532a3a800a8739831b0709bf9c33777","ssdeep":"","tlshash":"92d0a746bb2415045c6432c4e5259d61a6551289045f065687f9097216804bdb41ec76","first_seen":"2026-04-22T18:23:44.608356Z","last_seen":"2026-04-22T18:23:44.608356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 3d152b7e5f6a06c26935abe86bd7a75c\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 06bf5a20344bf7c57748c2991d86d89f\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: aT59c2qAtKoEPAbtn01x6chxQ4rf80AATz1gmSBQxgVeI9Rq0lf-bg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c5f229133c29d395405e3710a4dbac9","sha1":"09a8b77376c38cd657f4319f786b3d2adba4964d","sha256":"0b51cecc2401218959bb5d0629136921845048d1351c1d6ee6fe8b7a6bf58fb3","sha512":"88c3798145bfe33a79c6bc6d03042388bd021b469399bdbf0959e1213daf2ab9d0511ce674eac47eaeee5e4e30d1f280a23a26fc99637d126e9651dc2320ef58","ssdeep":"","tlshash":"e9d023c15f801540456153d4dc583d74577f1c4e404f460742fd5d5315c8471f21943b","first_seen":"2026-04-22T18:23:44.609222Z","last_seen":"2026-04-22T18:23:44.609222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":12,"dns":1,"connect":2,"send":0,"wait":719,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/BTC_Price.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/BTC_Price.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:16:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ab2-57dae\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUXtUXU1lf%2Fc0%2FhuJCtT%2FqzF2dYHlYd2H%2FQaFDkQdNWZ36VW4HXBP6eGvWIXG1LR%2FbwF0IsQhZTvCDTHghr8T9OU32NO7BcZELQBob4pbO9IfBml%2FVRQMkqPLmb1wG8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7ac12b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 849 x 594, 8-bit/color RGBA, non-interlaced","md5":"013b219ede3c5a55ce26a42eae553377","sha1":"c4881a5304909fe48cced573c682409ee18ae482","sha256":"d825ea3de8fe0d361b5fe04a28d9b790885d32ca1d0c6b5e98d9ca0e2915632a","sha512":"1babd4e75add157dc0b173bf95d8f91272b2e0a8a001166746a1d74d517beb95b775437ef32751a110b01d4cced5adeab8f255727569cdd9e98d239505b3652a","ssdeep":"6144:pHbM/dFaf83dg9cvpEE6T+hRq7uaFsSZ7xsAHpJ4mA0B1qrv3xluq2jwA+:daFCUqipE+hRq6amSRKAL4m2TBln","tlshash":"be7423fc2d482578bbdfe4012c5856bc0e5e534e4612a2cd0a82e0954cfcf5a66ef2f9","first_seen":"2025-11-27T17:09:49.58732Z","last_seen":"2026-04-22T18:24:40.188639Z","times_seen":9,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\nx-request-id: 69724b9018dc2657879f9799c83b9dba\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: a3411e91ef0255eb8126d29632d693d6\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ufm0OGMlaFvQFj9eNeIe5PL1XY3QuH7Wb4NAGamTxT_0uz6OcwDdmw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0f2159775f06100f08ffaaaf27f9d743","sha1":"8591b43cdfd9616b0b7549ff3b286ee55f27dfd2","sha256":"a3fb8fd25502223a222bba00be287211adba6407fe4623243807e8516b729cc5","sha512":"f29fd42cca5b8502cc2319b5c29a72e8aa105a95b033a6c01878fc26bc16c590c745313ff964d01cfe88455b3011f2cc777f895008db9e58759041f235778fa0","ssdeep":"","tlshash":"a8d0a7257b040ad088521298e9156b6045ad258945c7054663fd5d5111840b87a06c3a","first_seen":"2026-04-22T18:23:44.611379Z","last_seen":"2026-04-22T18:23:44.611379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/favicon.ico","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47; ps_rvm_OiyG=%7B%22pssid%22%3A%22kW7XSv4ohVxMCFlX-1776882199604%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 03 Nov 2025 13:34:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6908af65-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7ymmESikJzTKWrvh9vZxzyBeFiEpK9oo5iZi2iiw6TIvSOevfhWmje4BOgrzetLN1SinRTEqVw5RA2pvHUl0s7WgyGgDMMo2so6xmzJfAB8%2B79Y3ln4Nb0NuBU6QjQ%3D\"}]}\r\ncf-ray: 9f06a8b51f67b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d0be2f7f8448783b08c60ad569fb87c4","sha1":"df707c555a605710672661ba49489c5feb4fac88","sha256":"3be99507e78f836020e82a6736da194e1914038222bad38d9a3b071d15fede5c","sha512":"3f32814a45bc34f63cf9277a413930268397f047f4a6c8025853f1bc0c9300a830db16471ee94d0fc152d4a3265f3776ba2a99eda9e7c1f23ff8dbde127a2843","ssdeep":"48:7co9P3MQNNc5H2MFYAcvTPtODRY3EY3DHAqU04fi:7cop3fI5HhG1vZOD+3E0pU04fi","tlshash":"af9194e2a7012c0bcc2313fa3a36e6b2b3005e5d3112d31758f2fc2bb51b0862e90088","first_seen":"2025-11-27T17:09:49.55558Z","last_seen":"2026-04-22T18:24:40.213701Z","times_seen":12,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap5Slide/style.css","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 25\r\ncf-cache-status: HIT\r\netag: W/\"6119d72c-24d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4dhmyDJ%2FYBVAjsOjDUfmNPuY3hh2ElNgoTpeaNsaEdUqzsiMmZ%2FEL3iduHqCHCgzB1OV5ycWN9xB3UtHPrlz%2FPlfdCTZcBOy9P0EVcIYMvfmz3WOBx70s42ETKrJeI%3D\"}]}\r\ncf-ray: 9f06a8a75bedb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.026033Z","times_seen":6089,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/1613786513998262.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-adc\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YC2PayeoQqEAiiULKzgkMzhHPdK7EXPD0eGIkj1icbmW0hCRUWYXEFiHGzjh4joR2vZ9fbdxptkB8TtKjBMRAW%2F40nsygyPXz8iqxpgql6nMOkvqX6yR%2BPYE7WVH29w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a78c01b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-22T21:20:06.776061Z","times_seen":21040,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/trx.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/trx.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-d30\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFyn2oWaJDYx%2Fzd7P%2F3sw3ptZ1sVDMfQ06yMLG9MUqvtyftBPZtkbqfXJI%2BnoEVLt0m3djqeYrteTmlrz%2BZf6lDZtXqhwQPsp2DDxXnx12KGJ4OCyQ1nD5P7JecQGUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a79c08b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"94689045fe789ea5a804e04d180d5b88","sha1":"4141c8cf319b2a9beabd2f67d9da1591ae1d805d","sha256":"85acc22574a8a833c94e8c767d461f7181a18dab1c3329d955c1eb6b801b6b4e","sha512":"ec2f109ae0ff20f4518ea4d1f48c771c2a9e34acd8895d2dc7c52c3302af590bb25e29484eaea887ac4869fbfa5ad1696c409493a56ff82e6ffe3ce177f3543a","ssdeep":"","tlshash":"ae614b9fcfe19cec8700d0ed7435d46bd5e43e5b46569c6ceb0d10a757c28215986339","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-04-22T18:27:36.832414Z","times_seen":2188,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 26\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vf9U5DAkwL4UF1J6SUCKnhPJscukDrS3q7VbH6HxyOPcD89njK1jwYT4o5uLK%2BP5cT%2FkL9T8GWCgd2xFbeNzLyqlpu%2B4gGetxRkwgnsEqjcfRg2e1uq2LApDH6uOE4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8ad9e03b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 472d7e0b6ee1407a7904ee728b28ba22\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 45911b7de75b16db9a4f86f4cae48379\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3Fz1CILLgBHJFKXavoKgmD6RqnHC9OWlRXsSiiB_r06nk8ql34uD6A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a06b1c50f2dd19cf2b43ade5ef253ecb","sha1":"b9ced411a58ca1ff34028178d2362d0a2706a0b2","sha256":"db31678ca8288b2518882b5434dfa63311e98066b1fed2784fa2559ed7d85693","sha512":"f8602a73af5c26a034b54b121492901d168768b730752745425947bf50e5d023146b47d9ca7c43e5f6db6818c5a6a269fae1ee47b9148f57480d47187233424c","ssdeep":"","tlshash":"80b012140b9b053b2d8840592176053116e884c431f9114021cc813044dfcf1fb05180","first_seen":"2026-04-22T18:23:44.614951Z","last_seen":"2026-04-22T18:23:44.614951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:23.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:23 GMT\r\nx-request-id: dad5c90eeb7a7d488a50981cde46aea9\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 893327a8cac64223de651040c0c548ee\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 10Sm96MAlWMWXiB-5Vzay0eE5Ut5hF2mMEB4BwhgQSTD7BG59Tcmsg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73e936bacb873547ed187523f9e972d0","sha1":"d90f6b74228f1950bb0dd84fd3c3f5d1cb32127b","sha256":"a91d897f944f39b9259586e63fee3463fcdb68550031074cf3cb1429b7379a19","sha512":"ee3cba0e381fbadf4e6736a57bcd4f69fa32fdf852d5e8712ac9af7b428f3e94b79522208c0a8f36746fc6aadcbf9e2bfc299c46fbf31941a4012530e7f36497","ssdeep":"","tlshash":"73b012000b9b053b2d8980492176451106e884c031f8054615cc402044dfcf0ab052c4","first_seen":"2026-04-22T18:23:44.615899Z","last_seen":"2026-04-22T18:23:44.615899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home_banner_2.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_2.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0509-4076b\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dftWRYHhWFvcBR2iAuxkVdwowpGcNUP%2FKUAfmUiw1XCMi0IJIxE%2Fs6x1dPWvNlHEta6wH5hfMzzVUTWdrWtimTk17g0TCNLm3wHsXpshtZd%2FJGYzdSU%2Bcqv5RRxs%2F30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a77bfab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"4edb32e15e62992c49a5d6081755960b","sha1":"d4d60aeae3ea3d47edd258dd75ab38bb2d7f8021","sha256":"384782e0c0551eabee3a5e455f445828b45e21d0b10c32601f7e597390097a1b","sha512":"aebe30f1ca659ac9141ffee439acd91dcba5a3265fe87d172943029affa5b271c1ce1fa2183c63a4bb743c8ad8ac7bb7e300f591b64ce80c8093b48a04899322","ssdeep":"6144:wtreYObd6SGtlgok2sCHNG/f2qGNWBVnJ6cud:2rjOwSGte34HN+TGEBVnJ6Z","tlshash":"be44022b4eb662e3e943caada41b0d13fe3f52406380b92fcb3579dc9607164dd4a64d","first_seen":"2025-11-27T17:09:49.562993Z","last_seen":"2026-04-22T18:24:40.218766Z","times_seen":9,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/css/home_footer.css?v=0536","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/css/home_footer.css?v=0536 HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 31 May 2025 06:03:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9b97-22ffc\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtGL6VJQJdBAJP8%2BBo9g%2FxBbJt3ubmxGLh7iYK5FTTyMpbEwAisJ%2BO2bCkw60ELMOvb%2BB2NgHTLzA%2Bglr6eP8dAjtQy1g8SD%2BOtWiWztSZqWfQfbCgSO%2BWwF3oim9v4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a74be8b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2242)","md5":"af93c93ab0cc62f64fc4663a140a41b3","sha1":"14329d2037f47474c290f54a7480734201ce56a1","sha256":"62c60d6217a2a1a65eac79040163c727a041689a9ba5b735b94571fffcfdc564","sha512":"31d333b407e5611467b16ea5995cc2465530ca974505b189fdbd39d51e73f46907132119845b21ffc4d8103ce9f1618f3ab72de8bee7bd8c04bdf028823abfdc","ssdeep":"3072:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld33f9Ld33Ei+B3i+:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld3u","tlshash":"f4e3534f1fa2f411e8fb0c6d06ef45155a29950782d39ca8be8c9eaecfd75484701b8d","first_seen":"2025-06-28T11:29:49.101234Z","last_seen":"2026-04-22T18:24:40.167049Z","times_seen":40,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:30.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:30 GMT\r\nx-request-id: ecfe2982c292d8c346a2dbad19b62afc\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: a873e82b7ed5f0328fbf723dad5c129e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: FWkZE92DBESHJwXYMcyvvXq-ZrBHu1xlwWrdycChTfWvDvCEr4D-PA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"06f721e9800c96570cc381d3955e6318","sha1":"de114312ced12adf0a8d7de869bdf11e0fc5471b","sha256":"77ffabb68d29a585b4cfffe4a8ee5c4b1416d98eab8cc29500d4cff5f1de3db5","sha512":"cc75bbf37f5ae3c95ae6002452676421fccb8e5d05bd3dc002ebd58c98ff8afc955a88416901911d3cc728bbab6d2ba6a3eee350fc35e56aac0ff71ff47859fa","ssdeep":"","tlshash":"acd0a7b17b4559600851f2c4ea165e20966957a310c717ca56ff5c0066804a9f039823","first_seen":"2026-04-22T18:23:44.618117Z","last_seen":"2026-04-22T18:23:44.618117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:33.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 209\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:33 GMT\r\nx-request-id: 3c7c2f7767365335c214b1bd9f67297c\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: b80462a0d2db27307d4772681e682061\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: GQlQGQJ9fggqZ3NPKET5OI7AVvfWUeW6GhBNHpjmBBV1yX0TseRd_A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":209,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7144cf003cdbd16aded1f0c40faadf7","sha1":"dd2c6459886f26546ab67dd459735450faa5f40b","sha256":"e6f7534056a14f984ff2f6330e17e70cf906e2867aebc7d85c3a5346ea8327ff","sha512":"6562f3f53eb2bb45f26b467edb07c8ffa895842a3cf071c8c16afc75943a3c16b27e47453a8f07790c21f181899d24fb4f9bf1e31c4c5d547687ff99b0f093fd","ssdeep":"","tlshash":"3dd02205aea426815cc123c4edb6b935b254b49d20e4190387ed8c2222d10fd782aabb","first_seen":"2026-04-22T18:23:44.619406Z","last_seen":"2026-04-22T18:23:44.619406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:30.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:30 GMT\r\nx-request-id: 48372ed9820c12bcb49df6bd2d72bb81\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 323a1e533cbdcfb74fdeaca32606c671\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cSulckvUPum4x91cqM62AjlavYm1S7xXWRZhY0DZcV9cJX-M0o4mKQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b396ef00fd45d96b1c05e4a3a102b27","sha1":"f16c47419e295f3d300edd0b8bd5e48af10b2847","sha256":"09e77215fcbfee8306c5611ca4169f4e71bdb0b12d2b790c3dc719775c65b7dd","sha512":"638c1d9e784f8b5c64fd22661974e750618020736209d4c21dd93f6c9e30d502f11fa9cc6b7319c68db4f612b565e1e28ccd8e1ebf9b94d998409ea16913c232","ssdeep":"","tlshash":"f4d09782bf5001406c00b1c0a5619c2295180396012f800b83fe08e1568006cb01ec32","first_seen":"2026-04-22T18:23:44.620204Z","last_seen":"2026-04-22T18:23:44.620204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/3.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:16:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ac0-bfa4\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qiHS9YBiKZtYKTj0kmpGIguoPeYHEIxONRoyezWTTKlK8ZfSQsxuZe%2B19VLbPiUdfPUKjzyMGqvfmYg77HaCbQjoahNtcbEAQ%2FQKhvzfpGxPwNkOg5fvueSrMHUMmoM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7ac10b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"605ab13aa91a4d3b95ef2385d94997bd","sha1":"0104babf6405cbb4351f1451dfb87617c4c0034b","sha256":"906004f4fae7119113a147d898e4c36c41c531114934276fd90f25aca902e72a","sha512":"d3a1da2b45f2e015c7f5627293e549d8f869929b8df28ab5184e013935d6e008d9bf0f56556245626a9dc66536f7125e5fd895533858aa37b4ea4133fa6c4723","ssdeep":"768:c2lAIvQgDS2AO2zPZbD349OOmCBbF7krncJ0xCXWHd+yUs9Q6+pMrMNJQhsh9asI:cCAQS2AO2zPZbjJOHp7kOMd+hQt+AMNo","tlshash":"5123f2816c5f32aacf1722e38d9fadca75c205a40b2a40ed4c9877cd5464f9cc6d98f5","first_seen":"2025-11-27T17:09:49.549738Z","last_seen":"2026-04-22T18:24:40.224257Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/js/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 18 Jul 2024 23:07:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6699a027-14938\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ne9bau8Ix7vkBcqw%2BhVnF7FkkbbsXrNtn7UUYjGiEyFfxkCcZdxHG5s7wMnh%2BqB%2BzHPkeQPEMPXu377yRLI8XLXvIABHoJ2qiobQO9NjICoiT0I7VQONs4Nu5rtXxY0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7cc27b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: c6dbcca0b4fae3d34109f305ef686e1d\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: b952cffd0d130215b82a2e72d832fc08\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vOTOruPOn2uu87klC7kj_AVwMd0XP-goBw3LFpngG3Sm0GJSSevPSw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa4b032271588c2988a58dc923d2eede","sha1":"f6724dda69021165907dd3c74ddbcebcb0d8a0dc","sha256":"0638fa52da644ae0fdf99c3baa151ffb2003376c6691700b9754d9db7bcd5007","sha512":"c3eb85201c9a7dd369a37c362bebe710fb556657a73ff046744a50aea7242718a5c18067c60ba4803b3a468c68ac8c18722dc98449d7ab506f3c4b7549b206a0","ssdeep":"","tlshash":"f0d0a98abe081228aca010a0ac558a305668298508438606a2ef5c51a794ebfba2ac32","first_seen":"2026-04-22T18:23:44.62244Z","last_seen":"2026-04-22T18:23:44.62244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":720,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:20.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:20 GMT\r\nx-request-id: 6145897102b1cdb53facaa19057ae640\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: c16fa082d1e4cea37fb5c0f29e108d57\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: OE_XlhUTAZkdUMHS6gcVCZEN_e9EDQMz9oXv4Ls2r_VaRS0ukklCxA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3bf37c034fc1f3b6294852d0081014a3","sha1":"490c9aba83906cbecd2dcf7a0e1528d62dab0476","sha256":"a6318cfd529b0743f17444417e2569142dd1b4717a5e4499284919946ae166c8","sha512":"034423e43495a62e2cdd94bd8eb6f239ff8da86044eed79023729dd5bea18641be86e8ba6ccb243640b0b10eb68c02fbdced4042a5c0fd9c25e839202226b337","ssdeep":"","tlshash":"78d023517f41166054d775c8ff155e54965713d311c647c6d6fb280133d10a8f025c77","first_seen":"2026-04-22T18:23:44.623329Z","last_seen":"2026-04-22T18:23:44.623329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:25.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 215\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:26 GMT\r\nx-request-id: d12a8a5f336e8da6b782f91c7feaba02\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 068d9c894cefdc09e508db0cb2659ead\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9abYzMLFER3x-bMpr4sUvR0fhD2pFK5XL-LIjcD_glvSOsi-iAC15A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8191b778ec33276709284db7aec3b8d8","sha1":"95621aeb463cf2c10f38538b826d4865da70a417","sha256":"1736d56ef560c87f08da31d3b6e6d4a35287dba165c54f035bbfb86fe0b9def0","sha512":"e6fd5d877bd8fda8cff1669cf1cd9480bd9660fa2b6be18d6eedbfc8a42c5f807ac595cbb013b24c4f814145267169d8d25e0f1fd14647a7a7aa9eb9b3ba31dc","ssdeep":"","tlshash":"16d023433b841591cd6771c2fc121d717d18154650c4470747ee5c60b98b0e1f429c77","first_seen":"2026-04-22T18:23:44.624615Z","last_seen":"2026-04-22T18:23:44.624615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Feb 2021 23:56:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6025c42e-36e0\"\r\nexpires: Thu, 23 Apr 2026 06:22:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEWEzbhpRo4yQl6FHif0Sba8EMAv%2FsCK%2FDrT7wy0%2B3p8hvx%2F%2FjtoYozTR1%2BS7qK%2BIpXgO5EjcTMsgf90RT4kCh%2B64zHXc5e9lie7NmFH%2F76pxF3DozggBITYt9qCeP0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8ad8df3b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-04-22T18:28:09.609875Z","times_seen":3191,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:25.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:25 GMT\r\nx-request-id: 35f05b52776d1ba0f3f4b7ea58860b68\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: a819afe99cedcbfcdec410176c321afc\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6fmIx4bvpja9l035GS6GSrTVLVfBYcJjX-umkUCbjcM4Q-DaeFYGLw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a8f882931aa618622c1e95fc2d627591","sha1":"696e21b4be662582833fbaf62fb0379fd6a15f8d","sha256":"3477d968f0abf152b137a92ece23579a53e45a69bec47d9a8aba0bf40cf556db","sha512":"6d5112cd71ae617732e7581375878b49153981c2920edb8f50599df2e92c5a8a261bb1afc7565b48a597c4c407edcd791027911fe56db947ae89282fe80d3bc4","ssdeep":"","tlshash":"f1d023c15f801180455113c4dc9c3d2c567e1c8e508e460342fd5d5305c5470f61d43f","first_seen":"2026-04-22T18:23:44.626798Z","last_seen":"2026-04-22T18:23:44.626798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home_top_bg.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_top_bg.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 09:51:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909ccb8-6a0c3\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86QsKrUi80Wqwr4P6YagJlL4laabaA%2BytTbxeyqTjVxFsalpeQM42f6gs7fAwZ2D5KceO70qPfZeReZCYh%2FFeUeTmjSGFGUI19Wkvq5sLrgChhAfs6wj5KyzxCmnyFQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a77bf9b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 535 x 700, 8-bit/color RGBA, non-interlaced","md5":"b6d7e55919a0816b3d84bf64a46ed1df","sha1":"562b04c762b92c49245cbd3c7c3dcd5a89ace6f8","sha256":"eeebc077c321dc56641615e4d2d8f4d7fcc206e504796fe277dd5a083a97211f","sha512":"66d0551dc1a473a04108bbdf4473617eb6ab5b4b4c99aff15170f47e9f0c3bec98fa1fa390f768147e19d64b0181379ee00383cdd288346fa84170751b0d23fe","ssdeep":"6144:HYIU+8FT0nH61O2E6kRk2RTPyUBej2PxLXj7JqiaNv1Spw04OZMZ/dMW6Bml9yyV:4IAFTniDRTPyUU6HLpx4LcWf9BV","tlshash":"b19423d8eddbf51814cb9e7099557fe8036ae701cab6906ccbb47cc0282dcd6168dac6","first_seen":"2025-11-27T17:09:49.595537Z","last_seen":"2026-04-22T18:24:40.21991Z","times_seen":8,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/hot-2.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Jun 2022 14:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a35380-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLo6M2ghhEh3zjE2e3asCjcaqhDWtywlG8bbRWpHXQGKHyqRtds3OdKguV4Die4s%2F3oaOd3EpnoOosZoMJtTmWtjkwNow%2FHRry%2FQzSc8eB7vm3bm7fI%2FVAXX%2BedcsG8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a76bf4b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:50.076028Z","times_seen":5036,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /widget/loader.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 May 2024 09:15:03 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 16 Mar 2026 09:42:24 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69B7D080C5F79E3033CE6031\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14476346677076018366\r\nx-oss-storage-class: Standard\r\ncontent-md5: ABhPCpPR94Z833gvPfGrUw==\r\nx-oss-server-time: 5\r\ncontent-length: 5741\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3657708508755476814\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16344), with no line terminators","md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-22T18:24:40.171544Z","times_seen":2552,"resource_available":true,"data":null}},"time_used":868,"timings":{"blocked":424,"dns":378,"connect":19,"send":0,"wait":20,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap/fonts/bootstrap-icons.css","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/bootstrap-icons.css HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 01:29:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6657d670-edbb\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SnhjMzTBT94NDQTU1bheBD8pveULGiv1TmtXDzv9EuYBOuzboLIET1%2BGMvxfz%2FGg4K1J0X6B1bmJsgshsDAiNxH%2BQqFn2JPxW2IXaYO1gYJWDxomEUOEGTmHsoTsmgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a74be5b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-04-22T18:28:09.601426Z","times_seen":14838,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 6d8d5c50173bff540a1a7ca76af33744\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 2b10acbffe1394857d0a657c6a31b720\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7moFYFMxmfDjY6ycB5lQLj-gs1hpdL2A5tLz6hhLxNRq4U_DAJR9sA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b38d9d18cf822d99dd1dfa6123bd1dec","sha1":"422d8de3412b2a659e846b747d597e8a73a6d89c","sha256":"858942a7554d1f0f0f18f0dd4ec579623cc0c91967cc6be9e3301b386f53c315","sha512":"84e4c87d72915487037bb05cdcb53b6dfcf94a5a2105bfcc6f3d36a4a4494c400bb4ee054b338a96c2e1e284381c274ac6d2799e38da8693fa38f888dbd1182e","ssdeep":"","tlshash":"ccb012000f9b063b2d8840582277052106ec84c031fe054025cc403084dfcf1ea05181","first_seen":"2026-04-22T18:23:44.629894Z","last_seen":"2026-04-22T18:23:44.629894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:33.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:34 GMT\r\nx-request-id: eebd8e5685d000d77ed4e804a190911f\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: c0f9d7f5cb8e58403039d5b098524756\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0Dj4ckdeemzkzx8dmTk6dUOUcLiGJA56jNC8vylJi2USlihgIAUDIQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1b1d84ca6e0d98ef2866ae80b0175471","sha1":"92fdeb39aa8dafa341eef85453eb3ce1d48478da","sha256":"b5098111785064b813f30f8931f4c3e710a09a279f47a3c707eba437892405b7","sha512":"5398fa6246088213702377c57ac53769e15f2d235b655f4179937b6f2dcfe1a14092734c5cefd08d13d6b1d370f15a2abf85dc457ca13b6866715505691f9a5f","ssdeep":"","tlshash":"c9b012000b9b063b2d88c04831b6451106e884c031f5015015ccc87044dfcf2db09280","first_seen":"2026-04-22T18:23:44.630769Z","last_seen":"2026-04-22T18:23:44.630769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:35.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:35 GMT\r\nx-request-id: 5eef58efc05d31ea2fc6dcae7be7e746\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4232e97f3373aa1cef94dc69cf97937d\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9ECdNvfAvLMPaXDBoyD2iraIGFqeNhIMKyp6tM1Ovv5N2kFAv4L7_Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0f31f2705b3f6bc9a1374336dee7f900","sha1":"1d678bf58fedaf01611ca9e094ba7bd99c3c9fff","sha256":"2365432afaf95f25835e63a310e7f37a9510031c231ab8eeca711f93b8e24856","sha512":"309183cd831b5d500041505bc962d972a73814708c5bfe997ba2ea105f0a925c3e49e1b324f4d25b546a934750424d482ddb767852944a9f06cdd45cb9f0ef1c","ssdeep":"","tlshash":"8dd023417b1515445c45128bdd2479f09bc8148510940d4f4bee4d1096c58a97d5c432","first_seen":"2026-04-22T18:23:44.631578Z","last_seen":"2026-04-22T18:23:44.631578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home_banner_4.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_4.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0527-33f3a\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgn6KT2tbZOyThoSuR3RaehWwDn12bRDZMnvPgYKznuA7xFu9JWp57u8u7si6seQFbgm2alb%2B6abXw694J6Ux0tQMxJF2qneI1y6wUBOWp2BPEDDPvAkAHFkHQva1pA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a77bfcb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"8a3aaa5b8fa5f612ac5fd8547aaeaacc","sha1":"b585b36dc300791222eb5ce2ed3ef2d90be5e454","sha256":"a030f67fa95a38417accbe2267f9fcdc5df527e5319b38aed8ed7067a2f77170","sha512":"01e7f1c94a9397249c8b8c8012e891b1b903a7feb7c854008c0d3f8db424338657b41748c5644a7e53131525f79a7829c55d88038dae2dade065cd0042d1da74","ssdeep":"6144:g4yfMK8imcx3+S9tiND31qrUchVBxWzE2i:ryfci14S9AND30rUeCzEB","tlshash":"11240240db518573d7d68e95db160a82c69e723bb80be85153e7270b399bfec2d30d88","first_seen":"2025-11-27T17:09:49.639231Z","last_seen":"2026-04-22T18:24:40.205703Z","times_seen":9,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:21.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:21 GMT\r\nx-request-id: 2285b832f507976e52ec6b8a71cd86f8\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 03ba7e6a0e9abba57902ade5a7a1d67c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: AJhY-iTFc_dcPGF05WqJMMBCAO4tZn5rgM_5dS5LlP32J1WdFY20Kg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"13b2cb1311395bee6afbeb45d089a47c","sha1":"3fe483aa548725d4770e2da6907be0a492dced51","sha256":"094b50084dee299e81ceb41804b8ba7a38ac088bca0f2a3304cc2fd7c19b60d7","sha512":"fddb31a2bb9ae2c9a42376a88bd3ccd1cdc131a3cbb543f245e3adffee79f43d993d4844561348107df58482b79203348b483b613da9f1366d2d9126c911eefe","ssdeep":"","tlshash":"e6d02387ff5405807c5571c4e5619d22d55c13d6016f814b87fe49e556c117cf41fc76","first_seen":"2026-04-22T18:23:44.632986Z","last_seen":"2026-04-22T18:23:44.632986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:32.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:32 GMT\r\nx-request-id: 78925666a2e2f7f7ad0ff66f4bd0e4d2\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 62db92515552f8ab1296e96d8abba97c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: wz8PEJ0OsTh5PTdSXZI_J17KOe8boODI6Iv14QCXhhggRp3uDuFXQA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fb6bd1c1ffa18ec6a82f5745cfb32a86","sha1":"1a6752615e573c0c372b3a73c03f6b77e33b915d","sha256":"258fc627ef489def64b746e025a25d2ac84aa75be902602d05a70ac4f93c94c7","sha512":"12ca6714c877b2f73149b5a55c911dc7c6ef7f8e94f45234357ed3b2321fd19b7c5674d3a28c989cd856757b26d7d83df89445b0917787d29d27759caebd4e9d","ssdeep":"","tlshash":"8fd023207f0a1dd05c5352c0f9529b6045fc31c604c7015763fd1e0015c40b57709c3f","first_seen":"2026-04-22T18:23:44.633856Z","last_seen":"2026-04-22T18:23:44.633856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home_banner_1.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_1.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0503-33d82\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8B24unklWgC3LwZkuB4TwySrWqOC6BC8sMT4fYk%2B9CIPiORgyQCM7Arh9a%2Fyf38OjERbOeXIbL7TX3xfoxXhj3Fhr7ksSLfE3%2FdcUoC8fN73QFEO2sOjXkvcJPz7Wso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a77bfdb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1201 x 601, 8-bit/color RGBA, non-interlaced","md5":"7a706fe33fe6513a038e1cabe19641fa","sha1":"c50d4c295e430f5a05f8693b5a7658184af13018","sha256":"52e829d18b1a4ec0889ab4b1e5f3dc58b5df0c70f1e674f4dd8a6271b423a36b","sha512":"c4d402381b2b43e4fd4f3facedc2bf7f546202eddf7bec13b885b0a44ef75a138025629e9cd4ebb9e6266be911938a9afbbf0ec9b753a1a1737227d646039047","ssdeep":"6144:i0ZICYC8BmKsRhh9nUkUgkVJ8HB/9LZPIQMNiwi:i0ZICwJsRhh9nUkUgsJ8HB/jgFNij","tlshash":"3a24f190ae9e43b114bf3261f1440ee9e036314f956dfd6a6a34a7f9ff169302c21668","first_seen":"2025-11-27T17:09:49.602656Z","last_seen":"2026-04-22T18:24:40.210567Z","times_seen":8,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/5fc.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a86\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4wYsBrha6%2FfuGlZ3X32PeJ85DRD5MtW6cKXvu2%2FHXfxR5IUbUimVUc6duSOqvn%2BgYIMPMMxmMMQ1uLOcVqC0QneyNbl5DevjZ17lbkLu8HaZt1BzkFVFpyBcmhQsCQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a78c02b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.854493Z","times_seen":18549,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882199166","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882199166 HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:23:19-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: 9f06a8b0edba0b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1199), with no line terminators","md5":"ea3116606d6350e1e3a63350a1d6eb7a","sha1":"e1382607300597e3f9f1211445623a6d2cf7e2aa","sha256":"803bc7f6c29e81b64be56a0c1cdd29678e493ce0cbd77a70348b0f393adefe53","sha512":"67017f0cdf3debbe3cc934dcdff695303c3e6e3a7109fbfacf5fd8c50765224700f87d0f7d93bd2864a905d27aa9787d44957483e4d28e4aa3f567bccdc82e97","ssdeep":"","tlshash":"0021f1774508237a82091df7e56f2e0e9a32581faae9c7d5c5344e50506e73ab431ae8","first_seen":"2026-04-22T18:23:44.63593Z","last_seen":"2026-04-22T18:23:44.63593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":400,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/css/base.css?v=0536","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/css/base.css?v=0536 HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 31 May 2025 06:06:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9c4c-642d\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRjC5GqcdgNzXPl51VXpR6Ekon0Ef5NN%2BSxmSvJLiefNmAoy1%2FQ5iJY1KXZQkoG%2Bd6aPrs%2BzHDqF3FSE1DwUL1tgYxqVxDVy6BCQ7fV7FZgwwkkquQRGeKDOh88YaJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a74be6b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25645,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"13c4f8a0e9a328b2735872b476acd8df","sha1":"a72a2292319e32d176e27b679f87c40ad25c316e","sha256":"2131e86e30c4207121fc669063f77bda752091ef574ac06deb5fbfdf86895a99","sha512":"1fd11190bcde80daa37375d29c3463a1fd37df7b4473f32c475163e189e066a01daa73cd66cbc98c3f828936829f6471628d79364e8f67b26cc5493d3356f65d","ssdeep":"384:fpFiO2TjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBE:6RcN39FDwFx9EZS9YzqtRB8TF3MD6","tlshash":"3ab295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2025-06-28T11:29:49.125948Z","last_seen":"2026-04-22T18:24:40.16651Z","times_seen":45,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 25\r\ncf-cache-status: HIT\r\netag: W/\"6119d72c-12a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vF5D%2BZnvuY087EbqbGgZrzkQkY1vXPYenJ9uYxF6uEz8hvm1ss%2FswhwpBqINTBpOTYfd6lOLsqoaqwKVGMEPFdxCLYVL7ubrmFZRCWcoY2awWnj3h5KRREgnInlniCM%3D\"}]}\r\ncf-ray: 9f06a8a7cc2bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 204\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 2e9c70ac43fc76bc2306327089ad4370\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4a87a67022ca3be430e8e066df25f878\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7d9Fa2rBzH5Ry_VgUO9dNavHmutaDqu2Bxw6Bvk0n5o7A2J1zjXd5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"12cc8015c87f07058fd4a4cec680ff47","sha1":"70444ca9b2007eceac6185d0438af3a8b939ba9a","sha256":"f833a6edaf5dee18a4dfc1469d881e6310dc7cf16055ef42c5a3350f469ce70f","sha512":"c22a9c5d819dbb0aa9dceba23a09e9b73d0c26bb6cb0d07576b77d9659c6e222ac066443fb0a2adef0e0ba8b0bd8ec62e938bf75b3fda03b7d8e7700e208a414","ssdeep":"","tlshash":"5ed02284bac415d248a102c8ac209ef0639d068100834d8a16e99c619ea8271b81d83b","first_seen":"2026-04-22T18:23:44.637852Z","last_seen":"2026-04-22T18:23:44.637852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:29.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 206\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:29 GMT\r\nx-request-id: 44c2c0f85be46d19119c68699ec34019\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 67afe5be0edd23f959a6a426fb704d1d\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: DJSkTxykQcHInB6yrf2anz_vA7wjN3hNgekbFkPTA8poaYgzOIuD2A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"70645f89b52f489ac64451e85f4efb3c","sha1":"bec66e5b12ad27d944c4317dbed61020612a696d","sha256":"f87bcd428bc99799e731362289ac2d15db28568743dc4d1de21e19ff30af45e5","sha512":"fe4b6b5df5a4a447b8413fc81e69aa36d40b245d0bbe22919cd18a5a330feb7eca8b56fe382148141f9000c8fdf01dc79a0a38e51d69eca98c8b2dd28791f8fe","ssdeep":"","tlshash":"93d022a3fb0153d0986032c4e6691920821d2a8f20cc45c383ef2a10218b0bbbc2a83f","first_seen":"2026-04-22T18:23:44.638728Z","last_seen":"2026-04-22T18:23:44.638728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/trump.jpeg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/trump.jpeg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 11:21:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68948c3e-12e3\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0cBqYKymYN5bxT%2BbyWDxHCxkvlgPAwVtz8R38QZ4vvk4DiOY7J7UJwD%2BboviYATHoT8Qv6iG1UUT4XrtVxUpvoXaN2psOvkM78WHUyxTe9BEDJj5lEwtSJz2ahmiObs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a79c0db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x256, components 3","md5":"bab381c17cd333000cbf4386b1542f5f","sha1":"ed40bf33caafe12092cfbfca1d0512e3ae8b2579","sha256":"af420cf9fc2594bb7bbc2e81d40c2d234ebba6a7921ae66f410fed7063b0e033","sha512":"c2766268d80d3ce92dea42096cbefb7c6453f88805d78da01ab2fed9e4511f6f47cddf1ad4b6d0da14fcf141fc99caa2d062d4b12d7e2305c043ef89ad479213","ssdeep":"96:IElbw+iHVumHFufDbDHmHPypd9lq4nItnEFgCUii0xT:9w7VuUFufDbDHgmbl9nItnEFTUiJ","tlshash":"d0a15b4babd9164ae4704f34a17247649fce3922b85a1917c0c617ba2b7f8c71f2c786","first_seen":"2025-03-31T17:08:27.225722Z","last_seen":"2026-04-22T18:24:40.226222Z","times_seen":93,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.20","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T22:21:19.915341Z","times_seen":18938,"resource_available":true,"data":null}},"time_used":1011,"timings":{"blocked":328,"dns":4,"connect":206,"send":0,"wait":222,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 206\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: f6634a476e49d376df822aefb4fac274\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 9f79d07f7d94977e64499be9b75d5bd2\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: X4HU2mx4nxLwfIZ78wWMA1aBtlK7GYEfZI95-qOEKZlTFQhOja8k-Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ca5b03afb2632ddf713d8d8cf9288fb2","sha1":"15f369abedfa2a9ba77c3d5dbe864126e907899b","sha256":"bafe071cd1c8e8da63d48e9f0f829f373491c5e821392c8db21c45d4f4f8066d","sha512":"1a4dc00ab1a05e6e1fa83398a73d7c33c155e6aab88ca63222d376d446dc36c118b424146e44831447955ae61c7fb5704e4223bca9ed2c32e30c0e3090a10519","ssdeep":"","tlshash":"58d022a3ff0057d0a86032c4e6251930831e2a4b10cd41c683ef2a20218b07bbc2a83f","first_seen":"2026-04-22T18:23:44.640683Z","last_seen":"2026-04-22T18:23:44.640683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:32.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:32 GMT\r\nx-request-id: d72560f67599b973123ef91a7a67a7a4\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 89dfe02841cc8ff9182ee5c6cfd0e261\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XyThAqqnn9RMTVQYB26Ka2FW5dFRIAbFZt1kjd9vPhKfzZJIlBYMJQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2119e9be14f7b5c2e543edceb50287e1","sha1":"09840a0600353e1b514df90bda18da9973038fc4","sha256":"1fb9299e0d7b837aa95695027444115355f2da0b4281422dc5916eee83d37219","sha512":"d513c2ca2ab5f12f8cef64a066ab491d453b439a71b52140d154c37c5ffa6233f72ddde036a2ad7c99ebed685586421dcbc087860a154f71f55e09ee5c49b4ab","ssdeep":"","tlshash":"0ad0a755bb4011a0685262c8b6a58e20876517d7009a5297dafa3d5127910a6b129437","first_seen":"2026-04-22T18:23:44.641487Z","last_seen":"2026-04-22T18:23:44.641487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home-p-telegram.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-telegram.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3d-42d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72QJZKesgZxafNRla6LE%2FIDlEGzCIB7fGMv3gzhz%2Bmv9Z5eIGOFcgQJ8TeGWLmGci%2FI%2F15nO4fIXwl5d29XIHpHjT3g39e39OqWXOL8Un16BGlNFx%2F3MZEKp8XPtupQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7bc1bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57330633e16609d898b2e0a33ded01ee","sha1":"f14c53f1bd8856aeabfd681294e71606376adc29","sha256":"941c5903fa6905806d2b660971123513dc8df16dbc117835be3f4226c2fc6195","sha512":"2ef025a3b47b358429cc0585fe1e4ebd3b08bb6f9121be433ea54e10ba65531d1598efdad6332205434ce0e08ec485bf12ef161ddcbd81a2f661b3223bed21a9","ssdeep":"","tlshash":"ec11fca0a6efe6d0904ad3b4c565a5f779ba35ff62d1dd4a829029d0e61209d6008d80","first_seen":"2025-11-27T17:09:49.617063Z","last_seen":"2026-04-22T18:24:40.219319Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home-p-discord.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-discord.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-cad\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FaaYBqx42ODAJMXoXy67ArJzoqBj2uP6md1K1KYW9gYvjAqUB7cLkLi6G%2BAEQ%2Bd3LO8yGEqmF6J8YaXi0ZtS2jvr7U7QXy364bnlCO6jMwtt9ioVRRxhBDlvzMw5PWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7bc25b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a97e2474ad542b2847737426f6fe2ae","sha1":"e29ce1da34e1f4e9f9fd231f2e1f4d2497499b9a","sha256":"b26887362894dffd827cd8089e5721fe104ca1d15484d9f5a4ff39d3a659d2c0","sha512":"0e2167a25b3fcb54511c6ff4557be92540b595b15ce56d868605eb340c74ca67933fe64c42822e1cad44a7ecc6d7dafa10705ba256a48370056c5d2c020e7af9","ssdeep":"","tlshash":"fc6100fbaae833f4814ae7d990359436737f38fb37069f485344afc0a94204099ae854","first_seen":"2025-11-27T17:09:49.64206Z","last_seen":"2026-04-22T18:24:40.195657Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/Icoinfont/icon/customer-service.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/customer-service.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Nov 2025 13:24:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b5028-f71\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cf3Duf%2Bj7s%2FhOh%2F86620d%2FUOfyh8s5A%2BCujJl1q%2F5RF0u%2FqSofDnzky1vMNZG2cnlsfCQ62TdjBXF%2FQVELXh%2BPiaOAFj%2FzMYzVwJ0nFd55kb75Nmq7IGnlD14Vsv4jI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a76bf3b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"91a14d2d777d16708a29fa14fb8a6045","sha1":"6053d1e2f70f5e51f94ae307477442d1e8a7f3bc","sha256":"a0adef8cd9b4cd8664b55984519989b79e73d8809ed264b2ad15be40eeffcf67","sha512":"7eaab105b28879508b8eaee9bec2a80bf9cc10b94f328b5e528ca086ef9cea12cf72d1f01ffe6b2d4c6a76ee2459e9677e959b8fa46517a9dfedf6994536e89d","ssdeep":"","tlshash":"04816ca00d78831e6b720e65e7dbe014e52bc38582e6202bbd230dbbb4b7d9594924d2","first_seen":"2025-11-27T17:09:49.629541Z","last_seen":"2026-04-22T18:24:40.212078Z","times_seen":11,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home_banner_3.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_3.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a051b-353da\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVmLUQCOzVtQK66BCjf%2ByBJpVT9tdOXGcQ%2BohawdZp4BxbN9yI%2BG%2FTc2VdzSJHwLVwAu3WCZnHc7N3RGteDQe%2B18fTzGhMgR6e7OoD4v8Lo4YJT5iNsstuFz%2FzwwiXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a77bfbb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"b3595c9e4447f6c4133f192e3cbe5c58","sha1":"08513a54419951c21614404db4131b5d70cd8a9d","sha256":"e4c8c824daefb13627d95ffcfc92e96bc1efd491e02e7782b822487d9587058b","sha512":"2395f0593bc396626efe4780e9404a0edc5fa7efaffffc6011aaebad0f271414a3823addbd894cb043fbfbdd55cff2fc92012a02a4f418c62339570013088efd","ssdeep":"3072:UIFD+3B6fRQEa1Q2qZLlLt7L1sK9aU6elKNkRzZHao00HKitP/69RXH2bwkp2:lGQJLpt7BPcU5gN+Z6o00p9+Hu2","tlshash":"61240193c8a2b2a6d6d2587d674f3e9ad770a053b1dd5f6e4f3020aa24234ccf932c55","first_seen":"2025-11-27T17:09:49.544193Z","last_seen":"2026-04-22T18:24:40.160559Z","times_seen":9,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDCnIlU1ZyqMFME7uJeUxszsYuxgAlmWm%2B8bvWRx%2FUJNwKssMXGNUcty8EUenbErNNM1%2Fe%2BTRb1DmhshAuKPJuhXzbsRnvD3GNOXVdBijW7iNe7yVfNLETRij6QWJlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7cc26b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:32.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 215\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:32 GMT\r\nx-request-id: e0eaf2c7d0f352287ba6e9f51d70eb05\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 437eaf071378adf41e518fac07b4060e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Pwk34svm9fu8_ehk8HVGF5ZOLlIKIKa4Tg2Czumh9LOXtFHjRz5N4A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"16f98d0e788e8e545de6039494bfc864","sha1":"60383d2b9ae772e54a90f49c2856d96d833e14ed","sha256":"fb628e35e6ab3abccf9f1177bff7ba63ea1cc0ad60c1a2bcc9709b9dcc78adc4","sha512":"9e80b1ea2256e18902a154c2dc8f5571981f8b0d6b62eb3d98d74dabc0751630ab05eb3b6987b55062f95cbc263b4e63640c271bcdaf0a9156ffffc543fde974","ssdeep":"","tlshash":"5ed0234337852191cd6371c5fd111d717d08154354d8470757ed5c2075860f5f419c77","first_seen":"2026-04-22T18:23:44.644344Z","last_seen":"2026-04-22T18:23:44.644344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/1.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a08c8-abfe\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=py5fZEjfE%2BPHIWCKDfBGT64%2F1szS1Su5UjuWcktyxbor6R5mGGAeop2Z2L8iiBPvc2imfA2QBseKdnuV9U1cXjnifQSBKKQBqYpMuamw1XUKD1yd3%2BlVCn8gJmjsDy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7ac11b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"95ede75112674627c15fe91a6698f7cc","sha1":"b78fb58d44092422f2dd7c714bfd2bfe96bad384","sha256":"d9ebe65437c812e6461b09c204bc6df20fc1c9e7fe818f05dc9bffa32799fc30","sha512":"1ef985e6c23b666421dfe38b823b41e54bf73654b225b289d5da9378948bf237ddfa625b95fad4f600f555d78fee84f594ace91e51c563aa3220c086d450b109","ssdeep":"768:d4bQB2xDA3CaScbjgGzhsegjOya/E14QBhWdh45U5/+mXEwp56k:9BmAnK8hVyO//2Qd352mJp5R","tlshash":"591302b59bfef4aec32500b10ad7fd09126c59988ba658d126436dfd8dde3028e09774","first_seen":"2025-11-27T17:09:49.632126Z","last_seen":"2026-04-22T18:24:40.198928Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: a443a3e9a07806130d4479b0c5c4db4c\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d450eb3e8f7f18352a1b9bc6c8b8f46a\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: R-6Z18QdrLsRqREefe0mql2lsGYNZkfVzTzEXxZK3jlPuZ3i2BPpQg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7b902e02f55353d19810bdab3e3ec6d6","sha1":"a18aaec0889d165a14e66cbb9944821b9b8fd4d5","sha256":"17c7f5bcfbf56dbc3c4774f4753232b66b07f8e17e813d80f2672e95540d4838","sha512":"5caeebacd850a346347b8af43a07bd39e9f1f4952fa2f3986643888d6ef9a40faca46c25c1c756f04d6669dd6184b87277cd906b6b7aa0cfcb272055cd9e53cc","ssdeep":"","tlshash":"45d02235af043db50ca021c0ec318a30eaaa93820485c00a66ee4c24cb880b5ba3fc6b","first_seen":"2026-04-22T18:23:44.645614Z","last_seen":"2026-04-22T18:23:44.645614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:22.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:22 GMT\r\nx-request-id: 9c060cfc27c97cf027be40776ab4051a\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 17d0b3c6f1d425a8508771180f23e250\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6drjFblEQPj6pNALF8wu0klvgnEAoQUzWLysIrbGnzAWgQyOugNVtw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"68c025cd1bb2a357775f82b2fe210e37","sha1":"6eaf9cdb75d0420d4e640290fa6212f777877ccc","sha256":"23a531f7e7c21b013c591ce7652e55902cdd61cb5457923cf687e52382aeb71f","sha512":"e9a5091054f9449ee3b26e0dd86203f2317a22f55d80c01d41f9b73adea5326d54cddf6f5e8b23f2b05e80f96c7cd064204e0990b596ff650d38a5b57755fe7e","ssdeep":"","tlshash":"a9d023557f411a6148d3b5c8ff255e64965613d301c54bd6f6fb280173d10a8b035877","first_seen":"2026-04-22T18:23:44.646434Z","last_seen":"2026-04-22T18:23:44.646434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\nage: 3510136\r\nx-served-by: cache-fra-etou8220176-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-04-22T23:52:50.134441Z","times_seen":22670,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":54,"dns":1,"connect":13,"send":0,"wait":14,"receive":4,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/5f87397132a8b02.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-998\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6zym%2BVxokWKojBygQkubTCQhNLISGX%2FkSxkqNeo3DU1YGpMT9tBB8a7oFx2lQ4%2BTD7YKfmOaUGyncqZHVzFHz69CqINPa%2FsuGJAVawwUpJzzCTFJ%2BxZ8bAfOW7Z5QY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a78c03b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.849739Z","times_seen":18061,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/home-p-linkedin.svg","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-linkedin.svg HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-523\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poztwnzdb9mP28WizNjJfcZWzwMkIQpqm0RKCO7fpGrjbtSDEYQjKix4rEDVge1NVljubzcywwfYQYU3a40HS%2FgTjRayXUhhs1rVC9355hoAF9GFxo4lJbfvdx6qC64%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7bc20b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91cc9f901a7faa746e809d9ac862ecca","sha1":"18edcbc4ed6fcb4397cf9008eaa60a0c52c792fb","sha256":"d3f387b5ad7823a4d24bb708ab967e9ac9a6d0792080142904c1be5bbec6894b","sha512":"db07ae57475c1b89c544ac015869cb87dad1effcae153fd8cd11514388f43250e219694e7f5c4c7a8fd6c5b350d5ed538bda02969d0719367dc94bec7929c9b1","ssdeep":"","tlshash":"4b21d0bbd1f562e893499355aef53ca80b2b0bf5bb45ccc871cc0bd48e204ce9e45894","first_seen":"2025-11-27T17:09:49.577106Z","last_seen":"2026-04-22T18:24:40.207126Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/static.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-38a0\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:07-04:00\r\ncontent-encoding: br\r\nage: 191\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06a8b0edbe0b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-22T20:49:43.793179Z","times_seen":612,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: 5b46b75d0efb0e4bab7be2dc1ac5452f\r\nContent-Length: 47\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"5b46b75d0efb0e4bab7be2dc1ac5452f\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://kcexx280.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1776882199770\r\nresp-start-time: 1776882199772\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:19 GMT\r\nEO-LOG-UUID: 12450900152149613901\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4220952e01ca5444bba3f4d3b1f31aa4","sha1":"cb3d067bad23ea150c4324a9e89e6f3508978375","sha256":"54bf5dc52539fc227234ee97c891b0d981976dc98843e8a6f447f2985e550a6b","sha512":"670a203927297ddfc0104873db42b41f425613c6f2cd7496bfa345e20a8b7dce288a9b8e9af7ff265ae56f69a8fec36f25a0d8b2367ad7a2abb57d043113575d","ssdeep":"","tlshash":"c311899389f44aaa5f2056cc4608952ad49fb02f0ec0ebfed9117e448d3f3a90bd539d","first_seen":"2026-04-22T18:22:44.116368Z","last_seen":"2026-04-22T18:24:40.176034Z","times_seen":8,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":0,"dns":214,"connect":22,"send":0,"wait":249,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/5f87391dce40926.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/5f87391dce40926.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-91a\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kO3o96qeJvhnO7RIwKhBaVelMu46QZOOcS6iyX70JyrR0KpDfzGTGu39eBVW8N3QcfQFPqLZiVzmkpe%2FQsf3FoInUyokix9KN50YLTLtMObM%2FAjInXFHtHT2ZpqTTHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a79c07b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-04-22T18:24:40.18425Z","times_seen":15857,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/1594057379245582.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/1594057379245582.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 02 Jul 2021 16:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60df3b68-c13\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NC2qtelWSAPIh6h7fZCOnY0hTsnvvHnHoRQH85l9geipnuOBhAVRFWRYR5FevFblIkTCeIcpi1v5PLaxxia3K39RAU2UIuPXi2tVdU8mK4WOyTFDJBme26zFa9OADJw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a79c06b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"033d340b5a4a22d8e8590b98409158f3","sha1":"098ef5ee4b44f780df7f39c022ea491cacb32e7f","sha256":"0b53847e742884cbfbc563109bb99cacbc75fbb1bca892a1dbf68982e68778a0","sha512":"60de2b9014037bbd2f081ffe295d2cd0d0772bfc9b878986404981aff8df34a51611ffe2d214e0ce8f3849f9f9bda9e52b650d50db089953fde9bbb5b9725339","ssdeep":"","tlshash":"03512bcb908c59b6afe24ea002945ce48021c177ad3b4726963ae91e9f742f6070dc62","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.900191Z","times_seen":3289,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/xm/4558.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /xm/4558.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Jun 2022 07:48:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"629719cc-48b0\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2F72iClVGlxW0RbIcCcbW%2BiLO1weUU5JifLHRMj%2BFg3Bp62UjcZo%2BUwA1%2FKcjSP74r06HZUP%2FeTke965eTwcFl1t0PBNJsv4ZNLVV0u60Jr4ez2tFyPpU0MnWYBqk5I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a79c0cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 199, 16-bit/color RGBA, non-interlaced","md5":"c7e59bbd0ca773c704b906e229ca8383","sha1":"e191e030bfffacaa1b53ea83121a03955fd080ba","sha256":"22e62f07c3d37c4e0b8f717bda7ac0c60362fb80380c9f6def693dd4f9b4567c","sha512":"69dfd5a8bec0c1533adde28c322e96dcf9236b934a21668bc435f55f3284258881937ff92573a64188b4cd3ccd52f6d485eb4d864d4da0806753c71e385212db","ssdeep":"384:KR6xVqHk99Lm0m9/zkJMPoqgN09WuJFNFHaV2zbj69VmO:tvQk99K0m9/zQLqGeDJ9HHzbjnO","tlshash":"d682e0a4850add63e0b15bb72bad2753cd3d3a2020d4b2b53ebb09b468f090657a4ec4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.90921Z","times_seen":3356,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 18:23:18 GMT\r\ndate: Wed, 22 Apr 2026 18:23:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-04-22T23:50:21.151356Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":142,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:18.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 209\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:19 GMT\r\nx-request-id: 2ef30d04b2847498f5129cca66bd4d7e\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: de7908dcdcfad5698d770b77ae318600\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3__3ORp80wtv7xtndtOCfL0o6qIxfOYTA19XH_mt3j38I8g9sKCmUA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":209,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b3bb1bc9f336ba49d84cbaf5cb145d5f","sha1":"ed855a487599d552fe26656a9c221a2367b36de8","sha256":"1dbd6d6379f192b70b3ec360314580019aeeb0ff19385385e4768d84daafc850","sha512":"8e03c248c61d1e2d5fa31ad2bb06ba1eb137893ab60a474102696d8dbc7cd2e47f6f12d7796aa5075e3cb4ed0870dd4bf6328d23bf98feb0cc0afd28bee04b3c","ssdeep":"","tlshash":"bad02209aea426815cc122c4edb6b931b249b48d50e90d0293eccc2222d10b9b81aabb","first_seen":"2026-04-22T18:23:44.652192Z","last_seen":"2026-04-22T18:23:44.652192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"5CC75246A01D73279B6562D7EC1FA1B8\"\r\ndate: Mon, 16 Mar 2026 09:42:23 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D07F6FBB5239311A8291\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11091130583004183539\r\nx-oss-storage-class: Standard\r\ncontent-md5: XMdSRqAdcyebZWLX7B+huA==\r\nx-oss-server-time: 5\r\ncontent-length: 64764\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14832619180289764357\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-22T18:24:40.204636Z","times_seen":203,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:24.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:24 GMT\r\nx-request-id: 3b3663c7c17e10d25a28c148a4478709\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d316050fd6e746749e55114e65f48fbf\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vMM_XWbKwd_yn5hx9_67URtnRwL-5tp9yfWnr72NAVml0e2kqp9FNg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"91d810070908bf3abf8700dac737f69d","sha1":"b8592ae0529ff74f44275e11bf4651132d1cdae3","sha256":"b640fbc8e2d0b51f212bf7c2b60486a375db1eb12a9a4c62bdc76286c563ebf3","sha512":"2638df69b2900e400bc82a9d827261d9cb095b11a0344c1c7d0f213369082ab15353d4f3b0d6a0c3cb53a7134f06b7750961c53c98d43ad94d46f9e23d57fa8e","ssdeep":"","tlshash":"fad02387ff5405806c5071c4ea659d22d54c1396016f854b87fd4de556c117cf41fc76","first_seen":"2026-04-22T18:23:44.653673Z","last_seen":"2026-04-22T18:23:44.653673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119d72c-1339c\"\r\nexpires: Thu, 23 Apr 2026 06:22:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOvHQpVHTYBJ5wXBOZJ7wCA7ki%2Fr30Wl8FHXwJfHjnDiiELYmZq2sJ2Nf2bm1rMH6TvSVFf57JxpNb46LnOWf1F8R6895Gtafa8GR4a0eYB4D%2FfwwQK%2FU6ZEkNzhDGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7cc2ab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:19.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://kcexx280.com/\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx280.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:19 GMT\r\nEO-LOG-UUID: 13064320435238779079\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T01:09:28.207913Z","times_seen":14081750,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":249,"dns":208,"connect":19,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx280.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:21.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx280.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx280.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 4\r\nreq-arrive-time: 1776882201112\r\nresp-start-time: 1776882201117\r\nx-envoy-upstream-service-time: 4\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 335\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:21 GMT\r\nEO-LOG-UUID: 10533714715601697327\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f8dfc43c17f85e88a2901e696989216","sha1":"4aaa415626921f9fe3fa9dda43a9e3a35fc12feb","sha256":"3034b2b1e0b27128228f5cc2e0f248eed8bd4a5df715b99ea745ba98e5d3af2a","sha512":"e5da06523f173ad9912e30049e65c081af71dcf2cb5943301864d9bab7c3ec79c67d6501737e40187e6b249fbaf9391c93ba33290a3c2230fccea6f2e73c4f6b","ssdeep":"","tlshash":"02e0261942fc2c9b9a5640e066cce258b2c722c9a03e6ed2dec91182a29ae5d8a07431","first_seen":"2024-12-04T06:48:21.872025Z","last_seen":"2026-04-22T18:24:40.196132Z","times_seen":433,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:25.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:25 GMT\r\nx-request-id: 0c8ad6531fb76a942eb7e9d416f41a86\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 66bed26b877881c13ffca047f98736b5\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: C9pRqafMUssOhQugoOUO2HW9QrmI33cNRbbAY3xH31wHYcFlCprmEQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cb6a79d2d89aed53eff443842306db6d","sha1":"77a5f12b64fa5f88958296b2b6519371c8043e32","sha256":"7369e3cb8090237a540a19d653e2af4911d9799b260c46a0f008097c2c324e34","sha512":"f59922d0e6b50586a564a9cd905161b5420c6c42695d04343fbe434d358444b70726313f2a6f59f356ac4d30b51df1fd22975c7a1555d358f6f5c1a3fca76fc1","ssdeep":"","tlshash":"f0d0a95afb081228aca01094ac558a30966829850843870392ef5c41a795afbbb1ac36","first_seen":"2026-04-22T18:23:44.655664Z","last_seen":"2026-04-22T18:23:44.655664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx280.com/Public/Home/static/imgs/newRightIcon.png","fqdn":"kcexx280.com","domain":"kcexx280.com","tld":"com"},"ip":{"addr":"172.67.196.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:17.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx280.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:49 GMT","end":"Tue, 30 Jun 2026 10:53:48 GMT"},"fingerprint":{"sha1":"8A:4C:E3:09:E9:06:EE:CD:C6:B1:48:AA:E7:78:C3:57:B3:63:3B:22","sha256":"08:C8:8A:54:7C:DC:6E:2D:D6:7C:3A:26:4D:29:D9:24:2D:9C:9D:58:7A:38:FD:B1:9E:77:13:E5:E6:07:93:5A"}}},"request":{"raw":"GET /Public/Home/static/imgs/newRightIcon.png HTTP/1.1\r\nHost: kcexx280.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nCookie: PHPSESSID=kfojr73f1s2oda6ck2h9966a47\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:23:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:06:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0882-2d41\"\r\nexpires: Fri, 22 May 2026 18:22:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 25\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaXMhKXmr20iGQQVLQmoFSnA4AO3BCGpyKE8t1U9XUjdxsl%2B3%2Fkcsf6oe1TpXvks4B1O9hSmvx057q%2BrHt0FZ04EELgg3LGZZUbnfrdGPRLJl%2B0A%2FOSNJu8jBevVixI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a8a7ac0fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"96e4769861ce5565a50935bbe285fd5c","sha1":"e51fe566d9369debfd55a973d39cf2f29c6492fc","sha256":"a3e4896d5a7373c665571aa137b65e66221a37d3b3f9f80cf5c4a41e1f62c8fe","sha512":"408847c66d006ccfbd28b0ecef7bb0866a92d7c7be3bd75fb4879a69135b8cd4ce4a9614e4b3c72df2e7a55004b2b8b9818ebe039c244e69ea4efb8d5332ed67","ssdeep":"192:3mgLOMcBcy7nKRpwr4fg3fMeAVwH2i+9BoqkLQoyRCN0cjJoUIzKP:3RdcBZmfeAW23eqkLwRY0SOyP","tlshash":"a832c0e22f3c46fdfb6701191dcb989962bc9d0f2c81dba498c110bc9508accf46f022","first_seen":"2025-11-27T17:09:49.60618Z","last_seen":"2026-04-22T18:24:40.220425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx280.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.175.151.72","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:20.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"6FD26749D6CE6D2748D4DA4E2461C61B\"\r\ndate: Mon, 16 Mar 2026 09:42:24 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D0807D1A533534C872ED\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15743163260591507650\r\nx-oss-storage-class: Standard\r\ncontent-md5: b9JnSdbObSdI1NpOJGHGGw==\r\nx-oss-server-time: 7\r\ncontent-length: 352652\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 630450335178289055\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1196802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef54ccd776c571950363824ef49047ad","sha1":"7cf2fc955baa2a734b4c5d5a1bd08b4622c69757","sha256":"f19803966bdb401b6f4f9fbedf9dd29b932a92513f4c3daa133d7fa2cecf805b","sha512":"a861257e6fb5bbb8b78ac5d9acbe89b07cd32be9301745c039aeaa3c1de9590db4e6a0af715647c0aea75fae72e561f0dba271a29d877d608aca81c7929fc08d","ssdeep":"6144:mLPtqVxPp7Uy96XStztkazQeBX2bbHzsHI5evwlTUMoFOFVwvgG90YnsUqbeWpH5:AVciXSnka9BGfTsHI5e4lARLgGqgs","tlshash":"c22539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2026-03-06T10:13:01.515406Z","last_seen":"2026-04-22T18:24:40.178333Z","times_seen":201,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.115","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx280.com/","date":"2026-04-22T18:23:27.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx280.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx280.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:27 GMT\r\nx-request-id: 49368a81187f6ac7f40b687b13bbf334\r\naccess-control-allow-origin: https://kcexx280.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: a523f94e3269f85fd426a50b8d31b0c1\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NWvR8NmtK0K-TkxhowVHFoxi-txdUov6zcXECDC3-segTGC4_J2KxA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"742c78f4521b353ca394b0d7e9ebf051","sha1":"a1198e09d07186cfd2485163c9703d4f0d7da171","sha256":"2680b03aec2b1a155a11156fd0e51bb377b49ff73c54de36692d861d1be3f146","sha512":"7423e9d5fcbffcf5d7ffe41ef81c073a8a6ecd04b5129a291bd1b79f686821ba17db3d807f422b49e3e602f4a83cc9aa066b8c67c4a0d185dba07fe8a2d5df71","ssdeep":"","tlshash":"6ad02387ff5405406c5071c5e5619d22d55c1396026f814b87fe49e556c117cf41fc76","first_seen":"2026-04-22T18:23:44.657785Z","last_seen":"2026-04-22T18:23:44.657785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}