{"report_id":"397f5bb2-5835-4d5e-b224-52db9e7333b4","version":6,"status":"done","tags":[],"date":"2026-04-22T18:24:18Z","url":{"schema":"http","addr":"kcexx538.com","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"104.21.67.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"title":"KCEX","dom":{"size":267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"f2b46f0e3a4400514655fcfa44c0124b","sha1":"3cbc9b1c7b7cfcd628a88c0fa0884864345185e5","sha256":"1cf432fc9595130bb06c654fe72b88fdecbae9bddf18dab6799b1e5a2011d194","sha512":"2d5a4b30e02eb2a1cdb23efa48a5d256e5fef23421a9826ea0e74904710c396c3e3afd56056391898d9f65c2ae2404ac97ad01c4659678cf161d1c42e9baa551","ssdeep":"","tlshash":"86d02b9fcc21c14e880166d88691f558584bf21e5714ce8cfce034b8d5496ad0cd3288","dom_hash":"domhashe9551ca6980fee53ee15afe26c1cd5b2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kcexx538.com","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"104.21.67.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T18:24:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.staticfile.org","ip":{"addr":"202.181.25.23","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-04-18T10:11:58.126269Z","alert_count":1,"request_count":1,"received_data":93687,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":1,"received_data":161180,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":6149,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.huobi.pro","ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-04-19T16:00:38.013034Z","alert_count":0,"request_count":41,"received_data":30332,"sent_data":20881,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-04-22T06:56:53.113577Z","alert_count":0,"request_count":3,"received_data":3672,"sent_data":1855,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"kcexx538.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-01","domain_rank":0,"first_seen":"2026-04-22T18:23:04.548357Z","last_seen":"2026-04-22T18:23:04.548357Z","alert_count":51,"request_count":51,"received_data":4375339,"sent_data":25666,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"image.providesupport.com","ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-09-04","domain_rank":225098,"first_seen":"2014-06-19T18:41:57Z","last_seen":"2026-04-17T10:50:46.043977Z","alert_count":0,"request_count":4,"received_data":18750,"sent_data":1902,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-04-16T12:03:56.62648Z","alert_count":0,"request_count":2,"received_data":2039,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-04-22T06:56:53.121021Z","alert_count":0,"request_count":3,"received_data":1409494,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb1ba546ada0b7bd4b7f89f1b8d1cc0c","sha1":"8e62837ecda98839b1d2884876d31fb52352ff3e","sha256":"07b77af75f3f217fa12ebeafd10ff3e56ef95d28f48d61cc7b5c1ab61137a8fc","sha512":"b61bd5a88873c2834f8454a2c00fbea3fdd636782a220219d958b58067d3324fb4283646de18c70247e00905f462a803753ff996d5c4f1167635186d00990a09","ssdeep":"","tlshash":"62e02696a906a13d86aa5096a6dfaa40a4a1216c28b1c4814464cca02828eb793badc9","size":313,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:26:19.988396Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e26430b47e80cc275cc8c2c3df1e34ec","sha1":"677488dc66730ccdc80cab85d1ee9e42bd8a32c0","sha256":"f024a25d7c636d96b8c450498bac0358db2f4c5808e5ff446b733034858ab2d0","sha512":"860ae8c19fee776f1db9fbf3c6abb0b7383637088c17dfe1c20a8436827db711c7d6f2df65fd398d2cdb78ef44fe50db9849b2f908f03b3966b3221caebb0ed5","ssdeep":"384:ubYpA2XqL6zngB4iJl+f9u8Dkn446NwMhHgyWfGhsGqPV/pv3aM6BFYzXbZGs+Bz:uH+gUTQyW+hsZ7vxgFiXsG0","tlshash":"e5e242e2e7bcab364a96015fa6cf81e1e725d039362bc58e395cc1281791d3897363f4","size":31518,"data":"","first_seen":"2025-11-27T17:09:49.651895Z","last_seen":"2026-04-22T18:24:40.22869Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/js/axios.min.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","size":29799,"data":"","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-22T18:24:40.18565Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/js/coin.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","size":45868,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:24:40.178868Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"2a172d2a20945eeeff97ffd4d5539b98","sha1":"258e4e8e228b1d4a818a674db123af64a69f6b51","sha256":"d16ddb6e490a2a98a9740790dee2d164724b4a8b0a823b3795f036670d27bd64","sha512":"e39d5cd0da43a789c7c9d4f965360146af286b7fc9d58e1315a863dc2c88f36f8180205fd6d40960f7255dd038381518d8a08e8bc872a2832e0d80002944fcba","ssdeep":"","tlshash":"54410080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1984,"data":"","first_seen":"2026-04-22T18:22:44.174435Z","last_seen":"2026-04-22T18:24:40.231702Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3d9d4e4763e3e7f637700a47dd5d842c","sha1":"b7126cb67a7e05fd2d3499e761d513fdeaa398e9","sha256":"37a1a50377b00dd662ddf8091e4e326d2a474b00ec800e559a7b8f50a8a17139","sha512":"84a623e505e53881d38b11a1272395a01bd0e866453a0f4ad179ad7eb3bfd3bc301ea3fc9b1adc96a91de73a0adf269d0da5582d114a4d175be6ca69df567bae","ssdeep":"","tlshash":"5b410082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1990,"data":"","first_seen":"2026-04-22T18:22:44.170486Z","last_seen":"2026-04-22T18:24:40.233948Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"82538862f750e4af0e4d31d9cc5f9f89","sha1":"2ceb5e40c6dd39a9ac9f57f32b9a60ef4c6527d8","sha256":"13eb507f58506b71dbd4eef9bc2e77d37ac210b143ad4c903ed573665a64f319","sha512":"857c339c699dabb51a2fa801e6f3afc0702b7bb4e0e0bd392a9865729809b73e6272c78e1132059d2dc19e3dfe51d669e327e411ca2275a6e7d17aec439e0ba7","ssdeep":"","tlshash":"704100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1992,"data":"","first_seen":"2026-04-22T18:22:44.172958Z","last_seen":"2026-04-22T18:24:40.237034Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.23","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-23T02:18:53.488513Z","times_seen":18943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","size":16345,"data":"","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-22T18:24:40.171544Z","times_seen":2552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","size":14496,"data":"","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-22T20:49:43.793179Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","size":1281,"data":"","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-22T18:26:19.966909Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3060d9e02a3d9515af4a0fafa8039c35","sha1":"d346c0e63e00b492013c091c3f1cf5e25f7aa716","sha256":"5cc19e71bc6dc6c88f1694a343d12edb1862648171f783cdfcaaf3dc9e2f4dbd","sha512":"7c7eeb168acb3c1967112a2437505df2c3106c47c1250d1b81bf2f5b8052bc80abf9df6b18911b1d05abf54922c638bb670ad685c622cb0e526e03f212c9eaea","ssdeep":"","tlshash":"544100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1986,"data":"","first_seen":"2026-04-22T18:22:44.168812Z","last_seen":"2026-04-22T18:24:40.23228Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f970323fe286aa570ae97486d77cb646","sha1":"b6e0c47107be73e0046e993c6555884cb67d5933","sha256":"935875f4ee2dce57d7804c53519186354e4ae1450d2aa18a4310fccdf6b91c94","sha512":"559596a0171f9b703bad763b267ed018959f35fb860da1487d87cb826bc280c471ba0a03acd53605ccc070a322b05a4a556c28832039fc05cacd63d6105fb4ac","ssdeep":"","tlshash":"fc4100c0c0003c00c0c3003c0cf00000f0300000c030c0000c0cc0cc00ccc33c000c0c","size":1996,"data":"","first_seen":"2026-04-22T18:23:09.944018Z","last_seen":"2026-04-22T18:24:23.746973Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11944f96ddb914d6b0426d8e668bba1f","sha1":"3fe2ec69ce9987e299d3093ed220d6033c6b453c","sha256":"3a827d9885131ac0184de9f294c935d11c5a61ad995d8dcc69bf40a52f0c7a27","sha512":"b29a4b40f1419fa6855283038d4b24f4e0a596bde5ee6b87adf06a8d2e6db2e77497579107be3e6d707c3b927de08094c1dc2bd9cd240b92f5dc8502ec0281da","ssdeep":"384:vInEviJS3nrtb5n+j29cMw87zfyz5Lbv9/:vQMcYr5xyIo4721DJ","tlshash":"0c420938fa9b245c39a334148f6f005434d8a583c705cb153dadeac26fb552ba4badde","size":12632,"data":"","first_seen":"2025-11-27T17:09:49.658262Z","last_seen":"2026-04-22T18:24:40.231086Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"449d3adc719357ac5f6263412e9a6af7","sha1":"8c4014a2c16c7fe4380700a448b5cef664d0d452","sha256":"5a7e3624aa3530d1fb5af9140a2e1582f97a2b98457a47a2c0cb80a745551f4f","sha512":"3e6d02a2f39bae1d55f51da5fea667b885a08d0e2b429d346ebfbfa2d46ce2fb35f0f80619667453b69eb1ce4d83cefe5ce2515e4a885f64c1e103b818ef598f","ssdeep":"","tlshash":"3f11cb01931b5cd83af2a56f1f5381120c392413684bca283f0dd6e09fede539555dad","size":1100,"data":"","first_seen":"2025-11-27T17:09:49.664143Z","last_seen":"2026-04-22T18:24:40.23339Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-22T18:24:40.204636Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd26749d6ce6d2748d4da4e2461c61b","sha1":"a58fe48c5cfcba2900dc7465b85fe9d6341858c5","sha256":"7e8a1c14399902b2f2339515015e02d83ac304db944069190b67e41983b17e6b","sha512":"1c5f9d29c47bf268dd1f88b77c6149e5098e58b6342ef7e037e50a73b481452a68fdca00a4ba69f38c0a931dc36ffc821cb959f9f6ab2aa896de19a09a2d7b46","ssdeep":"12288:AVciXSnka9BGfTsHI5e4lARLgGqg45s/1OZ6:slXSkFTsHI5eRpPqh5s/d","tlshash":"924528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1196802,"data":"","first_seen":"2026-03-06T10:13:01.556157Z","last_seen":"2026-04-22T18:24:40.230546Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25b6d15f572fc63d464c548d79358c18","sha1":"6b38f5db55ac3fac29e4f7b3f8fd49ba202434df","sha256":"13519e4ca14c1fb83c72b9b23233c57ba83577a0db5cf7d56fc2dc7de06a50ca","sha512":"1f9e44a6d8b890ed050f6fa9b51f619fc3e7da029119a109afdce655df8fbca952a73a396dd2dc564c09a630ffe8cfebcab2363d1e7187fe7e6163e012725493","ssdeep":"","tlshash":"03f0845e1a0ed3fa40a8427a5b71c2df75d05bdb080a6905fe8f02231fac425bc81fe2","size":572,"data":"","first_seen":"2025-11-27T17:09:49.664958Z","last_seen":"2026-04-22T18:24:40.234806Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4033dd87f906c92926a2b213a83002f","sha1":"ed2ccca6d3d93877c57a8614f2b5765452930665","sha256":"e5c97568860884408b75a5ec61ec252f2ea3fe57bba4302301a69aa32fd2642f","sha512":"2cb1ae773ca03fdd26c7ee7db683325f4602da218730363824d2fe1ac4a730fe8e4b0fe377e45ff7cdca6f27ba1ad4cd5840c44c22e535e7efd43323384740a5","ssdeep":"","tlshash":"0641020a487300b8944367bd1b5f910c267125532417ed10390ea750ef59ebc95adffc","size":1919,"data":"","first_seen":"2025-11-27T17:09:49.66577Z","last_seen":"2026-04-22T18:24:40.235292Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9af77ec196334c476628b867d7e945c6","sha1":"2fcdd41674765b878327d2311e2aee1e8996358f","sha256":"9e60f9328e42e3b7861acb1106d6ff7110dbb2bc081c071c19b803a109f8c061","sha512":"99870d1c3ddb87ee590f88fb2fe1cc2f3f73d05b954789cd102323c73da661dc5bbe8e4ece94239837fef8fed008faac350817c0f98b71e4e93d949fa892de85","ssdeep":"","tlshash":"bce0a78575921017a0af30ba45cf3980246cd20f021acd4c382dbac44f99cacd2b5f2c","size":298,"data":"","first_seen":"2025-11-27T17:09:49.66663Z","last_seen":"2026-04-22T18:24:40.237599Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a19014a82b6431020a77783ac142457f","sha1":"cd34bc7a4b8089979b3e82fbef84dbd275f20daf","sha256":"e25b0694eceb824fc684eae117b909d55e0bf829bd776d9085709d1a38bf7640","sha512":"a5c0b04ed4b906ffd57f1cc4ae4c593d18755bb21d86b98324e464efebfbf09d3a9c8124b7b97a52752484f496f327f6c4d61e604c0112a3e7696c4fdc5c6a90","ssdeep":"","tlshash":"54f0dc1aa4f315681473b0a94bff8c2570a1301ba24cde227f4d41459f1a1880e50f08","size":507,"data":"","first_seen":"2025-11-27T17:09:49.667563Z","last_seen":"2026-04-22T18:24:40.239373Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882238449","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd59f550140e6f247926fdedd7140f7d","sha1":"801ea2295609023fefd1990e38de968874838f51","sha256":"38577b30eb9f048675175e359104d1a2e66fcf797d7a299c573e67b6b310732d","sha512":"9ef147132a5ff7388f0d3e6e5904f495628993380db86e38a9c9e38fc367ec414b4013f697ebd90644cf9ed1eea0c6eac4c008e8dce0c87bbc1141955026223e","ssdeep":"","tlshash":"b621f1774509237a42091df7e56f2e0eda72581faae9c7d9c5344e40106e73ab431ae8","size":1199,"data":"","first_seen":"2026-04-22T18:24:23.658378Z","last_seen":"2026-04-22T18:24:23.658378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 205\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: 628d7d488972a8d53a25bdef69d78648\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 892bedad8fcb850c2648eec609cb6a6c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: xkAgNCMy0vCUh8jn85MLY-0eKgRGSfx1oHcU4GVL7is5eu36XiBmVg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d8c495aea48e357f35b532adbdc52533","sha1":"4eb204e2226dd275a73e9e440213e0f95263155a","sha256":"a667e5f18da11b60ac4fc488a2ffc2e38eaf813150863b740a9e189c1a858a77","sha512":"b101e47171f8b66b3c82acbbbc07f8cc6ab0fbb53618da21d41f6a5a1dc7ce40f98a57938a3ccc9400ff1593acbfdddc93220f96e24a4fe9015d66e8c53a5551","ssdeep":"","tlshash":"14d02213bf0022f4a85032c4e6222a30d61ca20f228d8a8203ff0e5030870ebbc1cc3b","first_seen":"2026-04-22T18:24:23.57898Z","last_seen":"2026-04-22T18:24:23.57898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":250,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx538.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:00.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx538.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx538.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 6\r\nreq-arrive-time: 1776882240622\r\nresp-start-time: 1776882240629\r\nx-envoy-upstream-service-time: 6\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 335\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:24:00 GMT\r\nEO-LOG-UUID: 12903894443728777449\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f8dfc43c17f85e88a2901e696989216","sha1":"4aaa415626921f9fe3fa9dda43a9e3a35fc12feb","sha256":"3034b2b1e0b27128228f5cc2e0f248eed8bd4a5df715b99ea745ba98e5d3af2a","sha512":"e5da06523f173ad9912e30049e65c081af71dcf2cb5943301864d9bab7c3ec79c67d6501737e40187e6b249fbaf9391c93ba33290a3c2230fccea6f2e73c4f6b","ssdeep":"","tlshash":"02e0261942fc2c9b9a5640e066cce258b2c722c9a03e6ed2dec91182a29ae5d8a07431","first_seen":"2024-12-04T06:48:21.872025Z","last_seen":"2026-04-22T18:24:40.196132Z","times_seen":433,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home-p-telegram.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-telegram.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3d-42d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNTancOuvISK1qvxHivQ8O1FVmYeZCgoXyURtas4o3W3pzeDJUW4LW9YhNTT4bvQOcH%2Bj66VndeXtWDpa7XUWYMb9PBdx1nGjyc8LVgrjqVCu4boRR3yZ%2BXw1ssxle0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b6d76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57330633e16609d898b2e0a33ded01ee","sha1":"f14c53f1bd8856aeabfd681294e71606376adc29","sha256":"941c5903fa6905806d2b660971123513dc8df16dbc117835be3f4226c2fc6195","sha512":"2ef025a3b47b358429cc0585fe1e4ebd3b08bb6f9121be433ea54e10ba65531d1598efdad6332205434ce0e08ec485bf12ef161ddcbd81a2f661b3223bed21a9","ssdeep":"","tlshash":"ec11fca0a6efe6d0904ad3b4c565a5f779ba35ff62d1dd4a829029d0e61209d6008d80","first_seen":"2025-11-27T17:09:49.617063Z","last_seen":"2026-04-22T18:24:40.219319Z","times_seen":17,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119d72c-1339c\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzaEeuepdGJ8BbBdP5eY1ncXBYeZc20f93sSyw%2BSw07zLGSM2rE%2BOPHEhHTBrv5JvWYgVf3ZPzZHkniStKtqQv2gCFtGfoJYb8fx9nx4%2BHnl%2FeX4oeHy7p5s9vh1XmY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f1b9a76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-22T18:27:50.069436Z","times_seen":7517,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/mods/rvmShowPoweredBy.min.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-501\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:08-04:00\r\ncontent-encoding: br\r\nage: 230\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06a9a95c1c0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-22T18:26:19.966909Z","times_seen":629,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Upload/public/6908ae4acc918.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Upload/public/6908ae4acc918.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 13:29:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908ae4a-1276e\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6F37f%2FwY5E4QGtejkN0Hi%2F%2Be9khxBEZwna7DL4%2BYjjKx6wtfHRMUulu7ITLtOa%2BHeCw65pFscY%2Fzr3HrIX4HI89ONVvJAbSc7Hl1jEFgtaCl%2B1ouLubTvga9P6si8TY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeafd76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"940c91feba7ba1ebfa57dc3f39110e3f","sha1":"85e5a05c752a781f310b790194cf60fb51f86de6","sha256":"15ad6d37a3689d95c72dce231274ff7fa0c61e65fa2a5cdd6d9527a239bb2b89","sha512":"1bd2eb66246ad84af700f504c7c62777761582e5bc0433d595f21b65990cd3f12f6a05da2ffd7e6a0ee4b67abf3c96b331189d3f0bc7aa64a4758d8f183160ab","ssdeep":"1536:Vq6RBCsQ5i1eM80/gCFS5O+6yEha1EpY9mSaKpRWdkjDlJBGVLVOzb:sYB4Y80/PAlS81EpOxpoy5wVeb","tlshash":"7573f1ae93884b7272d25e05a9ab5b0eb454fbce172bd0d2870472a4317d0c5e37dc67","first_seen":"2025-11-27T17:09:49.573687Z","last_seen":"2026-04-22T18:24:40.198342Z","times_seen":11,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/5f87397132a8b02.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-998\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4exYEHQJZQYzoAZyykkwVDw8mtafwP8O34eZwQRHlmx%2BtKTELrTDHK3ve%2Bwp0%2FTgu%2Fgafd%2FvjTHVmfW41g4GNqc5f5JRy%2FN8CLeOOvZZvXkbiAq8rC7r63s5mCTbQw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb2a76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.849739Z","times_seen":18061,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/5f87391dce40926.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/5f87391dce40926.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-91a\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BoQtRU2rbFHyspsTBDjYs6PeDhMAA5bDkgFNzLNNE2Td%2FcP0ceLLjkSJ%2BXO6OUr4DvAtEKd%2F9r15OPW1LMwE2EKNYplaDGBCThArAnFtgEPTlwZEGwKu%2FueFOQIBpw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb3576ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-04-22T18:24:40.18425Z","times_seen":15857,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYxWEMgP4fF0jXkvRZ%2FF5ZOr0REScfNGy5seTypL7BjKb6K3knoxkLYRGYOhoQ8uEVYSi8sgXwyHa1AgqJDa8G5SCv7yzS7w4nsvq8wxOb4A0%2F7s%2FxTLscwg2457p1s%3D\"}]}\r\netag: W/\"6119d72c-12a\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a99f1b9c76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.052952Z","times_seen":6103,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:09.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 205\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:09 GMT\r\nx-request-id: 646983c1942a196c2ad7e317501bc54a\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: ff12b3af211f6c2e5baadfa5f5f08f53\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: wCjhts08wrQ_qz_6BUn-j79ygLfR08RwrUo_Fa9Reo_eHaFZFkrk8w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c19d1a0e6311baa99adad289d06b145d","sha1":"768b90d8b058dd92f55b0c1a3158d78989d704a9","sha256":"f844435551ebf79098b87aa0efe9d3582fb74d9f7f3ac9d7228a5a1c1faee312","sha512":"8b009e009c9b44f1b21a4fe6e7d4c6f970d232d4b66c97cd59f59d6fecc4f24456d51e04cd894c1d80ab3dbc64355e60ddc1aea9bab78aaf0df82cb6a47396b3","ssdeep":"","tlshash":"15d02313bf0021e4d8503184d6211530c51c920f119c458202ef4e1010870ebbc1cc3b","first_seen":"2026-04-22T18:24:23.60226Z","last_seen":"2026-04-22T18:24:23.60226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/js/axios.min.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/js/axios.min.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Dec 2022 08:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a4173a-7467\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7PabHMDAXwGOsQbs4m%2FkmaJGUuuvlzhQN9xvvwP2fNnIyjqk7QqIGIMmOb0GZV0mH7Sm7nFyjdEPIALjw9PZUz3f3XPXYGpXuPzbieN1eo3ClKqMflqR5JXvqgZCiQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeaf376ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29761)","md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-22T18:24:40.18565Z","times_seen":477,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 78\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHE02VZJvxFhlJ6m5JkaONPAY4zPS9NB7Q7eYjuVQj5FDe%2Fc8FrBVHCcsfm7RM8LYUI%2BanCOO1uS42NG35MJXWfA%2BXIY%2FjqFk0%2BIZPqpeFVCFL%2F9IcFeZd29u1DvRd4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a9a51f9f76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: 90a71d2f9ee229c38c775d39be069746\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: de5c1b442bfd060b11cd2b49e04464da\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: GPiQEt7HW_IkqD74WiUK7vK2b_sr54RdTnyCqVtXwAi6NfVuaKBJPQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"945838d4f0840dc6fa9917e44539a016","sha1":"f0d934e12a05d6237c7d112ee01271ab97f2ec08","sha256":"6c555745a59201f36ac5a0bed55c30992b2248582a9a9b162af7fd272fa8401f","sha512":"cb337300ed223473881dc8236d922640f4de1084af0a6ee15a3a5260a781c2a20b028cf5ab43ef95a004827b703621f6fcc4bf7f21e74dbe1c81eca2132cc52b","ssdeep":"","tlshash":"7bb012000b9b063b2d884048317a061117e884c031f4054012dc406454dfcf0bf05281","first_seen":"2026-04-22T18:24:23.607324Z","last_seen":"2026-04-22T18:24:23.607324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://kcexx538.com/\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx538.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:58 GMT\r\nEO-LOG-UUID: 471867784620398453\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T02:09:29.621508Z","times_seen":14083418,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":46,"dns":1,"connect":19,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:11.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 203\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:11 GMT\r\nx-request-id: 1bddb0754e8034f0ce3fc6a352b13dc3\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 53af00b02a3c16085eeef5d40a02dadc\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7lbU9DW0OMLwaSKpX2epzRJ4oWBDholkcZSX0IzdRICcu2tVnNxZGg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b536e4f0f7bf573528136410934d79a3","sha1":"79253672883cd1f846ac6a7610910001876a4137","sha256":"fb9c8c7efb9d92d1660eb1680c10e7be37d83efe3162b4fe2618c03af39015ee","sha512":"2c822d97bb216da5446b7ce88d8e3b459ad44e8f178a857e98cc60342b071bc92f441b742c253fabb81550321e3b59e465e99f65100329c43ad9eb5d18b9c130","ssdeep":"","tlshash":"53d022863f8821c088a00288ec30aaf08b8c0aca10878d0612e84c10e5a86a4781ecbb","first_seen":"2026-04-22T18:24:23.610427Z","last_seen":"2026-04-22T18:24:23.610427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: 77f56e47bea2514afc199d25fcc7d244\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 8bf69737272e4274d5b304397398ae52\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: iS6KZLZ7k_gtYcdLeaz6zl_qoRDhGbniLR8qzQcllTTheD7FzYDZSw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5384d4327af00f365a43fb99f5185b3a","sha1":"0b5ff9a61104cd6fbd676dd681ad4c7209216ad0","sha256":"20777898c6860ad8e61643751c168cdc0f0c94ce4836f7ec6cb35fb0dd5760b2","sha512":"96ffccbb888e9759dd74c1483c2984e27308ddf6ab17745a2aa510148c1868c937a08e3dfbb532ad4728e38e979fa43444d5a2693b2262601f4b0e7059230860","ssdeep":"","tlshash":"0fd0a711af081de058521182f8176a5065f8214a04c7069567ee4d5026802a57b19d7a","first_seen":"2026-04-22T18:24:23.61261Z","last_seen":"2026-04-22T18:24:23.61261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":35,"dns":8,"connect":6,"send":0,"wait":248,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:04.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:04 GMT\r\nx-request-id: 149c3897d4ac4ebd039d600c29c4d483\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 065b419d10e2a8e4a6afa6af9be966f6\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: c77hJXO2mk3qiSwQ2mJWe9uzID77fXkQX17Omr7L4_UrvQWrtD6xvQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d7e4a8238b169c8ce1b726a95cc1f9c","sha1":"cfc51edbd9b8b64c3f08915e1d5705bce2e545c7","sha256":"62c6dfff83b3497ec147d71a1602db649872e7fa4875964383634920a0c99803","sha512":"716d70fad472875b745640d5c9e50d264d0a25466231e4abec247d16c056bcd3237593f89139243086adcbbde862831daf262eb4cb8d2264ae676a595dee0cde","ssdeep":"","tlshash":"5ed023137f0111155852a5c8fa554e30d65413c700a94a9573fb6b1075c0065f45b436","first_seen":"2026-04-22T18:24:23.614795Z","last_seen":"2026-04-22T18:24:23.614795Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/1594057379245582.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/1594057379245582.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 02 Jul 2021 16:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60df3b68-c13\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptLejBjeMdcpyp9%2FXHaX4%2By8ZhVfiuH9Jn8tEF5hzzV5yjai3e7FPARTQiB2RFqIlMpvHVuqeoahhPRVs2vrMwRfZ9ffaV%2B%2Fh9K74wpI7e3rgN9zZnAG5f6VXyaUEek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5076ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"033d340b5a4a22d8e8590b98409158f3","sha1":"098ef5ee4b44f780df7f39c022ea491cacb32e7f","sha256":"0b53847e742884cbfbc563109bb99cacbc75fbb1bca892a1dbf68982e68778a0","sha512":"60de2b9014037bbd2f081ffe295d2cd0d0772bfc9b878986404981aff8df34a51611ffe2d214e0ce8f3849f9f9bda9e52b650d50db089953fde9bbb5b9725339","ssdeep":"","tlshash":"03512bcb908c59b6afe24ea002945ce48021c177ad3b4726963ae91e9f742f6070dc62","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.900191Z","times_seen":3289,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 211\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: f8936ec9d46a83e7c72a5a4be6bfefec\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: f43e7981f8c270ace6459e7af826e092\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 881NqLd8LM-U0zg45FVx3aI3ZLDL-tgwxVZ_ed7REoSu2nv6er1wNw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"964367221129525b5129f4e0cff467c8","sha1":"836d8214498551ef6ba17313f00ce90e38a4c399","sha256":"20ac14e376324fd5c0dae8f308d715812f5c346cfc2c95444420eb065ee16e7d","sha512":"33988ed8fa3abaee231fb9592fd58440aa12518bd11048173009b249f7e54c6fb92ba28df39299a695a47519c8d6edf55a66c061c09473c3bc0af043c22d2857","ssdeep":"","tlshash":"23d023216f0015d104d012c1fc314d3097d956cb04c0c44712ee4c54d5c41b57b1dc7f","first_seen":"2026-04-22T18:24:23.617808Z","last_seen":"2026-04-22T18:24:23.617808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:59.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"5CC75246A01D73279B6562D7EC1FA1B8\"\r\ndate: Mon, 16 Mar 2026 09:46:28 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D174F6DD953436CB4C5D\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11091130583004183539\r\nx-oss-storage-class: Standard\r\ncontent-md5: XMdSRqAdcyebZWLX7B+huA==\r\nx-oss-server-time: 4\r\ncontent-length: 64764\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3881698492071627796\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-22T18:24:40.204636Z","times_seen":203,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:02.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:02 GMT\r\nx-request-id: a7b83733f0db80d378c37c605a10158e\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 18b6d99bb59f0307e21dc15de10165f1\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Qe7oDGYTUMKsPRQ3-2JXQy-kLIqQsmpIKXKsGYPmc6F9N-3-R-C5mQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"719183a352b6452c40c03fa41f64a8e6","sha1":"d763672ca70a13303440ae1b75df2d1dff7b8c31","sha256":"a1a3c5c96b892d474c92c7c9cb47bac52b5857916434afae8b2d4643ed3eeaec","sha512":"7759111008c1878f514cfc7bc3746810b097fdc3088ce6a21286d6d8664b41070e9e36ef553f4a6c0a63e9aec5eceb85e721ee822774d533fdd6808f97d0a0ef","ssdeep":"","tlshash":"0ed023137f0111145452a5c9fb554e30d65453c700b54ba573fb6b1475c4065f457436","first_seen":"2026-04-22T18:24:23.621028Z","last_seen":"2026-04-22T18:24:23.621028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/trx.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/trx.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-d30\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqCoKnyDUVLr4kZTvif6DWBihIZT7TuCAoieUj1kEELLNCIyIMHkrvbIE7r%2FZOBmq3igzfp7HNDyl2L5c2ab9W%2FoMVObRAabOjQpr8TV%2BUrFvpKyvDGOeDmKleIyHz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb3376ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"94689045fe789ea5a804e04d180d5b88","sha1":"4141c8cf319b2a9beabd2f67d9da1591ae1d805d","sha256":"85acc22574a8a833c94e8c767d461f7181a18dab1c3329d955c1eb6b801b6b4e","sha512":"ec2f109ae0ff20f4518ea4d1f48c771c2a9e34acd8895d2dc7c52c3302af590bb25e29484eaea887ac4869fbfa5ad1696c409493a56ff82e6ffe3ce177f3543a","ssdeep":"","tlshash":"ae614b9fcfe19cec8700d0ed7435d46bd5e43e5b46569c6ceb0d10a757c28215986339","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-04-22T18:27:36.832414Z","times_seen":2188,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/Public/Static/bootstrap/fonts/bootstrap-icons.css\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\nserver: cloudflare\r\nlast-modified: Thu, 30 May 2024 01:29:40 GMT\r\netag: \"6657d684-1a13c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 76\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PID%2Bj8g99bGpttOKLxa5BHDmSlNAyG1cuH9dXR5C9OvMqAU4LnxZpPNX7XY9XTWDLGLtcB8%2Fm2i2E0ein4pYtNtTr8Ld0FUE5vKSeScFe9fWOabGgYmTU2r%2FkORN038%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a9a1eca376ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:28:09.60369Z","times_seen":10291,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/favicon.ico","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:59.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45; ps_rvm_OiyG=%7B%22pssid%22%3A%228RDB8JvIE3FnvVB6-1776882238951%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:59 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 13:34:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 74\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0P5BZCjoc5VfR1jaq4ls8MArtzfqR0X6JxAfsAQOpvAWFrFM8z94wH6QCNqm5eEpg7j09LsH2Wk8q3HIYShfkHx2iJFHsiGUYsJDqvIggvtOwiEOuKt8fYUp5coeN8%3D\"}]}\r\netag: W/\"6908af65-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a9aa9b6c76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d0be2f7f8448783b08c60ad569fb87c4","sha1":"df707c555a605710672661ba49489c5feb4fac88","sha256":"3be99507e78f836020e82a6736da194e1914038222bad38d9a3b071d15fede5c","sha512":"3f32814a45bc34f63cf9277a413930268397f047f4a6c8025853f1bc0c9300a830db16471ee94d0fc152d4a3265f3776ba2a99eda9e7c1f23ff8dbde127a2843","ssdeep":"48:7co9P3MQNNc5H2MFYAcvTPtODRY3EY3DHAqU04fi:7cop3fI5HhG1vZOD+3E0pU04fi","tlshash":"af9194e2a7012c0bcc2313fa3a36e6b2b3005e5d3112d31758f2fc2bb51b0862e90088","first_seen":"2025-11-27T17:09:49.55558Z","last_seen":"2026-04-22T18:24:40.213701Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:00.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:00 GMT\r\nx-request-id: 3696afd6dd9984ccf2107bf86e6b6098\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4812d9f7e9f12f874fc7453104fa7aff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Cgn2w3E8YCwEVia7vL9MPA4RmJunHb0mzQZ-mnOBre_Ay0QEOfOerA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ef7cbe78c2703a9bd79faf218145ab7b","sha1":"8408d63740cc0bd9c2cf7af0db0d7ff8b38f23aa","sha256":"c2bc095148b78771173e7aed4bde3848c7afd1bb5a0ec714b33585760f45f668","sha512":"d183d7361c04399975ae85de31ed9975b98ccb5f632bc834d3f8fd39741f34dd09cd43907d34a72fbcb58b27fe785684a3b7b45c99ef9fb9e00a7bc49ade8906","ssdeep":"","tlshash":"bfd023137f011115585265c8fa554e30d65413c700a54a95b7fb6b2075c0065f857436","first_seen":"2026-04-22T18:24:23.625918Z","last_seen":"2026-04-22T18:24:23.625918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:01.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:01 GMT\r\nx-request-id: 77055c4c43c7f96736018e0e902ad774\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: adcd651019c09ee61279d3b17b044124\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: MekLvp0Kwl0JwQicyw3D_40KlXiBMB7eu-5WAXV-qhknR6c4Uli4fg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f215265375b61cd63e9bb428e6b6da55","sha1":"b6051724b487dfa27df61525997dcad851c46d63","sha256":"1464a165fc3e211643e4704788cb1950a34d4b7bc8682e50a97d337766bafe93","sha512":"289d622be2e6fff3e9a3ccaaf5bbefc84c95108f5c3f0174ca36a14058a427263215078efe69e82ae9b2c29cf71bc5f54d2e4b0656a2268062d0f9854daa0fad","ssdeep":"","tlshash":"d1d02346bf3419045c7432c5f6356d62e54513d9046f095ac3fd087216c08bdb41ec77","first_seen":"2026-04-22T18:24:23.627943Z","last_seen":"2026-04-22T18:24:23.627943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:08.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:08 GMT\r\nx-request-id: 0f6ec5c1d7aafb07d84cbb0713487d80\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 13bcd3aec334553fd0f15d097f8a755b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 8QxmDGF7nvtfebsaWfvfjBMRDead6NGqAVGgi1MiY1cp4YzMdGCdUg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e7664763dac00af9f0fa628203cf9a54","sha1":"bc4c663e3097030d8f01e5d972cf18182ee460fb","sha256":"2e4e4ed29108255d7eb93f2f8a2568d5871f06045a19e93e1adb88c99b1f7745","sha512":"b15f73703ac1bc0f4feab19e55fcc24f46af066295e04985e46e8696650a02f2039807d1513c8cb2ee5038fb7cdbf64f4550917e983e9096870616809a6aa72d","ssdeep":"","tlshash":"cdb012000fdb053b2d88404826b6451116e884c031f8054011cc416044dfcf0aa06183","first_seen":"2026-04-22T18:24:23.629849Z","last_seen":"2026-04-22T18:24:23.629849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/4558.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/4558.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jun 2022 07:48:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"629719cc-48b0\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8o1KlRGVNdcte1NRDT98chV%2Fct%2B7tA%2FMSJ6feb713Cyy5rmrEpD13sDos9Te25WR67m6KIFF3b1AxKS0k%2F6wEFoaDMgeVe2mkmrsdP240KqEtc3LqXWQkSp07kqQixg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5476ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 199, 16-bit/color RGBA, non-interlaced","md5":"c7e59bbd0ca773c704b906e229ca8383","sha1":"e191e030bfffacaa1b53ea83121a03955fd080ba","sha256":"22e62f07c3d37c4e0b8f717bda7ac0c60362fb80380c9f6def693dd4f9b4567c","sha512":"69dfd5a8bec0c1533adde28c322e96dcf9236b934a21668bc435f55f3284258881937ff92573a64188b4cd3ccd52f6d485eb4d864d4da0806753c71e385212db","ssdeep":"384:KR6xVqHk99Lm0m9/zkJMPoqgN09WuJFNFHaV2zbj69VmO:tvQk99K0m9/zQLqGeDJ9HHzbjnO","tlshash":"d682e0a4850add63e0b15bb72bad2753cd3d3a2020d4b2b53ebb09b468f090657a4ec4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.90921Z","times_seen":3356,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/trump.jpeg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/trump.jpeg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 11:21:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68948c3e-12e3\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wa%2F4dqwCYilJkBzWsStyuPeetBop2mM5Tgkek1QVBU5topDM02jt7vhChdIKQCeGZ8x29y9rBoxVJ8yB%2FPRnVBgiUUgUKv9QGKtX%2FOKhrw4rdg1cdr09JkO0Yrhug6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5876ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x256, components 3","md5":"bab381c17cd333000cbf4386b1542f5f","sha1":"ed40bf33caafe12092cfbfca1d0512e3ae8b2579","sha256":"af420cf9fc2594bb7bbc2e81d40c2d234ebba6a7921ae66f410fed7063b0e033","sha512":"c2766268d80d3ce92dea42096cbefb7c6453f88805d78da01ab2fed9e4511f6f47cddf1ad4b6d0da14fcf141fc99caa2d062d4b12d7e2305c043ef89ad479213","ssdeep":"96:IElbw+iHVumHFufDbDHmHPypd9lq4nItnEFgCUii0xT:9w7VuUFufDbDHgmbl9nItnEFTUiJ","tlshash":"d0a15b4babd9164ae4704f34a17247649fce3922b85a1917c0c617ba2b7f8c71f2c786","first_seen":"2025-03-31T17:08:27.225722Z","last_seen":"2026-04-22T18:24:40.226222Z","times_seen":93,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/Icoinfont/icon/new_banner-bg4.mp4","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/new_banner-bg4.mp4 HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 491691\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Nov 2025 14:06:14 GMT\r\netag: \"69270956-780ab\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 76\r\ncontent-range: bytes 0-491690/491691\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rh3b5hFgPNPdyeYN8Ca1tywd0BtCgCi9aesLCsugeT%2BAhT0fZxapC2mmAMg%2BdspGTgqSkRGHLiSWQWf0PTOf22mjkLO5VcsrPs%2BxlqcQRgWlcu1JdVF8UrH8NyZpm4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a9a14a7076ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":491691,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"796e6846277d840027311df7480285fb","sha1":"76ec44a1d63b87bd0114950f8a555828fbf70bbb","sha256":"8ac2fa3dccc7459f7086fac2b547d23e267e94562ff5beae5e7b93c01a1c4168","sha512":"1d2e8f7309d703ab5bd597c7c42dababf10a4ec347c6ece2e281b67c392252eb246a3d6d34010b2eaa0842ff049e7febca736229d5d1fbe6f6d14090e3e59188","ssdeep":"12288:sZ1ja8fCh9dZerTqe0hiu3VFtV85Wo0rM/Tap55sVAkaOTMtTxDL:sfWyChDZ5eVWjjo0KTap55CAoyP","tlshash":"3aa42345a320abd4d3187b76d8db5b893064ca95d2b2936b0b700e74bd0a3571c3bbf9","first_seen":"2025-11-27T17:09:49.626703Z","last_seen":"2026-04-22T18:24:40.15498Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: c05bca11d4e9ed440db1ed7c695195c6\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: b3f8e445c7bb2fdeab87a29e4b6e6641\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Ex6rehYF5Vp1fxIDCE6DH1O8ZQ1sPTvHsXf3z1EIp8g8UXl0Kptlig==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b654501d6ca90364296da626eff0c7ea","sha1":"b9ed4e745059e84af4c9f34f32f45955a2dbeb05","sha256":"1906905fedd5d721f5443194e70c0b97edd6cd54ab2362af1540153f01384e30","sha512":"216f7501fdc24b60411a56f8e46634310fbbb7aa026633418184802d8530967d140b2504b81d80448c81ce6ecbba51d29d2f7bb157f4bbe6c79765658ba3662b","ssdeep":"","tlshash":"cad0a746bb0412246ca01090ac594530566829850842470352df5c41a794afb7b19c33","first_seen":"2026-04-22T18:24:23.634835Z","last_seen":"2026-04-22T18:24:23.634835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":36,"dns":1,"connect":1,"send":0,"wait":730,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: 92c8aaff3179aad288ec1ef253d7ef41\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: f8d1657e0fc3b0bee5adfb90c4375443\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NVTDlh7QqlgNR0dxKSOaf-SkCKFDaoyY9zb6tz0odPzm59fxk6BZfw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ea9f81500856aecf07e61971c8f80705","sha1":"c7ab8a6354417595d17633624030f7077dffec60","sha256":"ca199cc12f6b46d41bf240bc84f352b76404f568e416812c7ab11b5a391671e5","sha512":"1a145af496304ec1acce832afe64d28aa6ecebbb82cac88d14be1e7a5d48f27b70f57dedb00e4b0915f99227e6d29f3801b3fef07eae61aaef9430c6ad48f29e","ssdeep":"","tlshash":"8cd023c15f801150455113c4ec5c3e28577e1c8e504b4a0343fe5d5315c45b0f21943b","first_seen":"2026-04-22T18:24:23.638515Z","last_seen":"2026-04-22T18:24:23.638515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":41,"dns":3,"connect":4,"send":0,"wait":239,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: 9224c672cb742822b06b0c88403f368f\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 19f916902de83f0c232c72759f7ac43e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ucjd-5naiVd3CUlCN1zkHX2SK8SJmYijYaNC__dgtg60ph7CFYx_7g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"098911865556d0de363f3521685050f9","sha1":"ca1b0a84bd7d8e37e066e88084dd528a8a1e5058","sha256":"083577d650df8e77a60f99b7c840cb4c06fed7aa66adcab042c1e2ddd291a871","sha512":"3a227e10cc6d2676e92c806e96c92627b26eec43ea56e8f94fcf674ac7bd294b4c852806167e6d240061631d2dfea5fb172a876e8610ea1831dfb4859922d2c3","ssdeep":"","tlshash":"7cd022826b0c12e05d1411c4e4291c223f1a528221828a0397fb8b506ac0ae4b30dc3b","first_seen":"2026-04-22T18:24:23.641354Z","last_seen":"2026-04-22T18:24:23.641354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:06.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:06 GMT\r\nx-request-id: 9f2c46fb01c201769bc10e529a77a0f2\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 88ebf00f829ff047083388b57d1ced01\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: KVcyW0Ipw6h30YalkiotRGa6F2JY6ld-RbbFGH8sx0n9aNSgqRDJQQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9ccb30f7ec8137e6613e116e8757faa","sha1":"55f2aade99c13337584945e1d722341eb8e63407","sha256":"96660e0cb3e37faae563d6b27b39a2bf18fcf1faafb8dbbb089d9f10d8dfb0d9","sha512":"9bd88634f5cbf6f45cbe9410c11267930bc8a79379e15b4bc2d2ffec7fa292eaf9092ccf88392e94cdf521bb2c52f42f85ebb41e8a812b311804a694510645d8","ssdeep":"","tlshash":"10d0a7527b4317604863a5c9bb254f709254129201b546c752fa691836d45b8791543b","first_seen":"2026-04-22T18:24:23.643694Z","last_seen":"2026-04-22T18:24:23.643694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx538.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:00.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx538.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://kcexx538.com/\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx538.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:24:00 GMT\r\nEO-LOG-UUID: 9722823740911750750\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T02:09:29.621508Z","times_seen":14083418,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/1613786496962262.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a83\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3CXVfjF6NVoNuuS1W7ufAOpkUBlII%2BqLajKY4NtJl7LewnAYLMgfi7bbHfKUDCiywzAFmiGxGFP7ipM8ZNNLNzYMae%2FM8e7fUqw74cP3lDU99iwjHje1baYDmrwQPJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb1976ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-22T21:20:06.772271Z","times_seen":21103,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:07.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:07 GMT\r\nx-request-id: d0a0c07158f9752ca98a26867ff693bd\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 013290210abbbc55110a24b6c94ed305\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: VqXPtEBJfFW6-uI7sWSdQNRKWyppOiiRLZ_yTvrFhHqk14vKJ0lfWg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b82df28aa2555c9273927d69ab7d5ead","sha1":"8c58b1a263ef29b1cc7cd0399ab4766a1c343e8b","sha256":"2ac6f98f860decfb78164f9e28c02449135a29b0ecd08a45178421b3d3cf766a","sha512":"a6fe07a018b14809e1ba4bc25ef932f1346bc84f85e7a9c34c1d6a968e1233c8a6dcecc0c3639bc9498ec9ad32b3322f06e0fc1690bae68104c23a20c40b50ae","ssdeep":"","tlshash":"dad02346ff1415419c5531c8e6501d33da4d17c9057f494743fd089116c0178f41ec73","first_seen":"2026-04-22T18:24:23.646849Z","last_seen":"2026-04-22T18:24:23.646849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home_banner_3.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_3.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a051b-353da\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1ZUAc6iZ7zDDTyvFdzSg7uTdhAT2jNmLKRzZObSQOVCdSIoevqSv2fF7ApI5t2GJ%2BtkpMv8FUL6sMv48WAsyCterYMrstDNOCBdAMclvG%2FcGkyl%2F38a6P6FyRGwHfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb0a76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"b3595c9e4447f6c4133f192e3cbe5c58","sha1":"08513a54419951c21614404db4131b5d70cd8a9d","sha256":"e4c8c824daefb13627d95ffcfc92e96bc1efd491e02e7782b822487d9587058b","sha512":"2395f0593bc396626efe4780e9404a0edc5fa7efaffffc6011aaebad0f271414a3823addbd894cb043fbfbdd55cff2fc92012a02a4f418c62339570013088efd","ssdeep":"3072:UIFD+3B6fRQEa1Q2qZLlLt7L1sK9aU6elKNkRzZHao00HKitP/69RXH2bwkp2:lGQJLpt7BPcU5gN+Z6o00p9+Hu2","tlshash":"61240193c8a2b2a6d6d2587d674f3e9ad770a053b1dd5f6e4f3020aa24234ccf932c55","first_seen":"2025-11-27T17:09:49.544193Z","last_seen":"2026-04-22T18:24:40.160559Z","times_seen":9,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/newRightIcon.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/newRightIcon.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:06:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0882-2d41\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zmzrrk4p34Doh2X3U0er9y7jzaVsKDkns1rrkfE2LOuI6gJoHjq%2B7jeWkZ4tfwl3%2FeBCpYkFH0Mu%2FGeqzWaj7neQKyuyXqy3SBmYpHbQeGcSgksJhgtoQakolEdwQX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5a76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"96e4769861ce5565a50935bbe285fd5c","sha1":"e51fe566d9369debfd55a973d39cf2f29c6492fc","sha256":"a3e4896d5a7373c665571aa137b65e66221a37d3b3f9f80cf5c4a41e1f62c8fe","sha512":"408847c66d006ccfbd28b0ecef7bb0866a92d7c7be3bd75fb4879a69135b8cd4ce4a9614e4b3c72df2e7a55004b2b8b9818ebe039c244e69ea4efb8d5332ed67","ssdeep":"192:3mgLOMcBcy7nKRpwr4fg3fMeAVwH2i+9BoqkLQoyRCN0cjJoUIzKP:3RdcBZmfeAW23eqkLwRY0SOyP","tlshash":"a832c0e22f3c46fdfb6701191dcb989962bc9d0f2c81dba498c110bc9508accf46f022","first_seen":"2025-11-27T17:09:49.60618Z","last_seen":"2026-04-22T18:24:40.220425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzCSle7PYda58fG7o0F1XUIYX7It1eGsFvH%2ByZypAg7f1bJRRUqeYCJZ8%2FNkH3oJhDaZIQkVD8jezSfr795u9fPrMBLVmrOAxceMg%2BNqvSBM8CgNF6VP0SL3qU41vmg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f1b9476ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-22T18:28:09.608149Z","times_seen":13302,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/1.mp4","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.mp4 HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 106025\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:06:37 GMT\r\netag: \"690a086d-19e29\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 73\r\ncontent-range: bytes 0-106024/106025\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJq13av6vlGLnfkcmNXOrUtA8p9fZ91tvLFA1H37L0R94X3MfKeRp3O88nIxUOcEpVAZlYMrXzhhd3%2B47D70AqUXfR%2BcJrn%2FTe9jXgNnMTO5GGHk0LQpw%2BSgSPCFMMQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a9a14a7976ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106025,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4ffaa7b2bd0a06af61652e6ab0b9d39d","sha1":"d37874760cfb26605cf651ae519f5de1d9df786e","sha256":"83d355cd527de9fa037fc2321fa56efc00fd54add9c9d9d8a9b000a272c5acd1","sha512":"cc9005cfe2b58354b356cbd92a68709b9e142b542a82b1d06df945c65c3dd6165d463d6fe8c38a2d423ba97f48df1e11e11f6ad14f78d8b3779f45bd89644e15","ssdeep":"1536:VuE1rm1vlIuf0/xSsfy8X6YC97jH8MBgUoWWZ9ING9zQey2Ac64UNre0+JDmopft:kv1NI20JS+y9eZUSHINHN3NreHmo7i3G","tlshash":"fca302e1d75da14ae278433ce2f1a1da5f32e0352b99634373958c2ffa34a459fa0358","first_seen":"2025-11-27T17:09:49.620604Z","last_seen":"2026-04-22T18:24:40.173299Z","times_seen":9,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882238952\u0026ps_l=https%3A//kcexx538.com/\u0026ps_r=\u0026ps_s=8RDB8JvIE3FnvVB6","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882238952\u0026ps_l=https%3A//kcexx538.com/\u0026ps_r=\u0026ps_s=8RDB8JvIE3FnvVB6 HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:59 GMT\r\ncontent-type: application/json\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: no-cache\r\npragma: no-cache\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: Origin, accept-encoding\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:23:59-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f06a9a97c510731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce33080b5c32e9a112da47c27b074f72","sha1":"7f8a374b0bef60327a18ab1fdd9cc459c5185526","sha256":"c69f9256ca3a89dbdbf2063f177728e38f6f5e2c383f01bd2aa84716aad4b296","sha512":"9281c915fedd5d977deb662f36a5b5b03ff27cc582921afb8d70cbe7fde501ca8e9d71e6be6a293453889fa9696f758057d4ea2d3bd371387f748e3e28eec0db","ssdeep":"","tlshash":"9390008c88e338ec00088b22ff82030ac3200caeb008fb08c2a00a0230cb3e82030003","first_seen":"2025-04-07T11:37:33.935595Z","last_seen":"2026-04-22T18:26:19.97631Z","times_seen":357,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:59.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx538.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 5\r\nreq-arrive-time: 1776882240112\r\nresp-start-time: 1776882240117\r\nx-envoy-upstream-service-time: 4\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1894\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:59 GMT\r\nEO-LOG-UUID: 16904736820186381930\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6193b180c937f27cb174d60a54780ae7","sha1":"bc0b6b03a8f0db8235f09d122bc861e7e221bf35","sha256":"420be45bef67d8c9d58b4fcccb6fa2faadf77795f069b0ff241bf14660302d54","sha512":"6e113d3c0205d20cfae7c7da570f15ef25cf5d4eca287eeefb6f9a7bc6240f87293b9a32909a1082839469e95a8a085ab2134463ab8fe1e7653051db8c36cc22","ssdeep":"","tlshash":"214102451082ad38925ef68dd6e9b905d55d304bb5c05f22d7f6cf1871cf24e2b033a5","first_seen":"2026-04-22T18:22:44.108489Z","last_seen":"2026-04-22T18:24:40.205158Z","times_seen":8,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":46,"dns":1,"connect":19,"send":0,"wait":666,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home_top_bg.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_top_bg.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 09:51:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909ccb8-6a0c3\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G43TOMHDHxo2XBb%2B1U5fruDAQBSYxK1OivVZ2tlZ6rN4n%2FdUiOn1BWD6DcRoI9%2FwwaVExaU9FcdeqRN%2BAx2vNCOdG48c%2BG8N%2BCeNlRQIjieuLZwiuXMMi2W%2FIG5rTEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeb0776ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 535 x 700, 8-bit/color RGBA, non-interlaced","md5":"b6d7e55919a0816b3d84bf64a46ed1df","sha1":"562b04c762b92c49245cbd3c7c3dcd5a89ace6f8","sha256":"eeebc077c321dc56641615e4d2d8f4d7fcc206e504796fe277dd5a083a97211f","sha512":"66d0551dc1a473a04108bbdf4473617eb6ab5b4b4c99aff15170f47e9f0c3bec98fa1fa390f768147e19d64b0181379ee00383cdd288346fa84170751b0d23fe","ssdeep":"6144:HYIU+8FT0nH61O2E6kRk2RTPyUBej2PxLXj7JqiaNv1Spw04OZMZ/dMW6Bml9yyV:4IAFTniDRTPyUU6HLpx4LcWf9BV","tlshash":"b19423d8eddbf51814cb9e7099557fe8036ae701cab6906ccbb47cc0282dcd6168dac6","first_seen":"2025-11-27T17:09:49.595537Z","last_seen":"2026-04-22T18:24:40.21991Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 204\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: a28293c1dfe18033c46698ffe22cf135\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 52e7b38e83f3d393796642a7b55c1115\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: AyW0DtJ4UhiqbWgntz5vEXZeDFo5DtkGLmvXT1KMEUeD_JXwZMUnAA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1725612fbba6dab9f11abaf6b82af870","sha1":"b1a37f8fd5d0a1b0d97f0bd0f08ed05698658b13","sha256":"7b3ad2964b786699249db2b686e2dc4538f8c34e4fbf44b0b26ac152aa977cba","sha512":"150eb78e718e714c233254a92f4fc1966439f21eff91391035f7e14a23fa5d95a69d4113e8e0ff9e1f7f7c39862b6531b38a9c672b5231b0bc21d922693f535b","ssdeep":"","tlshash":"7bd02245afc452c049e21289ac345af053a9168210424e8353ea8e40e9a42e8391ac37","first_seen":"2026-04-22T18:24:23.655426Z","last_seen":"2026-04-22T18:24:23.655426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home_banner_1.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_1.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0503-33d82\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8DJvQ9ULFdKGZ%2F7A4zTYtC63cncws9U0AU6L5F%2FGPvOeDM3gPGAw6R2nA08wLDPV5IUsX75wpjyO1LpkdVAOK8Y%2Byt3PzUnVq8hdrDDn1y8cIEkcBbeTdmuUFlav3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb1476ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1201 x 601, 8-bit/color RGBA, non-interlaced","md5":"7a706fe33fe6513a038e1cabe19641fa","sha1":"c50d4c295e430f5a05f8693b5a7658184af13018","sha256":"52e829d18b1a4ec0889ab4b1e5f3dc58b5df0c70f1e674f4dd8a6271b423a36b","sha512":"c4d402381b2b43e4fd4f3facedc2bf7f546202eddf7bec13b885b0a44ef75a138025629e9cd4ebb9e6266be911938a9afbbf0ec9b753a1a1737227d646039047","ssdeep":"6144:i0ZICYC8BmKsRhh9nUkUgkVJ8HB/9LZPIQMNiwi:i0ZICwJsRhh9nUkUgsJ8HB/jgFNij","tlshash":"3a24f190ae9e43b114bf3261f1440ee9e036314f956dfd6a6a34a7f9ff169302c21668","first_seen":"2025-11-27T17:09:49.602656Z","last_seen":"2026-04-22T18:24:40.210567Z","times_seen":8,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882238449","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882238449 HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:23:58-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: 9f06a9a68c3b0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1199), with no line terminators","md5":"cd59f550140e6f247926fdedd7140f7d","sha1":"801ea2295609023fefd1990e38de968874838f51","sha256":"38577b30eb9f048675175e359104d1a2e66fcf797d7a299c573e67b6b310732d","sha512":"9ef147132a5ff7388f0d3e6e5904f495628993380db86e38a9c9e38fc367ec414b4013f697ebd90644cf9ed1eea0c6eac4c008e8dce0c87bbc1141955026223e","ssdeep":"","tlshash":"b621f1774509237a42091df7e56f2e0eda72581faae9c7d9c5344e40106e73ab431ae8","first_seen":"2026-04-22T18:24:23.658378Z","last_seen":"2026-04-22T18:24:23.658378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":451,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:05.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:05 GMT\r\nx-request-id: 597cf430028b6c6593b136fdf1d6eb68\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 773a52b96fc4968425d7648bbc7fab78\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: DPSftZF9llgwLYN_TGhYIgJBzDQtPBSgR0xYw_2AnIe0arf7fcsAbw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a8067bc22a81d7d7b3524266e9f0c7e","sha1":"4295c5bbf5dafb9164e522a6fc44d89a15c42809","sha256":"f8f022fe23055794414f705ac1e2530b5ddfb2042bb71704f27322531540fada","sha512":"9f8642773cd0d34c7b82c3a42c22bf7b357d10d9ec3f35ef1486560438ba117535ae7fa12bc64444cf5ea09d83b94bb8156923677eb317c6772663cd4a44bc24","ssdeep":"","tlshash":"ced0a95abf091229ace01094ad558a3056682a8508428a02a2ef5c81a794afb7b1ec32","first_seen":"2026-04-22T18:24:23.660515Z","last_seen":"2026-04-22T18:24:23.660515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home_banner_2.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_2.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0509-4076b\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tB3kBJOVl1Vty1l%2BAPPdY4A5XaV3y%2FrDhUZFX4H2NpxMSlSY1jmMFo%2FlROc9AFlpsOaIAHsk8hUgZRV3FiwfIEw9PPyxWLX93i9o4J844yv1KRl%2BWBF4Ch3ebCN7oIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeb0876ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"4edb32e15e62992c49a5d6081755960b","sha1":"d4d60aeae3ea3d47edd258dd75ab38bb2d7f8021","sha256":"384782e0c0551eabee3a5e455f445828b45e21d0b10c32601f7e597390097a1b","sha512":"aebe30f1ca659ac9141ffee439acd91dcba5a3265fe87d172943029affa5b271c1ce1fa2183c63a4bb743c8ad8ac7bb7e300f591b64ce80c8093b48a04899322","ssdeep":"6144:wtreYObd6SGtlgok2sCHNG/f2qGNWBVnJ6cud:2rjOwSGte34HN+TGEBVnJ6Z","tlshash":"be44022b4eb662e3e943caada41b0d13fe3f52406380b92fcb3579dc9607164dd4a64d","first_seen":"2025-11-27T17:09:49.562993Z","last_seen":"2026-04-22T18:24:40.218766Z","times_seen":9,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:14.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\nx-request-id: a9c2e89d94051e80866135f571e1ed1e\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 5c2c69496111a0cf2df679e20fbad7a9\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 1w81FpOQ2rCbuslRSo64Kc2oUcJmH51elhmtdlBobUOg4UfeT0kxJg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a76cde902d4279625914078946961a8d","sha1":"3bb2ae8fb80fe4568152a7972abe5f9755b27a2f","sha256":"13751a84ddf60b2d13c234701ca62930672cb45c3a6f1af47283e3df50b2d17b","sha512":"3e80d60564c0af21b86acd0b29d5936e4ac2ac406266dc4b9dd1ea35bdc511108194a4403130fec03347c9b16758092d412abed63a20c358555145f70ddc2f2d","ssdeep":"","tlshash":"c7d0a7527b4317600473a9c9bb254e649255129201a506c766fa691436d44b8752943b","first_seen":"2026-04-22T18:24:23.663743Z","last_seen":"2026-04-22T18:24:23.663743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/js/coin.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/js/coin.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Dec 2022 09:50:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a579c8-b3e6\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQeydxoQRZ1p%2Fl1op0%2BKvP%2F30e1181OrsqpuKsb89TZKCu%2FLunD6LSXtSBVrupqovOCDeJ%2B0LV9O9F%2BC%2FWNaUZkuPxNKdIizadlpSxoiaTmYqhZskMYgqfzu2NJSlF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeaf676ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46054,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44565)","md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-22T18:24:40.178868Z","times_seen":501,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home-p-medium.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-medium.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVN6gMNp%2BDs7Ga%2FCLrNEzfzPm2aroipuidPeNOd9PNI%2Bc%2BF7XhEPMF1Q0tTUcAZ96wmkFuMe677wjrGefgZw0qgxNyPzpRuSnRWD62nG%2B7EBAH%2BeRXrEE644etjCdus%3D\"}]}\r\netag: W/\"690a1c3c-3f7\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a99f1b7c76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf0a868a55e55325345883fa63a26236","sha1":"74bae04091f5f40fdb574a1897ee28b378d64e2c","sha256":"733cd7bd386603a6c43c560e20c379b0e98183f17348e37ffa0017f7dd478ad2","sha512":"53d7403b5acf323f471fc88cbb4a0d3c98028f018590eda7166bc2520adebc3db36f284f00c5c320fc632afe5451bddccdaec3b58c2e5d1da59ba49ac336ae1b","ssdeep":"","tlshash":"9d1102e5235de9fdcb06df8aa639d8287446b0b5ae3fce0a13dd2c85b40841d38c0099","first_seen":"2025-11-27T17:09:49.599129Z","last_seen":"2026-04-22T18:24:40.171002Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.23","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-23T02:18:53.488513Z","times_seen":18943,"resource_available":true,"data":null}},"time_used":1124,"timings":{"blocked":410,"dns":2,"connect":207,"send":0,"wait":225,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/doge.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-838\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=469SN3jEzmAjkd%2Bzfk2wubciUzExjhF5%2FNoHDe9Hp3Q%2F%2FK81CFXrhZM61gbIezbtRhsK8tWjvPEczmomwmTK0%2FOmrUuuN5QF2N5THgIwlx6oo%2BIce29YR7MnZ6SXq8M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb2076ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:50.076588Z","times_seen":5331,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home-p-linkedin.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-linkedin.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-523\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQxchrTNRPh6h02P6QICKAGRDIxV%2FZzo2ERUj8u8ubxvSlPW1F5W7LbApAbBs2JlYzhHO5e7mNanB13gq9ZmOr8I%2FFZB8BxYNSRX15S7y3HAkyG%2BbIDszY6ui7DJiQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f1b9176ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91cc9f901a7faa746e809d9ac862ecca","sha1":"18edcbc4ed6fcb4397cf9008eaa60a0c52c792fb","sha256":"d3f387b5ad7823a4d24bb708ab967e9ac9a6d0792080142904c1be5bbec6894b","sha512":"db07ae57475c1b89c544ac015869cb87dad1effcae153fd8cd11514388f43250e219694e7f5c4c7a8fd6c5b350d5ed538bda02969d0719367dc94bec7929c9b1","ssdeep":"","tlshash":"4b21d0bbd1f562e893499355aef53ca80b2b0bf5bb45ccc871cc0bd48e204ce9e45894","first_seen":"2025-11-27T17:09:49.577106Z","last_seen":"2026-04-22T18:24:40.207126Z","times_seen":17,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:59.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"6FD26749D6CE6D2748D4DA4E2461C61B\"\r\ndate: Mon, 16 Mar 2026 09:46:57 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69B7D1916FBB5238331F7A9B\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15743163260591507650\r\nx-oss-storage-class: Standard\r\ncontent-md5: b9JnSdbObSdI1NpOJGHGGw==\r\nx-oss-server-time: 12\r\ncontent-length: 352652\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2438914819160096422\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1196802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef54ccd776c571950363824ef49047ad","sha1":"7cf2fc955baa2a734b4c5d5a1bd08b4622c69757","sha256":"f19803966bdb401b6f4f9fbedf9dd29b932a92513f4c3daa133d7fa2cecf805b","sha512":"a861257e6fb5bbb8b78ac5d9acbe89b07cd32be9301745c039aeaa3c1de9590db4e6a0af715647c0aea75fae72e561f0dba271a29d877d608aca81c7929fc08d","ssdeep":"6144:mLPtqVxPp7Uy96XStztkazQeBX2bbHzsHI5evwlTUMoFOFVwvgG90YnsUqbeWpH5:AVciXSnka9BGfTsHI5e4lARLgGqgs","tlshash":"c22539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2026-03-06T10:13:01.515406Z","last_seen":"2026-04-22T18:24:40.178333Z","times_seen":201,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:04.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:04 GMT\r\nx-request-id: 2c18637c8d979ab6139274d4fb2588cc\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4663a9f05841cae2a5dd8b801b840cd0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: xCn7LmArXULO72p3-nCGT4uScSniWg4v82sKMGbcGkO3hzWhNtMmMQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aaafedcdd0962973245119f2f0811908","sha1":"48c9f62169e12bdac270a85ec024f67c9bdacca2","sha256":"341f971abe8037d51d6139344c70329456d3d5755fe4c87429633b88b8a4f9b8","sha512":"9a164ae364cf83efb7a480cb587bd599727e6c4425bfa1e9c842dc6698814bf8b290c04cc0dfc4e62f31189802de2b081949978efc12aed9b725c34c8912bda1","ssdeep":"","tlshash":"18d02346bf3815045c7432c4e5255d61e54513da045f0946c3fd097216c04bdb41ec77","first_seen":"2026-04-22T18:24:23.670276Z","last_seen":"2026-04-22T18:24:23.670276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:05.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 214\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:05 GMT\r\nx-request-id: 43713894f84fdd595372d208e7810cd4\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 0c193c663d9ff2b4f58d42d2f4030c61\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: aiMAEIaquPqv5gq6KNmY_3eIEGwCc4Nd97J6W5OiZDPyihjlNA4wig==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c54dd1a5cf08fe79281c273a46a0844a","sha1":"4f61d6e20ac35ed0ba9dab7fa838959fb3e8bcb5","sha256":"34c8ff9dfd4aaa2d9c7cd5ee0d58a67898f25d03a538ff1173cad939b031d212","sha512":"9c424f93522af9f0e2e438fc502860f0837d54d54e1befb1a2cf14555f5af525c57f35ed4476df916ea9d9dacf693e43edea2b810e2bbbab76ebfcf921b9c04f","ssdeep":"","tlshash":"ffd022433f8802809e7321c8ec156da07e28614642ca0a0306ee6c2029ca1f1f61ac7b","first_seen":"2026-04-22T18:24:23.672383Z","last_seen":"2026-04-22T18:24:23.672383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/3.mp4","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.mp4 HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 121640\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:15:11 GMT\r\netag: \"690a0a6f-1db28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 74\r\ncontent-range: bytes 0-121639/121640\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQntiCOQtbGkEGmuXZY%2FrVYTYzxtu07krVrRsBSJlrONAFupxqi0mM0rQ6Q6If4P8s5hRwdKsCJ%2Bg2MvCLIv7LuG6m7M%2Bpj1%2FOw8MExPmOTvPBWbB67LepWAotgu5zU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a9a14a8376ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121640,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"da3ea4a39c2859ee768f761a9e0be05c","sha1":"034a64a707d6b555f4764c0d1c9a0001d3e7c5b9","sha256":"9116095e316a6990fa66dd78fff172f068874d982536df3ccc5bd2f9e418ac5e","sha512":"b93873599b5a076ea4de17eb6e194a45ffd1be02eb19cd6b5022ef4b7e928df413341924e37758e6c095ba1e6037c9745cb1eb244cd32efafc6f851431f8f577","ssdeep":"3072:a87rXai5wjTncEtCBYNliaZtHlowthNZb6iAMK/eHY:j7jIcEOYWafew3NZbAMyeHY","tlshash":"cdc302926732b02fcb5a71398dea2354f631ce226b834b4f8385a176dc827761f5644a","first_seen":"2025-11-27T17:09:49.570574Z","last_seen":"2026-04-22T18:24:40.200273Z","times_seen":9,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: 5b46b75d0efb0e4bab7be2dc1ac5452f\r\nContent-Length: 47\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"5b46b75d0efb0e4bab7be2dc1ac5452f\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://kcexx538.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1776882238920\r\nresp-start-time: 1776882238923\r\nx-envoy-upstream-service-time: 2\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:23:58 GMT\r\nEO-LOG-UUID: 8355775482826148269\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4220952e01ca5444bba3f4d3b1f31aa4","sha1":"cb3d067bad23ea150c4324a9e89e6f3508978375","sha256":"54bf5dc52539fc227234ee97c891b0d981976dc98843e8a6f447f2985e550a6b","sha512":"670a203927297ddfc0104873db42b41f425613c6f2cd7496bfa345e20a8b7dce288a9b8e9af7ff265ae56f69a8fec36f25a0d8b2367ad7a2abb57d043113575d","ssdeep":"","tlshash":"c311899389f44aaa5f2056cc4608952ad49fb02f0ec0ebfed9117e448d3f3a90bd539d","first_seen":"2026-04-22T18:22:44.116368Z","last_seen":"2026-04-22T18:24:40.176034Z","times_seen":8,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":249,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/fil.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/fil.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Nov 2021 07:13:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e50a-8bf\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoMQN5TMe2M1jsKnOWIzEiF8nVTAVmXg0PC%2FB6slMCh3cYE7FvGU7U8qOJihaX8b3b9k4Nyn2JevYzuMMUUAVFdF3L7s9XZHBKz1e8vslevUGMt%2BXh2es95jcox01RU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5276ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"bc0baed91ad63da79ebfd092f42c76dd","sha1":"8a4f9cb9ee821242971e3f29a770e5078218bdf9","sha256":"ac4d8dcc1a755104c19551dcd96fbf097a93e529f86f540d8e0d55328c09a16d","sha512":"7cd155866ec8308b41049d32de0fa72b16dd774355f36ffba0f8256b1acaa2fe9fc5ae6695166f22c655aefe314b161d525f1cd8eb78ed746c3374905b0406bd","ssdeep":"","tlshash":"0e413eb67b9fc403c77f858708ed5e6544225f0a69248d50051a7e6ebd2f1e8c5915cc","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.931033Z","times_seen":3525,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.186.115","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /widget/loader.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 May 2024 09:15:03 GMT\r\ncontent-encoding: gzip\r\netag: \"00184F0A93D1F7867CDF782F3DF1AB53\"\r\ndate: Mon, 16 Mar 2026 10:31:22 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69B7DBFA104B5233392B5F8B\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14476346677076018366\r\nx-oss-storage-class: Standard\r\ncontent-md5: ABhPCpPR94Z833gvPfGrUw==\r\nx-oss-server-time: 15\r\ncontent-length: 5741\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5694518751236517462\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16344), with no line terminators","md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-22T18:24:40.171544Z","times_seen":2552,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":73,"dns":1,"connect":29,"send":0,"wait":28,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:12.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:12 GMT\r\nx-request-id: 36c57640e92924c528d6e7d28463b020\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 89cc5b5d44dbc9140baf3376c021cfc4\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Gv82Y4tNZO_H6IsSlnA8eYyAtc9H2bijOSJps2snauZzSQW6t_Ys5w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d89145c1d0dc76ebb585cd8eb00c2d5","sha1":"70cf8bdf16ba6820732becacec71488025c74cb3","sha256":"8f623ef67a6e9fa1d536734f81e9556ccc505bf5fe1a59216a9d614107faa650","sha512":"f27156e723557bd5d850fa6a763efa130a5f6f209241abc36c749ce3e32b94ec2ce7cdad69b787a49b24e5ba3e5032de24a072e118273f641bb0031815863b2f","ssdeep":"","tlshash":"11d0a746bf0412246cd01094ae5545305668298508424a1252df5c41a794aff7e19c32","first_seen":"2026-04-22T18:24:23.679512Z","last_seen":"2026-04-22T18:24:23.679512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/css/base.css?v=0536","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/css/base.css?v=0536 HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 31 May 2025 06:06:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9c4c-642d\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikay8moSsvL%2FW2M5kSnCqAZ5ZHnuRxQ94UnTs%2BFfsXbfwZ%2F%2Fw6qRPlPM86PNmw0PamsR07PlTpfLcRps7NWTAA0AJGABH5iW5gGwYxqjT1F8uHbz6M4J71iwVZzjwTA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeaeb76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25645,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"13c4f8a0e9a328b2735872b476acd8df","sha1":"a72a2292319e32d176e27b679f87c40ad25c316e","sha256":"2131e86e30c4207121fc669063f77bda752091ef574ac06deb5fbfdf86895a99","sha512":"1fd11190bcde80daa37375d29c3463a1fd37df7b4473f32c475163e189e066a01daa73cd66cbc98c3f828936829f6471628d79364e8f67b26cc5493d3356f65d","ssdeep":"384:fpFiO2TjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBE:6RcN39FDwFx9EZS9YzqtRB8TF3MD6","tlshash":"3ab295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2025-06-28T11:29:49.125948Z","last_seen":"2026-04-22T18:24:40.16651Z","times_seen":45,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home-p-twitter.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-twitter.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFXgeeTQ4S%2FxowVP6Q20y7nOoOdpzc%2FqPDvtKOVORRjwK4LXyub3YcrAmogCchs00no%2BLAwijx4t254df8%2BYNX09X0%2BMIfgWL0I8w8qeQzVd728%2FKq80PoA6wOVFvzs%3D\"}]}\r\netag: W/\"690a1c3d-1c1\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a99f0b6b76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f55b9b1ba41f191f7d83f1410fb8a10","sha1":"9347c4d57e67d27d7b945926eb91dc2a6c69a5a1","sha256":"d3c653cb211a91f44bb8d772d67d996beeeda8315a484e982ae087ac8b20dedf","sha512":"17027af1a28466b84c30eb1b272906ee749de9db56db60f064604867cc941a6c702f3bb3585fd6489c874f94d2ebaed5d6609b6a854d702a3f70cc9137b077bb","ssdeep":"","tlshash":"10f0554193acf4c8c508de60230a3255b3fb32e379a4c3c0d2c89901a47c1af1e0e6e4","first_seen":"2025-11-27T17:09:49.565881Z","last_seen":"2026-04-22T18:24:40.20808Z","times_seen":17,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:07.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 197\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:07 GMT\r\nx-request-id: 6ef89a7bd64ae1884bec8fd568d452fe\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 60677467826f0f8fb4a24ee1303e60b5\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: UF6bkzA1C_wwyX5_rtO6AM2Kysodcd84VUUnwLCcdqIh08xQ7ig__A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8eb36f0b82ec3959e113df93f3ef7a0c","sha1":"4f44736a37e98fb27a2d37267ce58ab4217c36a2","sha256":"e228ce0d23f8edbe2c9542a21f94d4ecc7b5a2bb71398c4de93fc5cfcd6831dc","sha512":"d411e1f5116d8f88fe1b40899f5b21959e1b5f6e6de336fbe6924625b903f2a9950cb1e213eb1bb737466336963939fe23428e979e32761c5ee7fad47cc716ca","ssdeep":"","tlshash":"80d02282ae0c12f08d5521c0e5212d321f14078500c78a03a2eadb2016c04a4b72ac67","first_seen":"2026-04-22T18:24:23.68399Z","last_seen":"2026-04-22T18:24:23.68399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/hot-2.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jun 2022 14:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a35380-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M7R%2FAvhx6ODrsqtGlN22RVKI%2FrD105bJOcL7MKUhxjiZn1oiepM9Xng0DZouJJ9lM8FTpqai8VuMMuNcCwuFuJ0SXAWUE%2FZFBmLgLe87c7njQgaSfm151UMmm22eFE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeb0276ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:50.076028Z","times_seen":5036,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:03.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:03 GMT\r\nx-request-id: 7e5479cf3ec24650c51e33691bfb5776\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 400a93f2b8f8ab05eeef9eae6f582de0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YTCL62eRd_eeRd5YDo4U08EZ2uAvFYk3yoKAtoka-MPY-e3tw21BtA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dd7a220774264a2f4d313cdc9c7cbab1","sha1":"735a3d28db6e39705fddd7d9f5232b4b762a21aa","sha256":"d3f5c65c5a69ed264f78b0b87e44697f7779d34ac1461ed3a928328208490472","sha512":"c7162e666ccaf5c1170e6855932e1270e995d576151c2691126c6f5d888b47a03c5bbaeb411e369c76e637fb9514b41dbba41276b216cde38feafd95769e6b36","ssdeep":"","tlshash":"e0b012001f9b053b2d8840483276491206e884c031f9074011cc407444dfcf09b051c0","first_seen":"2026-04-22T18:24:23.68806Z","last_seen":"2026-04-22T18:24:23.68806Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:05.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:05 GMT\r\nx-request-id: 73e94086704432442c57feedc8aa33dc\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d6fad96666bc0942e4c1b2645f788fb0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: BBw0FSeVwTBSZY2OdieqrEr-GK-qDnKT7locpgZsUkCEj635n6cVDg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e89b73b1cec4350cc4011096e8de3876","sha1":"c2679b4c0c3a17c6ed3e94799cf50db326e9b19f","sha256":"d53722c94e0b10ccb257eef1aa41a1992d27750030caacc55eb99dfa166da93a","sha512":"6ce1a1f02b7224b27e5cb9cdefdf7956bc17e80ba96e1ac701162ff052100d92572ff70ffd87cdca634d8eec35a27b44c825c20d513001774028a842a47f8fe8","ssdeep":"","tlshash":"abd0a7312e050cd05c622084ad44bb5093e852854881064f17fd4d501a880a47b09cbb","first_seen":"2026-04-22T18:24:23.69062Z","last_seen":"2026-04-22T18:24:23.69062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:13.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\nx-request-id: 40d357ddc8ce7a64eddd8929f6e2fa5e\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 21600735d24a1dfa055db859e62ca4fc\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ZiAMI0IbaTFmXLYjqf7VrbXHTp4MQmtEyQmC4Onn--reGXVnKXCteA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e3ed17b9e87e45198aa1cda1e4b7e16a","sha1":"e67f785e42238e130ef934bd106bc26f368004a6","sha256":"ae0796564327f60f97915ae3c51021d08cb7929ffb891b483fc0ab7a49fe8838","sha512":"8805c301154f1d118019cb486283f720eb33b2287c93c197db842365328cd28b281d3b016dd24f9cd2f65a38bb59b62f081e9d8b5e5d25d6a027bdc1862c6862","ssdeep":"","tlshash":"dfb012800b9b053b2dd8404c2277061506e884c031f4165111dc442044dfcf0af09680","first_seen":"2026-04-22T18:24:23.692926Z","last_seen":"2026-04-22T18:24:23.692926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap5Slide/style.css","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdVyomddGFwi63mbB3H3TosZh869PUsqNdLs2K0iQ8RDq%2BaO4C3hXpFOjPVMZ2WCDtiEaJQDSe02aMISmRHBMfJqP9YFGp6ZAJfijq9ezaRbjiSdC5JhXlcnQvtWeTU%3D\"}]}\r\netag: W/\"6119d72c-24d\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a99eeafb76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.026033Z","times_seen":6089,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/1613786513998262.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-adc\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29dhfJ64VfcEW0Y2hYqRbNUAVO%2FPP1Oke6PYSUGBZEy1D3b%2FkiyKOwnOX1FJFKt8wXUS4ap2kCKjZBcH7VgQmSkkX0qwxOT4Ge4Mz9fjhJ%2Bvk99BweQ38OHoXwOo%2FWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb1d76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-22T21:20:06.776061Z","times_seen":21040,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/1.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a08c8-abfe\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SFCrdicmuOmj470ZujyIPMnCX%2F4WW64vFuFZgO8b9jxmhXKfDlKMp1DsgOs3%2BiuyepEPuSsHuxJoRD67pAXh0MqFV3QAATjwdi8qYq9SxjjbJg7dYpcOCMW7%2FUGBcNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5c76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"95ede75112674627c15fe91a6698f7cc","sha1":"b78fb58d44092422f2dd7c714bfd2bfe96bad384","sha256":"d9ebe65437c812e6461b09c204bc6df20fc1c9e7fe818f05dc9bffa32799fc30","sha512":"1ef985e6c23b666421dfe38b823b41e54bf73654b225b289d5da9378948bf237ddfa625b95fad4f600f555d78fee84f594ace91e51c563aa3220c086d450b109","ssdeep":"768:d4bQB2xDA3CaScbjgGzhsegjOya/E14QBhWdh45U5/+mXEwp56k:9BmAnK8hVyO//2Qd352mJp5R","tlshash":"591302b59bfef4aec32500b10ad7fd09126c59988ba658d126436dfd8dde3028e09774","first_seen":"2025-11-27T17:09:49.632126Z","last_seen":"2026-04-22T18:24:40.198928Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 25 Sep 2021 13:34:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"614f2572-2c9e\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=433vsUTc3pG8gVhUIj8k4qhygSGsqK0PQ975Dgh3X9f6mBKWcam979rxz39UtKdqEW%2F%2BwGnKPGEll3%2FSgq8QByFOVd%2FDLwX7qiW1nIx5G49iH4AAq3P08Zi8qLGp2OM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f1b9876ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-22T20:40:29.730152Z","times_seen":13308,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:10.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:10 GMT\r\nx-request-id: 091828966bc605c5804edd8d1a93d2a8\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d0a0f02e3a459dc6e3e0d93fbc5c2754\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: lMHowKxLVHblneBksmWTQ4xAMwlD8x9v_bu70z2hlrPEq8Irz5i_xw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3f674266f04ec0fdbd0be6b31a02e62","sha1":"a4af58bfc2898e6f824d88304f003adca34cb3f6","sha256":"8998e290b7b3e6a4450e6bcf80424075623b9272f44825784a54f3334727ecf3","sha512":"359b86adabef991d4f364ed8db0c12e9794e76122e21ef369854e0001e3a3e7f3542f0ed19b0515bf4d8799d6c8903cab9dfa62969798aa34eafe4ae716f0265","ssdeep":"","tlshash":"c6d0a746bf1415815c5532c8a7501d23d94d16c5056a4e4742e908a116c0168b81ac72","first_seen":"2026-04-22T18:24:23.697694Z","last_seen":"2026-04-22T18:24:23.697694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 18:23:57 GMT\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-04-22T23:50:21.151356Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":76,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:12.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:12 GMT\r\nx-request-id: a06fb40ba3bd2a76603ec6bc95713bd5\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 5cf56eaa7f7accb2d9d10d36061c45d2\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6G5fVVrZ_-hOSe57emt_TL06B9yiD84MQ7sXVI6bCXR7ValgY4chmQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"54b5d7a46ebcc25adab96bca381a81cd","sha1":"0d9c5b30d9d9982e386a5c534038c73053d07bea","sha256":"431dc5edc11111a552293da9afa118576affd0966ba81a66bd4e96addcb40d6c","sha512":"27491905a2f7c00d61d7c6302f4e76be9f9d23be48d4306c356d9e8c4364260be5f6a862e10e5f1600dc404fee9f9517820da4134945d7eba7f9b017e1c9c300","ssdeep":"","tlshash":"1ad023c15f801140459513c4dc693e28567e1c9f504a4f4342fd5d5345c4470f21943b","first_seen":"2026-04-22T18:24:23.700101Z","last_seen":"2026-04-22T18:24:23.700101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home-p-facebook.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-facebook.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLPCiHuJSUEheRHsDk6q7e8%2F09j3UCNcLByGePaGgfJ8HV4hyc5tGvspfSZIJ%2BSu9INicOcJ8Mo%2BBVH1t0T8n9NCH6unNlHwcKFEVYV4o1kEFxc4jN2E8OOZb%2FVz%2F9w%3D\"}]}\r\netag: W/\"690a1c3c-348\"\r\ncontent-encoding: br\r\ncf-ray: 9f06a99f1b7676ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3db779ec4a481ae2eae484d954e87833","sha1":"43397b3ab06d07d17d3a377170e2f1572415ae9f","sha256":"3ad52d01c6831d3321b33c3b554d91655c55e6fcf91a0d57a17abe83a7106e8d","sha512":"f96622bb1d670985bda68477010139bd92c03e5e4b25283c0130194e1b1a80abf84371f1a281b568acf1fd210ecf2c4563193993703a42daf917ded5d59b9cf1","ssdeep":"","tlshash":"6701f6f4d29cc480c5409b0f41ab94f15776b3b785aad5de7b8d25c6f90c09f0a75e80","first_seen":"2025-11-27T17:09:49.647954Z","last_seen":"2026-04-22T18:24:40.162907Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:12.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 214\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:12 GMT\r\nx-request-id: 27f5d7cc33b4bbe450bfda3973a029ee\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 17e96dfe97b03bda9d6fe3728246f58e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: nSbnL_6UVHVdZghDmMphOoXf1d_gFezN5CMf3XZ5q46PuQffJsPqmQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9727ee6246d63356766a09d0ae7d7e89","sha1":"241ad854de843a06cf4b5382ce3338f40ff024f2","sha256":"6b7d11c9958210e5f8c2a14450e64eb314c0807535994a222049b021b44eeab1","sha512":"af062eb623cff706f57137bf929e144a97e320fba8542dfdad0a1d3af3e9538ae58b52cc8f419b1ec1302d488e6b7cede410c82d67babaae9e629336cb0be16a","ssdeep":"","tlshash":"13d022433b8802809eb321c8ed166da07e28604342c60e0306ea6c2469c61f1f51acbb","first_seen":"2026-04-22T18:24:23.703132Z","last_seen":"2026-04-22T18:24:23.703132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/3.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:16:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ac0-bfa4\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRZ4OifrLkYSNroGSMDuAk3GhzT8vFXKVMTdPAtAhJGcXOSwUMIU9t9UlfDRLQ2HazM0%2BkwkLPidvOfB3EgfhZPWnYs3zMuOtu6%2FAGUvB8OSZXtBCqFBJwLEsjkNfn4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5e76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"605ab13aa91a4d3b95ef2385d94997bd","sha1":"0104babf6405cbb4351f1451dfb87617c4c0034b","sha256":"906004f4fae7119113a147d898e4c36c41c531114934276fd90f25aca902e72a","sha512":"d3a1da2b45f2e015c7f5627293e549d8f869929b8df28ab5184e013935d6e008d9bf0f56556245626a9dc66536f7125e5fd895533858aa37b4ea4133fa6c4723","ssdeep":"768:c2lAIvQgDS2AO2zPZbD349OOmCBbF7krncJ0xCXWHd+yUs9Q6+pMrMNJQhsh9asI:cCAQS2AO2zPZbjJOHp7kOMd+hQt+AMNo","tlshash":"5123f2816c5f32aacf1722e38d9fadca75c205a40b2a40ed4c9877cd5464f9cc6d98f5","first_seen":"2025-11-27T17:09:49.549738Z","last_seen":"2026-04-22T18:24:40.224257Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/js/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Jul 2024 23:07:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6699a027-14938\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVgDBeNnNJ0hSa%2BOqj%2F1v56Eb1UMOY7o6dkvbZOcfDgnpo31rlY1Gq9kxR3DeE6uK7XWhkQX5EGvLsycrAg58zAe9pzlYwY4vkDr4yYYWwZ8Hr3ov8kUJCqHaSIJ73c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f1b9676ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-22T18:28:09.598179Z","times_seen":9905,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T18:23:56.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fodoq5PsmoWy2c1Gwppm0XXNReM4JDui7gy0S9MU%2FC8GHng7scr%2BtMW1Ks6LuJ7rryHFFUY0q3gdjd9ZBHF4xsxr5pXdLH%2F4eJ72Y6eeS%2FwMSm80f3Mi0HXkhs5GP1s%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f06a9975dd756aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"9d476f118154c959da7592dad10abfa0","sha1":"54df18eda4c43299cd1c7a023b009fb0a44b22a3","sha256":"97d3ae2061fb782b664d852b557257e612bec5f38451aaaefa20a438ba031c34","sha512":"467c1e1d422460adf4e7bddc95673beed94a15dbf5dc0a6cd82f92a8790b956e23e7118ab9d0a92430085ca871a3407d3eabf35270d2365adb185054a08b290a","ssdeep":"1536:0KYL+cc44wlhVH+tQyW0C7vxmiXvX6hSfHnmNuSJ:wa4LlhoIxmKvX6hSfHnmNb","tlshash":"27b30a70e7fa19391023909b9beb52567ae5e437c20bca043ebd47604f96c2599337ec","first_seen":"2026-04-22T18:22:44.100892Z","last_seen":"2026-04-22T18:24:40.182557Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1052,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":1019,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 214\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: b67bb68ba8e067c68872ef4b7fbfba81\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 5a25d078c37e8b34a38e6518032bb78c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sMYFfY5lu08eCU2jYMO-Oz2nYnGNoEYp6NVKA5RhDCea_NGXnEZRNQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1898d57743bbf099e86ef32590853c34","sha1":"34982b7818e24219b36cf02109cccb3057e37ef1","sha256":"0e26ecf26a99f07ebed8f174227968e4ffc1fc1e508f17ee2081e86053701a14","sha512":"b9089883c025b6a0da2079249c9c4a6b825aa46d382e719334ddf3e65ac4559d044c0cfc8a7cbf5d8c8ab235cb397236525deb4bf17eb650ea6f5b48ac2d8ad2","ssdeep":"","tlshash":"70d022433b8803809e7321c8ec196da07f28604242c60a0307eb6c2839c62f1f61ac7b","first_seen":"2026-04-22T18:24:23.706993Z","last_seen":"2026-04-22T18:24:23.706993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":30,"dns":4,"connect":3,"send":0,"wait":248,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.67.151.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/static.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-38a0\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:07-04:00\r\ncontent-encoding: br\r\nage: 230\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06a9a69c5f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-22T20:49:43.793179Z","times_seen":612,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":11,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:10.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:10 GMT\r\nx-request-id: cc3082ff5e769c65e5cd0149b531d1d3\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 0dabeae8b5ce4687eef5dcf540b8dc01\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 1JNzq7AS8NumkOjtlbbKvxaBxQdK9i28MZX3B8oK7pq3QV1bk2riGg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b498d99eaae497b5860d22e777dea74c","sha1":"4438300e0f24781a1d47b16ca2f153f2dd913d8c","sha256":"a108ffa93f42c570c6eb67a9152cf869a1a1bc77595040a671d6dbb3d00d88fa","sha512":"9b7a80e6e3abc2e4348c13c420fac228c6487f70fc30243af67190e941bc19eb1815b2d4735a26dcd56b03649e09f4cc9d3a47188bcbde4df44f292dce3cafe0","ssdeep":"","tlshash":"7ed0a7527b4317a00463a5c9bb254e609654129311a506c752fa692436d44b8751543b","first_seen":"2026-04-22T18:24:23.70928Z","last_seen":"2026-04-22T18:24:23.70928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/download.mp4","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/download.mp4 HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 694742\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:15:35 GMT\r\netag: \"690a0a87-a99d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 76\r\ncontent-range: bytes 0-694741/694742\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cbe%2FpiA4C%2BuMpnWYkA8VNk%2FU9Dp7CeArVnACgp2KZf5x6CV0wwmz5wp600N5%2B9qQv5qQ37p41mfGDN1hLsLl%2FgLwkDaBXz5aCY6GYQ6rcQXYhkrI7cSZ4LNoqvzXQiU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a9a14a8776ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694742,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3453a6e8305ab91898af92b675472632","sha1":"aef077b5b99353fa6943ff9d547ae1f3dd50f121","sha256":"09478870c36bd960d527de106250f1a9876805ad5035a3883614dfc4d8be93b0","sha512":"292a8c37d93e529ba673e141cc0a654b661a32fbce29ace6754a906395d9b1734c699e7d98bdc52ac9e5855c345fbb449d91131f0b7b4490dbcd91b6b5194c13","ssdeep":"12288:9uSyWDkBjFjqZsm+0qm/SHdfYfVEyMh3v7AI2B9B6uF:9FSBjAZ9qGVEyMmB6uF","tlshash":"4ae423abdcc55abadd3c0b728295a1ca37b985cae176c3db300e09344b187675f8d1c9","first_seen":"2026-04-22T18:24:23.710637Z","last_seen":"2026-04-22T18:24:23.710637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:13.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 211\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\nx-request-id: 150e1368d98246589d98a5b1ec7c5574\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: f02bcbf0359e618e28b366ce88e8e4bc\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6hKeaL6_jahJGt_YmvzR4Mjahyzco5cTsoSp3hPVUfU2Ek0j4olaaw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":211,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ffde646a33410f6a31552638e239c98c","sha1":"1e94b6c0acfc2d2060ca9010872259f67b6a9efe","sha256":"dc2563074fc1e83437702486efe8ba423bdea5f04b5a192555c7c644a95c3668","sha512":"449e2957668f81667f3d099115636f636dbba889bea3ac324fdd5517f8908f580ea61e2864469560feab1611c011ffe9151abf8ed0cf85c168652ca5cc61cfda","ssdeep":"","tlshash":"45d02286ead02a815ca012c4fce87921f28538cd94900ac602fa9d0022e20aa3e1e97b","first_seen":"2026-04-22T18:24:23.712159Z","last_seen":"2026-04-22T18:24:23.712159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Feb 2021 23:56:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6025c42e-36e0\"\r\nexpires: Thu, 23 Apr 2026 06:22:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ko0kQS1e7HbiC%2BSGNyrP9WRBRcwTSPo8rzKJSHS%2B7uCR3aUVhdca73Brl5Qj56E0vmOAmpFS%2BNaGu0LdF1NDkeoGkKgxin1ZKibDUU63WTX5syKn2eVi1Qfb%2FBRExzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a9a50f5c76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-04-22T18:28:09.609875Z","times_seen":3191,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:12.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:12 GMT\r\nx-request-id: cd841e5d82246f399992d706fcae43d5\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 88200c09889f264cee1391556a250338\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0pMtRm8XLTxmeRnKl56LEw8Yamla-XsaRsKqUSgdmoIPKh54U4kzOw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c0f5c1505b128b592c937efa42e0a2e3","sha1":"f2f63631a4285919e874241dd2a3cb91e08a60b0","sha256":"45fd020ae0d2984ad7f80ea2d02a989cfc4d2480342dc699a4209f45807e6155","sha512":"70300adb13f85201d076c249daaa655d137b8adbaa61777a3793f65d8abc4d0277418eac81a91c9a0c5d1c0566e7ebf5e1dc855d9373c00ada67b2765ef5d28e","ssdeep":"","tlshash":"28d0a7527b4317600463a5c9bb254e609254129311a506d762fa691476d44b8751547b","first_seen":"2026-04-22T18:24:23.714071Z","last_seen":"2026-04-22T18:24:23.714071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:13.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\nx-request-id: 538bf58a5e5f0a56727198da768de64c\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: f3436e85dbe9a98caaa580ba50e007ee\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: uHvOiq6Ja8hl2N0Kyh62Hf0cXWSEY_RWnwqQdQSkeNS9rr7rR5bjhA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9bd023a291326259bc9c53dafb6f73ad","sha1":"5ca63aef4ce53ef3425f0f217d26483c6aaa578c","sha256":"f1bace4c458c46a4f6e916fd9b58eb558053bbc221738ec691493b4a39144172","sha512":"01ea1fd932f327db64cbc063b0108784c381fb36826e48d8a05ef5e4ef6fde9df8c2e789514a0f7330d821951945292cac27e6e29e39e8e5d67c3e2391ee2444","ssdeep":"","tlshash":"41d0238abf1419805c5571ccd6501d33e94d17c5456f4d8743fd099116c4178f42fc72","first_seen":"2026-04-22T18:24:23.715504Z","last_seen":"2026-04-22T18:24:23.715504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\nage: 736154\r\nx-served-by: cache-fra-etou8220176-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-04-23T01:43:10.086058Z","times_seen":22671,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":69,"dns":33,"connect":34,"send":0,"wait":27,"receive":8,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/css/home_footer.css?v=0536","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/css/home_footer.css?v=0536 HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 31 May 2025 06:03:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9b97-22ffc\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJ1mtMpPz1%2B0Uek2KHpttpZThM8S9zqDpmcztYtVLxVJ2P7tU6yzGlupOlL0k6ePzM84%2FdZnJFyI2jkFFWPk9v5vX2K4B7sZ2kS%2Fb6CVxucHEjVHR6Hl2EUB60mOgis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeaef76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2242)","md5":"af93c93ab0cc62f64fc4663a140a41b3","sha1":"14329d2037f47474c290f54a7480734201ce56a1","sha256":"62c60d6217a2a1a65eac79040163c727a041689a9ba5b735b94571fffcfdc564","sha512":"31d333b407e5611467b16ea5995cc2465530ca974505b189fdbd39d51e73f46907132119845b21ffc4d8103ce9f1618f3ab72de8bee7bd8c04bdf028823abfdc","ssdeep":"3072:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld33f9Ld33Ei+B3i+:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld3u","tlshash":"f4e3534f1fa2f411e8fb0c6d06ef45155a29950782d39ca8be8c9eaecfd75484701b8d","first_seen":"2025-06-28T11:29:49.101234Z","last_seen":"2026-04-22T18:24:40.167049Z","times_seen":40,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home_banner_4.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_4.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 13:52:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0527-33f3a\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 76\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Lk9hoga05GYknDwYD7XLrBjFdHL3Pyau%2FukyC7yAfTdgu%2FxuZiv1Oc1FX5F6vZqHa2%2Bi1HFXfucDquSWjV0l6QWHoYbhUapqzvkBfXsGozS97K5QzKwC89Xu4ca6%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb0f76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"8a3aaa5b8fa5f612ac5fd8547aaeaacc","sha1":"b585b36dc300791222eb5ce2ed3ef2d90be5e454","sha256":"a030f67fa95a38417accbe2267f9fcdc5df527e5319b38aed8ed7067a2f77170","sha512":"01e7f1c94a9397249c8b8c8012e891b1b903a7feb7c854008c0d3f8db424338657b41748c5644a7e53131525f79a7829c55d88038dae2dade065cd0042d1da74","ssdeep":"6144:g4yfMK8imcx3+S9tiND31qrUchVBxWzE2i:ryfci14S9AND30rUeCzEB","tlshash":"11240240db518573d7d68e95db160a82c69e723bb80be85153e7270b399bfec2d30d88","first_seen":"2025-11-27T17:09:49.639231Z","last_seen":"2026-04-22T18:24:40.205703Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/5fc.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a86\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojKwtlLAQ4zvqTMI1xtlaXKWEHWkEono5Irm4Mnl%2BqhCi2LcjpIaPhVdR6UuhlQx7UQ06Y%2FOYUk9hnn6WSJf4u33zc7uLHYb%2FAt4YxEpwTvS01COhElgjRmqRubBwHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99efb2476ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:27:36.854493Z","times_seen":18549,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: c5c1ef5a4aa63f23cbaa8d04308167ae\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 3b2c1f3bae63e8010bc068b29a37ecba\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cMxQPWgeMyXfvM9e8tFdkj0IIYl-Dws_3ROROt-XYisT3-Eg4wl_Nw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73368913fb3aec23b9e152e782c41c1d","sha1":"d07be050a8a0363acd551a79963dac4560042eab","sha256":"f604149beef37c88be82d4841f79b4afd241fc47eca464707f5e1b2455f306a9","sha512":"3245cfd9cec9f5a453236c6b633f9a76d054a0eec7d5fd41fc948cdb0f51cc03d9b7524d5201f582b036b7fc8a438e7aa2b51d646b12c2a6f8a4c0411922b862","ssdeep":"","tlshash":"a5b012000b9b063b2d984048217a051117e8c4c031f4054012dc406454dfcf09b06281","first_seen":"2026-04-22T18:24:23.719383Z","last_seen":"2026-04-22T18:24:23.719383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:12.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:12 GMT\r\nx-request-id: 7eb422845183b7cee7f93ec6db505e8a\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: c065f8e4a4a17e66323ccd2180c3bf2c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5Exr3d5VK3KOCgG8e1jQJNkk8KjJrFzyb8i0Qcyk_M6GMy63EG5aqA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ae47f7bb3ae92c3e7e7ae51aa2bdf1a7","sha1":"85c408703b248c3918da9c2a4026b9a7418a84fa","sha256":"4606e9a661503927cc849e003ef578d256cd308b7ea7bf24a6fca2fc6276a274","sha512":"ac447fc7a0fe5db2ca9a11a86e6b3d2132ea57b3061b992f09712548517cc620b65258e25a51443b9c5acc1b4f755951266848202bc266d8db892c93873ff17c","ssdeep":"","tlshash":"a7d0a7217b049d9198922289a940aa6119ac604a05810e0972fd5d5015882b4761987a","first_seen":"2026-04-22T18:24:23.720798Z","last_seen":"2026-04-22T18:24:23.720798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap/fonts/bootstrap-icons.css","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/bootstrap-icons.css HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 30 May 2024 01:29:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6657d670-edbb\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xufNVK6NrwKsvWL1qDkd5VeHsTHSPJNUtMALxhvmPc065UMUZrawh5i5af4hfGNcAO%2FSsgk3SpzRbXAXqhfrxrCfLIJ%2B2n5h6%2FIBhhjQXwl35vItODwS%2FPdp1F8TwIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeae776ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-04-22T18:28:09.601426Z","times_seen":14838,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/Icoinfont/icon/customer-service.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/customer-service.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Nov 2025 13:24:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b5028-f71\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcFjpdKGeyOTdNZXS2%2FARoe2zY7iq7TjlqoDytmQeeb2VlrTlKhYTCyMXOAcKehNoSSkX0cyBu%2FpT%2BpKHCcuiAldVWVRyIY5VUiqivs0aTJ7qKynsEtWf%2Fktw5WFgTc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeb0676ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"91a14d2d777d16708a29fa14fb8a6045","sha1":"6053d1e2f70f5e51f94ae307477442d1e8a7f3bc","sha256":"a0adef8cd9b4cd8664b55984519989b79e73d8809ed264b2ad15be40eeffcf67","sha512":"7eaab105b28879508b8eaee9bec2a80bf9cc10b94f328b5e528ca086ef9cea12cf72d1f01ffe6b2d4c6a76ee2459e9677e959b8fa46517a9dfedf6994536e89d","ssdeep":"","tlshash":"04816ca00d78831e6b720e65e7dbe014e52bc38582e6202bbd230dbbb4b7d9594924d2","first_seen":"2025-11-27T17:09:49.629541Z","last_seen":"2026-04-22T18:24:40.212078Z","times_seen":11,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 211\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: ac3deb3eba94cc9d89f8e1d8421b5006\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 96a45959fd9ac729449fbf8664dd4d09\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: KQav3c6-B0F8XlxWd-W1-NNVkJfdZBPff442dl3ukR3tize2yVt2-A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":211,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f886c019ed4fce42ea2adfe7de0cdfb0","sha1":"e628f1733a98a742321c221f528a6b711d4abe75","sha256":"73bb68ae1e876dae966d67624911d778e1f8bd7af2d9a8934419230a29ea2cf6","sha512":"7d5fbed9058aa86cc1b516da2910f2caa0c7c926ad38f08402d3c5b6afb0b8c11370d0525ba7c1b1176b3b27b67fb92c6906c23712e39fe37980b30d678e19cd","ssdeep":"","tlshash":"43d02293eed02a415c9012c0fcec7921f38638cd6490098603fb9c4032f24ae3e0a97b","first_seen":"2026-04-22T18:24:23.72342Z","last_seen":"2026-04-22T18:24:23.72342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: 07461c85c01b460cc16f0b9c281021cc\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: de8021202a181ae12feeef28bcd948a1\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: V_wkem5nocjLa3YGF_X_li9T0h1YB6h-gFD4T3SPScH5d9Tqo6VChw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"82431d77068a220e7ca49c74c52bfd2d","sha1":"746918c9b115d01e4cb1819d5f79fbb53e77d31d","sha256":"63f83153055175b82c820ae783029144d7f27752ae71b0f7e643cc30b3cb22a7","sha512":"39657ce02279bb355e5fedae6a2070f515a9b9b8fb64ba2a923e8d3f2fcaa127313312962b52dd372950b02c65146d3d1ee8b5c262c01ec02877065173d04be4","ssdeep":"","tlshash":"2ad023017b1415441c451287dc2479b09fd9148510840d4b57ff4d1456c58f57d5c433","first_seen":"2026-04-22T18:24:23.724768Z","last_seen":"2026-04-22T18:24:23.724768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:08.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:08 GMT\r\nx-request-id: c15aa4b19f530a5ff2bda24893549b3a\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 27f76c11952de20136a864b6774684cb\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: E5CZEoBylp-Kim5eMYtLZw81_7uOLIQvKUTVO2c7Nk-O5eGQh4zBNA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8209638b79ecfbccf2e7cc1ca8a3f708","sha1":"4c6faa94f95fb2decbea36e6d5eb9c306718cc79","sha256":"21e7a77ad1cb125ffc0d29a8eaad7b86881a7ee7f34b55d04d75d192ff354f98","sha512":"bcf8564fbc6474ac79f5edc959c2be35a94f748d291e89cfe210897825bb69a2ea466f60b9d6845b2c659b1ad1fb94861f1b7ce0bf76f7e8389c4677e8a0a499","ssdeep":"","tlshash":"90d0a7527b4317604463a5c9bb254e60a254129201b506c752fa692476d84b8752543b","first_seen":"2026-04-22T18:24:23.726132Z","last_seen":"2026-04-22T18:24:23.726132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Jun 2022 03:16:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a94f00-2f0fa\"\r\nexpires: Thu, 23 Apr 2026 06:22:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 76\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0%2FHrRDjwUnF6HWTxpfrOxVTxIUFFpuypCIldNVebweCyEliueu3%2FVhyrYN%2BE5nOq9o1n0ulq0om1KEEhjwTifbR3bsTC%2FRdQ7fG91CD1G5rNj5ul25JQmXkuaZZbpU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99eeaf876ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-22T18:27:50.066152Z","times_seen":3243,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:58.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:23:58 GMT\r\nx-request-id: 4123c7e3e9691aa6fe7427c18654cce2\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 9780a8bfa2c7eecd66fe5a96026de33a\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: lK9CMquMqyqbfgymFdCcS0xXc-ZkzHV2ibXK1wUrzBhXSGHjSbw3nw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b85dd7cb56737334cb4a5d8ae5b3653f","sha1":"835317c2ec589bfb78ab8569a99af73538bd6cb1","sha256":"d407fdf204093275ffef093ac7eec9a8eb3d399df6f0ade4556efd33ea60d6c2","sha512":"12036c297ebf354193110bdd5938caf6fed02a20c6f70a219ff5dcfed053a42992063315438ddfd6b402212951276b463fc7799f09f6c1ae7bb5627a00b3dda4","ssdeep":"","tlshash":"91b012001bab063b2d984048217e05210ae884c031f4064121dc406095dfcf09b05181","first_seen":"2026-04-22T18:24:23.728131Z","last_seen":"2026-04-22T18:24:23.728131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:24:05.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx538.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:05 GMT\r\nx-request-id: 68000a67a55dee7d44edd254ba304817\r\naccess-control-allow-origin: https://kcexx538.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: f9e1e1184abc57a9894fa7c8137bd953\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5MmvdEfjIfA3JaU6ATA_AHGNd0GjqSyXBr5Z4qzqzOAZZ6HR4Duwsg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4dcf6d50c64f37b5d95c3846bb371f16","sha1":"ad79c104a967a779ebe3011dc8313eb6f5941c20","sha256":"a94fcfaf4a44518da504ad44fad0268a7a4e4e8e088cf08bac6cbd70a7773e3f","sha512":"5f19d711b12de89a8939231c0a999fccb4a6679130ffc984817cf82d0a66c0d68030d9870286267992e9e09a07ec2d9f3bddaa4edafcdde75c0e6e8235ddf9ce","ssdeep":"","tlshash":"40d023c16f801140855117c4ec583d2c567d1c8e504e4a0342fd5e5315c5470f21943b","first_seen":"2026-04-22T18:24:23.729752Z","last_seen":"2026-04-22T18:24:23.729752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/xm/jst.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /xm/jst.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Mar 2022 06:16:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6236c6be-4b7b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0F%2Fyl8e%2BOYN%2B2BydENCD8hinYka7XnypwZqmugHtLrBJUfNu5%2BtcJPOSSRX5Anp%2BHqpJYwl2Ciu8BpJQ2HaowStwkC2ybQcgVIyvCw8u2dZtLpN4VyAXKJrevAyZms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b5676ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b993b0a39d50c323edbb5886a19d56cb","sha1":"8e183944ff4dd3741c2b18f3a2d8962b1662b1a4","sha256":"450fcc35ab762f1b121f48150a7465b6a506fee918e24a80811134ee3a1d88c6","sha512":"754b0b31db60b3b2b0b2dcbc5f32e950bd8245c08d60d4d84a8bfd7a887167dd636d8f001232639952575ac6d2ac97103c66e04a016502472412283cffd680e6","ssdeep":"192:cu7OzkWdAPKtyK2Pe+6fsKO2uY/E4vVAAm7gbK1QQlS/exkPXGmZ7ayFePl5a0FJ:cuiz5dU7h2QuagXq36Np2aE/ao54Cgq","tlshash":"6a82238d9f564f6a9485b3fdafea5050648740ec39a8e2f4e7b44473f80c6a50c48de7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-22T18:26:19.949961Z","times_seen":3148,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/BTC_Price.png","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/BTC_Price.png HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 14:16:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ab2-57dae\"\r\nexpires: Fri, 22 May 2026 18:22:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXhn38H4ydHIDKBpxPywLxqeykVJIOiK%2FuNxEo7IsalYSQrV0rjOf0tJ9F8sIZ0eL%2BNSRnVZWMgvdBB2VpeDjm5myHSnYhx5AV%2F%2BSutYIJO%2FI%2F88YILMSWSC8UwJFKM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f0b6876ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 849 x 594, 8-bit/color RGBA, non-interlaced","md5":"013b219ede3c5a55ce26a42eae553377","sha1":"c4881a5304909fe48cced573c682409ee18ae482","sha256":"d825ea3de8fe0d361b5fe04a28d9b790885d32ca1d0c6b5e98d9ca0e2915632a","sha512":"1babd4e75add157dc0b173bf95d8f91272b2e0a8a001166746a1d74d517beb95b775437ef32751a110b01d4cced5adeab8f255727569cdd9e98d239505b3652a","ssdeep":"6144:pHbM/dFaf83dg9cvpEE6T+hRq7uaFsSZ7xsAHpJ4mA0B1qrv3xluq2jwA+:daFCUqipE+hRq6amSRKAL4m2TBln","tlshash":"be7423fc2d482578bbdfe4012c5856bc0e5e534e4612a2cd0a82e0954cfcf5a66ef2f9","first_seen":"2025-11-27T17:09:49.58732Z","last_seen":"2026-04-22T18:24:40.188639Z","times_seen":9,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx538.com/Public/Home/static/imgs/home-p-discord.svg","fqdn":"kcexx538.com","domain":"kcexx538.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx538.com/","date":"2026-04-22T18:23:57.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx538.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:53:58 GMT","end":"Tue, 30 Jun 2026 10:53:57 GMT"},"fingerprint":{"sha1":"11:F2:4E:E0:08:D3:69:7C:08:92:CE:B5:99:4D:4D:B9:DD:9E:E9:AA","sha256":"EF:9E:A8:D2:44:A5:7B:38:04:2C:97:E7:7C:C3:35:FA:39:76:01:02:7D:2C:0A:A8:72:71:2A:05:71:E2:DE:D7"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-discord.svg HTTP/1.1\r\nHost: kcexx538.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx538.com/\r\nCookie: PHPSESSID=sm169cnmd527mrd9gmhgen8s45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 18:23:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-cad\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 77\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYZegBYlgwSE2W%2B73dBlXhRiHwY5ORCMFWuHnZsKh5FN8a2RpBrYZLgLlvo2NccsoR%2Bjrs2G73302UnXInrCVudcYDWmnDNT2YHW%2Fy6BAkhY9jH3vu47vNWaH1x5H%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06a99f1b7e76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a97e2474ad542b2847737426f6fe2ae","sha1":"e29ce1da34e1f4e9f9fd231f2e1f4d2497499b9a","sha256":"b26887362894dffd827cd8089e5721fe104ca1d15484d9f5a4ff39d3a659d2c0","sha512":"0e2167a25b3fcb54511c6ff4557be92540b595b15ce56d868605eb340c74ca67933fe64c42822e1cad44a7ecc6d7dafa10705ba256a48370056c5d2c020e7af9","ssdeep":"","tlshash":"fc6100fbaae833f4814ae7d990359436737f38fb37069f485344afc0a94204099ae854","first_seen":"2025-11-27T17:09:49.64206Z","last_seen":"2026-04-22T18:24:40.195657Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx538.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}