{"report_id":"436ab29c-0e8e-4abf-aa46-c86f71a8f67f","version":6,"status":"done","tags":[],"date":"2026-04-22T18:24:34Z","url":{"schema":"http","addr":"kcexx316.com","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"172.67.196.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"title":"KCEX","dom":{"size":267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"f2b46f0e3a4400514655fcfa44c0124b","sha1":"3cbc9b1c7b7cfcd628a88c0fa0884864345185e5","sha256":"1cf432fc9595130bb06c654fe72b88fdecbae9bddf18dab6799b1e5a2011d194","sha512":"2d5a4b30e02eb2a1cdb23efa48a5d256e5fef23421a9826ea0e74904710c396c3e3afd56056391898d9f65c2ae2404ac97ad01c4659678cf161d1c42e9baa551","ssdeep":"","tlshash":"86d02b9fcc21c14e880166d88691f558584bf21e5714ce8cfce034b8d5496ad0cd3288","dom_hash":"domhashe9551ca6980fee53ee15afe26c1cd5b2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kcexx316.com","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"172.67.196.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T18:24:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.huobi.pro","ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-04-19T16:00:38.013034Z","alert_count":0,"request_count":41,"received_data":30330,"sent_data":20881,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"image.providesupport.com","ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-09-04","domain_rank":225098,"first_seen":"2014-06-19T18:41:57Z","last_seen":"2026-04-17T10:50:46.043977Z","alert_count":0,"request_count":4,"received_data":18750,"sent_data":1902,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-04-22T06:56:53.121021Z","alert_count":0,"request_count":3,"received_data":1409493,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-04-16T12:03:56.62648Z","alert_count":0,"request_count":2,"received_data":2041,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":6149,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"118.107.44.62","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-04-18T10:11:58.126269Z","alert_count":1,"request_count":1,"received_data":93687,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kcexx316.com","ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-01","domain_rank":0,"first_seen":"2026-04-22T18:22:37.954282Z","last_seen":"2026-04-22T18:22:37.954282Z","alert_count":51,"request_count":51,"received_data":4033904,"sent_data":25666,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":1,"received_data":161181,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-04-22T06:56:53.113577Z","alert_count":0,"request_count":3,"received_data":3674,"sent_data":1855,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","size":1281,"data":"","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-27T19:31:37.69863Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb1ba546ada0b7bd4b7f89f1b8d1cc0c","sha1":"8e62837ecda98839b1d2884876d31fb52352ff3e","sha256":"07b77af75f3f217fa12ebeafd10ff3e56ef95d28f48d61cc7b5c1ab61137a8fc","sha512":"b61bd5a88873c2834f8454a2c00fbea3fdd636782a220219d958b58067d3324fb4283646de18c70247e00905f462a803753ff996d5c4f1167635186d00990a09","ssdeep":"","tlshash":"62e02696a906a13d86aa5096a6dfaa40a4a1216c28b1c4814464cca02828eb793badc9","size":313,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-27T19:31:37.724353Z","times_seen":496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e26430b47e80cc275cc8c2c3df1e34ec","sha1":"677488dc66730ccdc80cab85d1ee9e42bd8a32c0","sha256":"f024a25d7c636d96b8c450498bac0358db2f4c5808e5ff446b733034858ab2d0","sha512":"860ae8c19fee776f1db9fbf3c6abb0b7383637088c17dfe1c20a8436827db711c7d6f2df65fd398d2cdb78ef44fe50db9849b2f908f03b3966b3221caebb0ed5","ssdeep":"384:ubYpA2XqL6zngB4iJl+f9u8Dkn446NwMhHgyWfGhsGqPV/pv3aM6BFYzXbZGs+Bz:uH+gUTQyW+hsZ7vxgFiXsG0","tlshash":"e5e242e2e7bcab364a96015fa6cf81e1e725d039362bc58e395cc1281791d3897363f4","size":31518,"data":"","first_seen":"2025-11-27T17:09:49.651895Z","last_seen":"2026-04-22T18:24:40.22869Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-30T14:39:43.971991Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","size":16345,"data":"","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-30T14:39:43.98331Z","times_seen":2564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882255413","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaf0003fdae92ed99d6d1779a9543c40","sha1":"98874b83ed1c61a3cffdeb1386bd01ed4b5a0008","sha256":"774e8912f83f4624b4653ef51d7d834b2f0bae92374849d7b911a226f433df28","sha512":"a14cfdc2971e230b351a11b8b0af7663f687ec837435fc7ab6768278d78131f7b21374bfb24c65a0ccf914cec14ed2850d8cb19b3adf65d91d830192d48b5da5","ssdeep":"","tlshash":"a421f1774508237a42191df7e96f2e0e9a72581feae9c7d5c4344e40106e73ab431ae8","size":1199,"data":"","first_seen":"2026-04-22T18:24:40.193974Z","last_seen":"2026-04-22T18:24:40.193974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd26749d6ce6d2748d4da4e2461c61b","sha1":"a58fe48c5cfcba2900dc7465b85fe9d6341858c5","sha256":"7e8a1c14399902b2f2339515015e02d83ac304db944069190b67e41983b17e6b","sha512":"1c5f9d29c47bf268dd1f88b77c6149e5098e58b6342ef7e037e50a73b481452a68fdca00a4ba69f38c0a931dc36ffc821cb959f9f6ab2aa896de19a09a2d7b46","ssdeep":"12288:AVciXSnka9BGfTsHI5e4lARLgGqg45s/1OZ6:slXSkFTsHI5eRpPqh5s/d","tlshash":"924528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1196802,"data":"","first_seen":"2026-03-06T10:13:01.556157Z","last_seen":"2026-04-30T14:39:43.987031Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-30T15:45:58.663827Z","times_seen":13458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-30T10:28:11.825996Z","times_seen":13402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11944f96ddb914d6b0426d8e668bba1f","sha1":"3fe2ec69ce9987e299d3093ed220d6033c6b453c","sha256":"3a827d9885131ac0184de9f294c935d11c5a61ad995d8dcc69bf40a52f0c7a27","sha512":"b29a4b40f1419fa6855283038d4b24f4e0a596bde5ee6b87adf06a8d2e6db2e77497579107be3e6d707c3b927de08094c1dc2bd9cd240b92f5dc8502ec0281da","ssdeep":"384:vInEviJS3nrtb5n+j29cMw87zfyz5Lbv9/:vQMcYr5xyIo4721DJ","tlshash":"0c420938fa9b245c39a334148f6f005434d8a583c705cb153dadeac26fb552ba4badde","size":12632,"data":"","first_seen":"2025-11-27T17:09:49.658262Z","last_seen":"2026-04-22T18:24:40.231086Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"118.107.44.62","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-30T19:38:33.524965Z","times_seen":19351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"aa2be46a4906543cd177479079037e43","sha1":"d6998bba3e596f0220e32c7fa5c27fbe2157d34c","sha256":"7b5939a12f9bb4c8740c1724f6ad7c4eea32bb0c470deb0159b1c0cb601c4372","sha512":"f6897f6acc348a2c271c6440ae061399436ab669fab2b5f18a35fceee8c2c3e7ea8539867bd43dbfb6ad8499e7cc93253a4a02462a20a24813a268f8d8314c07","ssdeep":"","tlshash":"8b4100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1974,"data":"","first_seen":"2026-04-22T18:22:44.175236Z","last_seen":"2026-04-22T18:24:40.229933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"2a172d2a20945eeeff97ffd4d5539b98","sha1":"258e4e8e228b1d4a818a674db123af64a69f6b51","sha256":"d16ddb6e490a2a98a9740790dee2d164724b4a8b0a823b3795f036670d27bd64","sha512":"e39d5cd0da43a789c7c9d4f965360146af286b7fc9d58e1315a863dc2c88f36f8180205fd6d40960f7255dd038381518d8a08e8bc872a2832e0d80002944fcba","ssdeep":"","tlshash":"54410080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1984,"data":"","first_seen":"2026-04-22T18:22:44.174435Z","last_seen":"2026-04-22T18:24:40.231702Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3060d9e02a3d9515af4a0fafa8039c35","sha1":"d346c0e63e00b492013c091c3f1cf5e25f7aa716","sha256":"5cc19e71bc6dc6c88f1694a343d12edb1862648171f783cdfcaaf3dc9e2f4dbd","sha512":"7c7eeb168acb3c1967112a2437505df2c3106c47c1250d1b81bf2f5b8052bc80abf9df6b18911b1d05abf54922c638bb670ad685c622cb0e526e03f212c9eaea","ssdeep":"","tlshash":"544100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1986,"data":"","first_seen":"2026-04-22T18:22:44.168812Z","last_seen":"2026-04-22T18:24:40.23228Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/js/axios.min.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","size":29799,"data":"","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-27T19:31:37.662894Z","times_seen":478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"449d3adc719357ac5f6263412e9a6af7","sha1":"8c4014a2c16c7fe4380700a448b5cef664d0d452","sha256":"5a7e3624aa3530d1fb5af9140a2e1582f97a2b98457a47a2c0cb80a745551f4f","sha512":"3e6d02a2f39bae1d55f51da5fea667b885a08d0e2b429d346ebfbfa2d46ce2fb35f0f80619667453b69eb1ce4d83cefe5ce2515e4a885f64c1e103b818ef598f","ssdeep":"","tlshash":"3f11cb01931b5cd83af2a56f1f5381120c392413684bca283f0dd6e09fede539555dad","size":1100,"data":"","first_seen":"2025-11-27T17:09:49.664143Z","last_seen":"2026-04-22T18:24:40.23339Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-30T14:42:03.866388Z","times_seen":9925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3d9d4e4763e3e7f637700a47dd5d842c","sha1":"b7126cb67a7e05fd2d3499e761d513fdeaa398e9","sha256":"37a1a50377b00dd662ddf8091e4e326d2a474b00ec800e559a7b8f50a8a17139","sha512":"84a623e505e53881d38b11a1272395a01bd0e866453a0f4ad179ad7eb3bfd3bc301ea3fc9b1adc96a91de73a0adf269d0da5582d114a4d175be6ca69df567bae","ssdeep":"","tlshash":"5b410082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1990,"data":"","first_seen":"2026-04-22T18:22:44.170486Z","last_seen":"2026-04-22T18:24:40.233948Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/js/coin.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","size":45868,"data":"","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-27T19:31:37.499174Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-30T10:28:11.793657Z","times_seen":6109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-30T19:32:35.019514Z","times_seen":7556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25b6d15f572fc63d464c548d79358c18","sha1":"6b38f5db55ac3fac29e4f7b3f8fd49ba202434df","sha256":"13519e4ca14c1fb83c72b9b23233c57ba83577a0db5cf7d56fc2dc7de06a50ca","sha512":"1f9e44a6d8b890ed050f6fa9b51f619fc3e7da029119a109afdce655df8fbca952a73a396dd2dc564c09a630ffe8cfebcab2363d1e7187fe7e6163e012725493","ssdeep":"","tlshash":"03f0845e1a0ed3fa40a8427a5b71c2df75d05bdb080a6905fe8f02231fac425bc81fe2","size":572,"data":"","first_seen":"2025-11-27T17:09:49.664958Z","last_seen":"2026-04-22T18:24:40.234806Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4033dd87f906c92926a2b213a83002f","sha1":"ed2ccca6d3d93877c57a8614f2b5765452930665","sha256":"e5c97568860884408b75a5ec61ec252f2ea3fe57bba4302301a69aa32fd2642f","sha512":"2cb1ae773ca03fdd26c7ee7db683325f4602da218730363824d2fe1ac4a730fe8e4b0fe377e45ff7cdca6f27ba1ad4cd5840c44c22e535e7efd43323384740a5","ssdeep":"","tlshash":"0641020a487300b8944367bd1b5f910c267125532417ed10390ea750ef59ebc95adffc","size":1919,"data":"","first_seen":"2025-11-27T17:09:49.66577Z","last_seen":"2026-04-22T18:24:40.235292Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"1c640b947922f0d69fd756e2b4903ace","sha1":"beb26f476805278458efcee875257d50e1a0d49f","sha256":"3b21ffec13ad3abdc07be74458cb3e974da2b022afdbd6e44b965e420ab38b20","sha512":"8efab5af6b90dbfc4714d0c3852e7dfdb2ab30b845f474dbfc007da7f67edfafa4bd37958db46db4431ab4b2d7c0aed3027139a1a6cfc02283829fbaf14f2cdb","ssdeep":"","tlshash":"41410080c0000e00c08200380c80020020280000ca0880000c00a08000080228802828","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.18006Z","last_seen":"2026-04-22T18:24:40.232847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"c293667e6d98bdd32fd995e1a72a2fa7","sha1":"09cc7e3b977ea78326f90fb2a7e3c90a7b057d22","sha256":"a5ad8af82e3f6c04b8ed2a7af89e21ec5deb50905d23094792852a4fc0e87a51","sha512":"f4732ed9dcd8df8979126d89a192578a7b2ad885cf0f8baa74d4ea0f4d4f33d1ce6213c9cde84f799ec4923e94e1bd59706432a5f13d498fd1bc9dd1f52261bc","ssdeep":"","tlshash":"c84100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1972,"data":"","first_seen":"2026-04-22T18:22:44.167126Z","last_seen":"2026-04-22T18:24:40.22933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7cd50ffd0c7aac154a044dc63a12fd05","sha1":"07c74c2937c2d9626db8c37c8b002e785df5b9ae","sha256":"09a1b789e923f9f399ef47ae6852cf6c46abdb51a86ae6abe4cc703f196128e8","sha512":"2730f7b1c221bcc9bf4606919512124f2ecda1153ad82f9adcee010d1672b8494a441132ba4518925cb813ccb6c76ecbfb0bd4612aa73027c2ba03be5e1c1cd9","ssdeep":"","tlshash":"bf410080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1977,"data":"","first_seen":"2026-04-22T18:22:44.167972Z","last_seen":"2026-04-22T18:24:40.235943Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"736cdca103e9e765b32aed2ae61a26bd","sha1":"24ae820d9e76cdd5ceb4536f7ee7dccf1a5fddce","sha256":"fb13aaf22f0930d9a6867b13cc7cc449645206937a74494f9c8a93aca41490d9","sha512":"cc9cd291fc95b9c19df1dfb8d32a053e904d75b97b22d0df7619114cd362f8d0c1fe45f0b0e6d65df59bc5ba2c042eaa9bb9013278d04f5c0c55c476d4451dc3","ssdeep":"","tlshash":"ef410080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1970,"data":"","first_seen":"2026-04-22T18:22:44.171262Z","last_seen":"2026-04-22T18:24:40.227449Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1e4fe984466261ce9e2e20fbaa490a7","sha1":"4d92534f6c75a44f8ae0f02d084bf25472bb0622","sha256":"f83b38f91e007e8149da7798cf697aa8faeaee62373701fef35fadaa1e7a2a6f","sha512":"2077c4cf45754c175051720bfb87dfc531cdfdc72e50171f036f9a296b69a201fd838032cc625f81e7f4edf4535a0b1112db60942e819f4b863c68ea792efb83","ssdeep":"","tlshash":"5e4100c0c0200c00c08000380c80000820202202c000822b0802a08208088228802808","size":1980,"data":"","first_seen":"2026-04-22T18:22:44.172072Z","last_seen":"2026-04-22T18:24:40.236495Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7c727f5ea12d81da8883b99e80ee6998","sha1":"ae50a2eca8097b8ea51d8c3d5d517b3e200ba70b","sha256":"e38f12ae66161d8050fcf83f93f8a73aa6c7f2c7d3f84b370b7167b420fb58d1","sha512":"5b6f6ddca9ab1b1e43240339081d11f7824c52369fc668bebbff4758cfe6edc8452b8a57b4fc2552a646617c298b9befe531fb58bb5f5d2ba550cabb29a0ea37","ssdeep":"","tlshash":"4d4100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":1982,"data":"","first_seen":"2026-04-22T18:22:44.179225Z","last_seen":"2026-04-22T18:24:40.22678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"82538862f750e4af0e4d31d9cc5f9f89","sha1":"2ceb5e40c6dd39a9ac9f57f32b9a60ef4c6527d8","sha256":"13eb507f58506b71dbd4eef9bc2e77d37ac210b143ad4c903ed573665a64f319","sha512":"857c339c699dabb51a2fa801e6f3afc0702b7bb4e0e0bd392a9865729809b73e6272c78e1132059d2dc19e3dfe51d669e327e411ca2275a6e7d17aec439e0ba7","ssdeep":"","tlshash":"704100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1992,"data":"","first_seen":"2026-04-22T18:22:44.172958Z","last_seen":"2026-04-22T18:24:40.237034Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9af77ec196334c476628b867d7e945c6","sha1":"2fcdd41674765b878327d2311e2aee1e8996358f","sha256":"9e60f9328e42e3b7861acb1106d6ff7110dbb2bc081c071c19b803a109f8c061","sha512":"99870d1c3ddb87ee590f88fb2fe1cc2f3f73d05b954789cd102323c73da661dc5bbe8e4ece94239837fef8fed008faac350817c0f98b71e4e93d949fa892de85","ssdeep":"","tlshash":"bce0a78575921017a0af30ba45cf3980246cd20f021acd4c382dbac44f99cacd2b5f2c","size":298,"data":"","first_seen":"2025-11-27T17:09:49.66663Z","last_seen":"2026-04-22T18:24:40.237599Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a19014a82b6431020a77783ac142457f","sha1":"cd34bc7a4b8089979b3e82fbef84dbd275f20daf","sha256":"e25b0694eceb824fc684eae117b909d55e0bf829bd776d9085709d1a38bf7640","sha512":"a5c0b04ed4b906ffd57f1cc4ae4c593d18755bb21d86b98324e464efebfbf09d3a9c8124b7b97a52752484f496f327f6c4d61e604c0112a3e7696c4fdc5c6a90","ssdeep":"","tlshash":"54f0dc1aa4f315681473b0a94bff8c2570a1301ba24cde227f4d41459f1a1880e50f08","size":507,"data":"","first_seen":"2025-11-27T17:09:49.667563Z","last_seen":"2026-04-22T18:24:40.239373Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-30T15:45:58.663827Z","times_seen":13458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","size":14496,"data":"","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-30T15:03:46.927177Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/Icoinfont/icon/new_banner-bg4.mp4","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:14.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/new_banner-bg4.mp4 HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 491691\r\nlast-modified: Wed, 26 Nov 2025 14:06:14 GMT\r\netag: \"69270956-780ab\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 118\r\ncontent-range: bytes 0-491690/491691\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sZbrTzhDR0WGM5uk214x7Ui%2BRtQSjVVvJ%2BCeMXoZdUP4TAycVL%2BR5H9LuGHx693WRSDxrxk6%2FF9ewVi59FEtbXUlTOGtQwa0sBpdS1NdLznEY1TsdxXZr1eEn7fTSs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06aa07cf07c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":491691,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"796e6846277d840027311df7480285fb","sha1":"76ec44a1d63b87bd0114950f8a555828fbf70bbb","sha256":"8ac2fa3dccc7459f7086fac2b547d23e267e94562ff5beae5e7b93c01a1c4168","sha512":"1d2e8f7309d703ab5bd597c7c42dababf10a4ec347c6ece2e281b67c392252eb246a3d6d34010b2eaa0842ff049e7febca736229d5d1fbe6f6d14090e3e59188","ssdeep":"12288:sZ1ja8fCh9dZerTqe0hiu3VFtV85Wo0rM/Tap55sVAkaOTMtTxDL:sfWyChDZ5eVWjjo0KTap55CAoyP","tlshash":"3aa42345a320abd4d3187b76d8db5b893064ca95d2b2936b0b700e74bd0a3571c3bbf9","first_seen":"2025-11-27T17:09:49.626703Z","last_seen":"2026-04-22T18:24:40.15498Z","times_seen":9,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/download.mp4","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:14.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/download.mp4 HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 694742\r\nlast-modified: Tue, 04 Nov 2025 14:15:35 GMT\r\netag: \"690a0a87-a99d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 119\r\ncontent-range: bytes 0-694741/694742\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tdCq%2BIicCNzvvYzI7aqLMVCNcRLMLXxDjqi5LdBCeyZ7Tdf36%2BYntYqBCoEJ4%2FiK5VB2NeYSCiPwBQ09VyYpfG0CmbXEbc%2By4mf4udu32fV%2BjDc4Qj9CwEwX1rMSaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06aa07df0cc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353243,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ddc013dcd0af553263c36e0eaf65c99d","sha1":"816cbc3eb1320ef46091620c0567db6a17059ba4","sha256":"63a88ea95a9c557954172387500a628e59bf0c6f30aec41a87b740979a8d3033","sha512":"94ef24b254697437f6d1bc5b69d74798aeb7cd54e08f7050a45ec365b7b6e4c4c396f243ffc2b7f96f419639ee33546184138de49a17b3350608f5e205f99f59","ssdeep":"6144:9wrLSP/PnyWxlkBLJ1FjLuWPWncuqNoIm+02:9uSyWDkBjFjqZsm+02","tlshash":"ed7423d6e8c01857df7e2fb140da629a712dd2c6e6b7cbd3384d4a248b0527b1f44ac9","first_seen":"2026-04-22T18:24:40.155569Z","last_seen":"2026-04-22T18:24:40.155569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":12,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 214\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: fd519f13be9c583e6eb72b1dcac0e101\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: a7e984a9a203a53c13792d303fb65d94\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Q51aIkwc5Zb7dZH8O2bjqx2uDvGRZAZlzyj3q_1mcTr43hh0oGLX-Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"93544f8361a7e1032c810a4493e45761","sha1":"f9a464a1a35888f9f8c1680d2e3243404af45805","sha256":"0dc20998603279bfd34f9b2899cde67480ac01d36dc16553fa7c5586d59bdd21","sha512":"67e9e99144bab057cb2118142407e5c34c39ea4d689d1072ca481093689f7710da1e24232f152cc2e6852de4deb3b9a7ee23fb1630845f3966aad1c3129dfd5c","ssdeep":"","tlshash":"60d0a9473b8806809ea32188ed1569a07e28604242c60a4306eaac2029c61e1b61a87b","first_seen":"2026-04-22T18:24:40.156651Z","last_seen":"2026-04-22T18:24:40.156651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":25,"dns":4,"connect":1,"send":0,"wait":248,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 203\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: bc9f23e2b315192c10cade86eec3f274\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 930b99b42888925950c69364ac86687a\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fz6OcHJpZcE-tzPJBam1311fuakVEH-IfRjM9zKNS8PyiuN2wk5cEQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":203,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eae3f55f63324ce070f658125696e0a6","sha1":"6be43624c2654084a704eb85d41536d08b354938","sha256":"0e2a54e24742ca8bac625ead30aab024f4b5a730b9d55394b50483df2b689dac","sha512":"a8bd39d7e214ef28aff05095d1380b44633cb19372b4589a13ffbe9a793d23ebf48b5356c83edd7fcfc9f7581bb4f51d2ca65b94f0140c2abace63953cd97a60","ssdeep":"","tlshash":"9dd022053b8821d04ce015cdec706af0579c0ac506420d4a43ec8d8085a82b8b909c77","first_seen":"2026-04-22T18:24:40.157462Z","last_seen":"2026-04-22T18:24:40.157462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:22.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:22 GMT\r\nx-request-id: 07cfd45d5b8dcddc5cdc9090b6f78b31\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: ac5fa27e9b8ce77851ed9104f4480e35\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YNMRrVJnsIc8gK_gIX0D7lJ8aM_CH7PHLB8eXGrtHNbcHRS8SsDC3w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f2069dc3a4fe4489db69045f9732d6b5","sha1":"b346e94f0fa62c625d43a4c6f98059c1b6c7140f","sha256":"2814687f251568b73c52117728cc0b77a904b24a7bc5fda3dd50e766f45a8f0a","sha512":"ef9cf9fc9a9fdefbe547d26d5a68cd44977f6fe98d25862d17d7623f0532180d2957b2fcdd323034d4a0d6943f5a94939815d21af87936ff5592fd9a1c7ca39a","ssdeep":"","tlshash":"dfd023c25f801141455113c4dc987d28567d1c8f404a4a0352fd5d5305c4471f11943b","first_seen":"2026-04-22T18:24:40.158352Z","last_seen":"2026-04-22T18:24:40.158352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/mods/rvmShowPoweredBy.min.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-501\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:08-04:00\r\ncontent-encoding: br\r\nage: 247\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06aa133c484e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-04-27T19:31:37.69863Z","times_seen":630,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:17.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:17 GMT\r\nx-request-id: be0bccad6da625f7dca2068d0f899b0a\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: ee3d063288388a0adf00c961731638af\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ilVs2otliHRDy72EY_zbRHZsbjdW7pmbML5CrskAWsRPi1YDZNKTkQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c9f31df24bd45876453f223c1d760bb8","sha1":"fa93691fea23d296f62c3248d537d0ee8558a26d","sha256":"7c25ecc281045ffbf4e97ceb3ccfbe06fe1dc2782a6d7674c20dc4c63523cada","sha512":"2ea9c56bbc0bdb3c4edc765e67921293678e6268404feded23e8c8a8e396d3ba8f2332c8b443f1dccc72b0285714656c2ac319a1c6f0ace049511051c9a8acf4","ssdeep":"","tlshash":"10d0a7526b4317b00463a5c9bb254e609354139601a546c756fa691436d54b8751643b","first_seen":"2026-04-22T18:24:40.15976Z","last_seen":"2026-04-22T18:24:40.15976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home_banner_3.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_3.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a051b-353da\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWvICH4raUUiJ8WqGFsqpXXTkt%2BsejZxtH3%2F4Ss318sdqbSZNoHspo0PT0g%2Ft5PQKC9CN7LxlM7SWGhTZYOLgdBqTNmxAcmjg%2BGWzNN%2FLiyzm4ih2Fhm2q2X4ow2gr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059ea6c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"b3595c9e4447f6c4133f192e3cbe5c58","sha1":"08513a54419951c21614404db4131b5d70cd8a9d","sha256":"e4c8c824daefb13627d95ffcfc92e96bc1efd491e02e7782b822487d9587058b","sha512":"2395f0593bc396626efe4780e9404a0edc5fa7efaffffc6011aaebad0f271414a3823addbd894cb043fbfbdd55cff2fc92012a02a4f418c62339570013088efd","ssdeep":"3072:UIFD+3B6fRQEa1Q2qZLlLt7L1sK9aU6elKNkRzZHao00HKitP/69RXH2bwkp2:lGQJLpt7BPcU5gN+Z6o00p9+Hu2","tlshash":"61240193c8a2b2a6d6d2587d674f3e9ad770a053b1dd5f6e4f3020aa24234ccf932c55","first_seen":"2025-11-27T17:09:49.544193Z","last_seen":"2026-04-22T18:24:40.160559Z","times_seen":9,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/1594057379245582.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/1594057379245582.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 02 Jul 2021 16:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60df3b68-c13\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WlDr8vdLG96Vk2c6cCYagIlqiPMVDDuZlTAwMEiGZz1bDpg7fUBf8STEgSlkmggdhUCVsQnOomLq59bEAFDE0OPagZYTIDLLsf198qHTEbMaypJfQh1zrxFPgC8AAQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb3c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"033d340b5a4a22d8e8590b98409158f3","sha1":"098ef5ee4b44f780df7f39c022ea491cacb32e7f","sha256":"0b53847e742884cbfbc563109bb99cacbc75fbb1bca892a1dbf68982e68778a0","sha512":"60de2b9014037bbd2f081ffe295d2cd0d0772bfc9b878986404981aff8df34a51611ffe2d214e0ce8f3849f9f9bda9e52b650d50db089953fde9bbb5b9725339","ssdeep":"","tlshash":"03512bcb908c59b6afe24ea002945ce48021c177ad3b4726963ae91e9f742f6070dc62","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T10:28:11.788115Z","times_seen":3291,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:29.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:29 GMT\r\nx-request-id: 3ab36490c42a729507c863bc53453acd\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 50608d87218072903c7b39752ffba801\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: U7zCB_J19S7Z1X0XGl4ULZEu2SQiiA824ZW5NKbmB8ONMH1iaiBl5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"06973d21121fbbc44f8f25e3e63a01a5","sha1":"1900db88b71655b7df1079625c2fa469b42574ff","sha256":"bfac33cd38d18cefaf7313b794eaf4f910aba1b209d127633ff07ac5543a1629","sha512":"de61bf1245a977582473bf314014a663428b58d06a90fcc50c022b847ddbef8370e5ffc75b11fdab22698aead45c622c1518c381314d9706e7f7877a9f770607","ssdeep":"","tlshash":"fed023627b0419d04c9611c4f8459f7159bd148514ca0b4b23eead5117845f4be06d36","first_seen":"2026-04-22T18:24:40.161544Z","last_seen":"2026-04-22T18:24:40.161544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Jun 2022 03:16:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a94f00-2f0fa\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wTJ1cHsHYrdIqtdwvZu4D7FxA3%2B2J1uXe%2FD6iu%2BnASikPqHKaJkv823UwX8g146V3bVW2IjQ4vPI47OtQJDgI0rXviknE2a4%2FB%2FzkuCoNf9z9%2FU%2B4eoAE7NhYaRIMZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059e9dc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-28T19:19:08.54546Z","times_seen":3248,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home-p-facebook.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-facebook.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 119\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"690a1c3c-348\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykRORlFemvIERJx1GPrcHKrjhcD5vJgovqFj2FEalAWMM%2FN7uRlZ5hzRmSdsjGEVIpi2FHxFf5TVFl7OCKacTjy49MLNWl6sSeAPdpGr8o9q3M1YlLs7y%2F%2FsB0I6W2o%3D\"}]}\r\ncf-ray: 9f06aa05cec1c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3db779ec4a481ae2eae484d954e87833","sha1":"43397b3ab06d07d17d3a377170e2f1572415ae9f","sha256":"3ad52d01c6831d3321b33c3b554d91655c55e6fcf91a0d57a17abe83a7106e8d","sha512":"f96622bb1d670985bda68477010139bd92c03e5e4b25283c0130194e1b1a80abf84371f1a281b568acf1fd210ecf2c4563193993703a42daf917ded5d59b9cf1","ssdeep":"","tlshash":"6701f6f4d29cc480c5409b0f41ab94f15776b3b785aad5de7b8d25c6f90c09f0a75e80","first_seen":"2025-11-27T17:09:49.647954Z","last_seen":"2026-04-22T18:24:40.162907Z","times_seen":17,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Sep 2021 13:34:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"614f2572-2c9e\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyGoB7zb982rwEo2qg6eRRyulk%2FqgzVd8W4kyNlf%2BAjCnV%2FBIU7GiXx%2BW1Z%2FK7reGNneJfgTQWiRjvuRwVXgCD%2F14F7QkbQ3SxOfxGruG8XGxOs%2Fx2cEBC2UB1w56SU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05decac272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-04-30T10:28:11.825996Z","times_seen":13402,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=usdzusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 956e7f5003fdb79b30f9a69ecfe462d8\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 917b455585f1739a0d926bda7a478a94\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: PFeUe97wNFXc_18pR-1q-do_JIPGGRsWUQZ5tdO0PIZb3wXJwZ5vmQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a43cf41360ec0c90768e37bc7667140d","sha1":"e53fd1500e15bb1bfecc10919c34ae752da2acda","sha256":"d0668c3df40fa930e85ac702b4951e2b2f3241113f098cbdc867260bf1f1ed63","sha512":"3c799e72f6796268ab311568dbfe5c8ccb3830452cff435a57152cffe678bb3be1fb091e00df263e3986a5ae7d3ee4d29f13dbacf5665deeb18690baf7ea4e09","ssdeep":"","tlshash":"12b012000b9f053b2dc8404c23b6152106e884c031f5094011cc422044dfcf0eb05181","first_seen":"2026-04-22T18:24:40.16395Z","last_seen":"2026-04-22T18:24:40.16395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:29.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:29 GMT\r\nx-request-id: 9cf149d614a6f8abbbfcc16cfe867131\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 85b1c14e69113f92287eb1d65e44dca4\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: z7Vo-YowGV_7LdUX5hy_ccB9QhcYeQkKUn369dUs1E4sHfJHvYJ-Kg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5aaf2c3a6f3b9eb25c365c7788e4514","sha1":"183de1070b6f5bf93edd08f6e2dafa96431d4f15","sha256":"a9fcd8077b8ca1afac6a611e60841dd42d3916069a97c3cd09896564b0b61238","sha512":"d91d095c96cdcd944beca2de3890621217bd349f3171ad6beb26f23e8340e6de93262a2e4938a9b5b30bc8c1ca3a3f0fd5a36def813554020fac8651bce5fb25","ssdeep":"","tlshash":"d9d0a94abb08122abce01090ac958a305668298508428a12a2ef5c41a798afb7a1ac32","first_seen":"2026-04-22T18:24:40.164725Z","last_seen":"2026-04-22T18:24:40.164725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:31.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:31 GMT\r\nx-request-id: f32f4e2cc34c49387e28af635631d28b\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: e4c29bca406eabe4c40f6b7c336940e5\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NjS8bP8r4oDoGFMZusbFX4mFm4m9REqaOQMznLRTeLT1bS6xzy1q5g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0fa2a1c01a4c53db8aceebd175e4ecc9","sha1":"f20e94b1a2166f53762a46eb965498e1c334a2b1","sha256":"e915369af3b8e81a7bb038d583bb4f4260cf0cbaeb5a45fa9f1621b270315935","sha512":"a74c5ba98a4efe400b53b5439d022781cfdfec7a8bb18b185ea314e4360862263ec60a8817ac543b90dd595bb91442547088e0e20e60d9876b0bea0c1501c77b","ssdeep":"","tlshash":"a4d023123b4010340432e5ccb7298eb0c33527d700c209cd32ff2c0071d00b0b517423","first_seen":"2026-04-22T18:24:40.165521Z","last_seen":"2026-04-22T18:24:40.165521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/css/base.css?v=0536","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/css/base.css?v=0536 HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 31 May 2025 06:06:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9c4c-642d\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3XkZjhJO46A%2FHveZ7Tp8Mc%2F%2FBjPBvvPd6wulr6ZHdJKJEvxq1WWy6iw1j0dT0BVHCUTqGSMWKoiYUeft7ZsBoFxrQchHQvDTRF634JL2XD2uY%2F%2Bxsed9uzipvD113E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa058e98c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25645,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"13c4f8a0e9a328b2735872b476acd8df","sha1":"a72a2292319e32d176e27b679f87c40ad25c316e","sha256":"2131e86e30c4207121fc669063f77bda752091ef574ac06deb5fbfdf86895a99","sha512":"1fd11190bcde80daa37375d29c3463a1fd37df7b4473f32c475163e189e066a01daa73cd66cbc98c3f828936829f6471628d79364e8f67b26cc5493d3356f65d","ssdeep":"384:fpFiO2TjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBE:6RcN39FDwFx9EZS9YzqtRB8TF3MD6","tlshash":"3ab295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2025-06-28T11:29:49.125948Z","last_seen":"2026-04-22T18:24:40.16651Z","times_seen":45,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/css/home_footer.css?v=0536","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/css/home_footer.css?v=0536 HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 31 May 2025 06:03:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"683a9b97-22ffc\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOqDQl7RouSbuG2aXnpb9HXdnp1Qm%2B2291jHfwooC7Yz%2BA0k6erPyJuya4kTmDTULAOUNFEraA54edE38azA%2FWy4MEfGha%2FL%2FsMJJhNBamWtXajgGnkw%2BDLwY7OnvOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059e9ac272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2242)","md5":"af93c93ab0cc62f64fc4663a140a41b3","sha1":"14329d2037f47474c290f54a7480734201ce56a1","sha256":"62c60d6217a2a1a65eac79040163c727a041689a9ba5b735b94571fffcfdc564","sha512":"31d333b407e5611467b16ea5995cc2465530ca974505b189fdbd39d51e73f46907132119845b21ffc4d8103ce9f1618f3ab72de8bee7bd8c04bdf028823abfdc","ssdeep":"3072:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld33f9Ld33Ei+B3i+:w0sMYwat4LHWeTITRYjWAQaEqqP9Ld3u","tlshash":"f4e3534f1fa2f411e8fb0c6d06ef45155a29950782d39ca8be8c9eaecfd75484701b8d","first_seen":"2025-06-28T11:29:49.101234Z","last_seen":"2026-04-22T18:24:40.167049Z","times_seen":40,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/1613786496962262.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a83\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovZ5Q1ayKuzDGp9WFL8aiIAn6%2BH8cHk4%2F34MOqGP6HC7tVWUOycL23hq91320hC2dMceCpU4W5T2ecN7u0YRCE4x2F4ed9n9ipkJxv9aRAe%2BJMM0VR5jcsPG%2BcMGvxU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aeaac272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-30T18:36:20.85253Z","times_seen":21296,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/js/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 18 Jul 2024 23:07:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6699a027-14938\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StnQy9t9Yqg0MMAmr%2FT%2F5ln5OA%2BpVFD7kx2SLQ4IEx6dRHMZubikRn6L3p1V38Wo6ETDOozjwPMRDvhxnmYyincI2CE85sLg8peMC36fVKCpVtyGTH2n30NV2loGb%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05dec9c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-04-30T14:42:03.866388Z","times_seen":9925,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:22.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 219\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:22 GMT\r\nx-request-id: 62f09d2a9469e8306474999c497bd25a\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4c9085125d4dd5b2d6bbd38b036b6b1e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cnuA_6ADDExE-vMNQq0WyunnwGiEw9xKaeNpec0kVDGscdJCdye7WA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"160768fc49e90547c4cf834e2520a317","sha1":"e2a03ea3d4224d75725dce80b86dcee961537bb1","sha256":"a2a315f0183f1a6e86cac83db6165ab1eec3fa44c1c7a142369a222ef2306bc8","sha512":"789a80e4b0ea258cc454381a1c10cac52a434523e0edd967bfa829028481f4329fe9136499ee966f126d04a70f5fa80976f62b75e657e56a61258a897a2d44bd","ssdeep":"","tlshash":"31d0a7233a0419825ca21188a8156f609db9258904820a47abee5c4015811e4b605c3b","first_seen":"2026-04-22T18:24:40.168547Z","last_seen":"2026-04-22T18:24:40.168547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:28.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=iotausdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 204\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:28 GMT\r\nx-request-id: 61cc067fbff3923a6a7dd01737c20d11\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 5de38d8cb5c4e1cbe8bbd8c8e9fc8658\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: BKcixbgLs1SbPfAvi4gS5Ri7e_hz8Xi3az7iScIOSfInX-iQMnSWnQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e8674e2139636f99e166d757f429c35","sha1":"acf77e1e9e840aacd912898bd3f8f186a5972cf1","sha256":"47c115ca528f278f4bd8c55aad622fe4f2bce59d6650ccbfa2251584eb398c14","sha512":"3f33505105ff0baddd769a2cc21644305bdb554061cc12e06be76eaf2d8bd8192b86038e7869bd75d633cb00eb2addcaec9c101245be78fd3b358fb24da5ab8c","ssdeep":"","tlshash":"76d02203bac836e248b12285ec74daf0a39866c301428e424ae84e4096a41b4700ee77","first_seen":"2026-04-22T18:24:40.169753Z","last_seen":"2026-04-22T18:24:40.169753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/5f87397132a8b02.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-998\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqDk5W7QfRYjmxdGJWDP2GhRHcHMpWvAcwtY2zYut3NXwcEGDLmF9cKnBC4VPLnabcYi2651pSmPJE3Ybq7hdRQ0mJlrXdp698yqTb5x0TSsxcWtTb1d3N6t7dUudqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aeaec272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T18:36:20.867051Z","times_seen":18083,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home-p-medium.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-medium.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 119\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"690a1c3c-3f7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwi9AFWGqPA2vilvxFlevj5Xo3r8IAEGEsLmUkOuQsaldR7Ul0QWyZYbRnjd8OGA05zwEs9kn%2Fgmf109Y9jEU57jfy4iDHuWtykkqbq3fWZ2HPF6X5v5zd9nrV5yXhs%3D\"}]}\r\ncf-ray: 9f06aa05cec3c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf0a868a55e55325345883fa63a26236","sha1":"74bae04091f5f40fdb574a1897ee28b378d64e2c","sha256":"733cd7bd386603a6c43c560e20c379b0e98183f17348e37ffa0017f7dd478ad2","sha512":"53d7403b5acf323f471fc88cbb4a0d3c98028f018590eda7166bc2520adebc3db36f284f00c5c320fc632afe5451bddccdaec3b58c2e5d1da59ba49ac336ae1b","ssdeep":"","tlshash":"9d1102e5235de9fdcb06df8aa639d8287446b0b5ae3fce0a13dd2c85b40841d38c0099","first_seen":"2025-11-27T17:09:49.599129Z","last_seen":"2026-04-22T18:24:40.171002Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /widget/loader.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 May 2024 09:15:03 GMT\r\ncontent-encoding: gzip\r\netag: \"00184F0A93D1F7867CDF782F3DF1AB53\"\r\ndate: Thu, 25 Dec 2025 09:04:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 694CFE126EDEF631368E2FCE\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14476346677076018366\r\nx-oss-storage-class: Standard\r\ncontent-md5: ABhPCpPR94Z833gvPfGrUw==\r\nx-oss-server-time: 3\r\ncontent-length: 5741\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11282988037996091096\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16344), with no line terminators","md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-04-30T14:39:43.98331Z","times_seen":2564,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":58,"dns":2,"connect":18,"send":0,"wait":18,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882255885\u0026ps_l=https%3A//kcexx316.com/\u0026ps_r=\u0026ps_s=Jg12507SPGATPa2A","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1776882255885\u0026ps_l=https%3A//kcexx316.com/\u0026ps_r=\u0026ps_s=Jg12507SPGATPa2A HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:24:16 GMT\r\ncontent-type: application/json\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: no-cache\r\npragma: no-cache\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: Origin, accept-encoding\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:24:15-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f06aa135cac4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce33080b5c32e9a112da47c27b074f72","sha1":"7f8a374b0bef60327a18ab1fdd9cc459c5185526","sha256":"c69f9256ca3a89dbdbf2063f177728e38f6f5e2c383f01bd2aa84716aad4b296","sha512":"9281c915fedd5d977deb662f36a5b5b03ff27cc582921afb8d70cbe7fde501ca8e9d71e6be6a293453889fa9696f758057d4ea2d3bd371387f748e3e28eec0db","ssdeep":"","tlshash":"9390008c88e338ec00088b22ff82030ac3200caeb008fb08c2a00a0230cb3e82030003","first_seen":"2025-04-07T11:37:33.935595Z","last_seen":"2026-04-30T04:50:19.272897Z","times_seen":362,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:25.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:25 GMT\r\nx-request-id: 191e413600c693fa8b48e22c96f37a47\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: b46aacabbde4cf9a069ab6ee2992bd4e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: QShALyPmqU7wobaQ994wGOOaJRX6F-tSgT32xXj95PO3i3qQklAEXQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5c2e05cc4c598367e7f4e9c179b1a8a4","sha1":"d78811e8309fb2aa38e259f4cccba11073f3d708","sha256":"c1f1542fc9b258f270689954c329ad6cfca9fbd99128b26ff5df6499850b672d","sha512":"999b742fddee1f21452dc6bcc2721dbfec5c846e664705768920dcc360a5a11ccb5a455b1b7d75fbfcb0e8f5af86ab56992d3c6efddf91ce19e0538f5b8c7286","ssdeep":"","tlshash":"28d097827f0002700c73aac8b5100e208708028300810d89a2fa6a2c22c4078b526462","first_seen":"2026-04-22T18:24:40.172482Z","last_seen":"2026-04-22T18:24:40.172482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/1.mp4","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:14.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.mp4 HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 106025\r\nlast-modified: Tue, 04 Nov 2025 14:06:37 GMT\r\netag: \"690a086d-19e29\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 118\r\ncontent-range: bytes 0-106024/106025\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4qtFRQ3aZOfqYKcqKGKX6eNeKJPCRNw6xRwKaz6QoZgG5%2BBXOMZe0NDnVR5lDSYsYtJHFS6ReGzPzN3g9LUmSRabZrnlAKgrRG7oWtOxs5s9HuEuSDtPSt178sxBNU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06aa07cf09c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106025,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4ffaa7b2bd0a06af61652e6ab0b9d39d","sha1":"d37874760cfb26605cf651ae519f5de1d9df786e","sha256":"83d355cd527de9fa037fc2321fa56efc00fd54add9c9d9d8a9b000a272c5acd1","sha512":"cc9005cfe2b58354b356cbd92a68709b9e142b542a82b1d06df945c65c3dd6165d463d6fe8c38a2d423ba97f48df1e11e11f6ad14f78d8b3779f45bd89644e15","ssdeep":"1536:VuE1rm1vlIuf0/xSsfy8X6YC97jH8MBgUoWWZ9ING9zQey2Ac64UNre0+JDmopft:kv1NI20JS+y9eZUSHINHN3NreHmo7i3G","tlshash":"fca302e1d75da14ae278433ce2f1a1da5f32e0352b99634373958c2ffa34a459fa0358","first_seen":"2025-11-27T17:09:49.620604Z","last_seen":"2026-04-22T18:24:40.173299Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:27.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:27 GMT\r\nx-request-id: ad054bfce9817966060c002f58ae6a3d\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 25a86357ff6abc8275d27f6c33e40777\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: IbI8_hAQCJTfLAJP7CQlQois26Vm5LD9Q_jZPtd2juH62ObZnKW3Xw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ffa65f731b2f78df42eb74a62e277a29","sha1":"9f18adaf40d85049296d4e83f37d48416d314447","sha256":"ef692f170cbd92b5a34c3cfe7698fc5982fea68bbca3b0c867e32faf33f179e6","sha512":"274bd40cc8815dc4622058f0ddff7959afb132b23f56fde3d3d28b9214392d58aed2b6da4ad685d0b36ab8012ffcf0305ddcce7319fc1beb67518c113fc55d0b","ssdeep":"","tlshash":"9bd0a78abb0515405c6073c8a51c6f31da591b8a015f850a46fd4da125e40a9f41d86b","first_seen":"2026-04-22T18:24:40.173797Z","last_seen":"2026-04-22T18:24:40.173797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Feb 2021 23:56:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6025c42e-36e0\"\r\nexpires: Thu, 23 Apr 2026 06:22:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWOXmPQrMTgrw4qyjEqSzB3%2B7IKvn5Mzec%2BH3JVOZnoAxCcxpFwiuiw5ukuOLDqO2Xr8nfTUHPOa2PbXjQUhL4yJYSLcb%2B8rpwB5bm3kHixD24Eu4e%2FugARbSoM0cUE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa0f3843c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-04-30T10:28:11.817062Z","times_seen":3195,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=jstusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 272341949ebc90be93217eb422e059a1\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 1e0291e89f74524e8da20932c58e87c5\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ng_GtKtBc1Nx91RCJJmqzVYq6chvnUyHaNyFClRW0z_IYYZDpBRg-A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"87d9bdb186b5ff2a00681ea10d118bd8","sha1":"74ce77188037595b529ec85e4a38612ff83b996a","sha256":"dca39047037a353420ea47cb2f5118df50fc285cd9370cc824167ac1f74a63f3","sha512":"3e4a2f8ede20758ab4c553ae48f9193cf966529ea14c4bf9c816736a622609a1259103fa04f24767ae61214d726ab6483c65971903fd8be2e836c1ff87901821","ssdeep":"","tlshash":"ded023359b052d955c9020c8dc304e308d9656c60440c54f41ed4c54d544564765ac27","first_seen":"2026-04-22T18:24:40.175186Z","last_seen":"2026-04-22T18:24:40.175186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: 5b46b75d0efb0e4bab7be2dc1ac5452f\r\nContent-Length: 47\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"5b46b75d0efb0e4bab7be2dc1ac5452f\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://kcexx316.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1776882255906\r\nresp-start-time: 1776882255909\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:24:15 GMT\r\nEO-LOG-UUID: 14043838231267967363\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4220952e01ca5444bba3f4d3b1f31aa4","sha1":"cb3d067bad23ea150c4324a9e89e6f3508978375","sha256":"54bf5dc52539fc227234ee97c891b0d981976dc98843e8a6f447f2985e550a6b","sha512":"670a203927297ddfc0104873db42b41f425613c6f2cd7496bfa345e20a8b7dce288a9b8e9af7ff265ae56f69a8fec36f25a0d8b2367ad7a2abb57d043113575d","ssdeep":"","tlshash":"c311899389f44aaa5f2056cc4608952ad49fb02f0ec0ebfed9117e448d3f3a90bd539d","first_seen":"2026-04-22T18:22:44.116368Z","last_seen":"2026-04-22T18:24:40.176034Z","times_seen":8,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":229,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:30.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 211\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:30 GMT\r\nx-request-id: e31fe09cf2c94d361cc87c5c7b43a8c5\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 9567387432da54813c8ccb86c8bf44c5\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: l526QBCxhbVSWtBr5qZ5MCtZDSreQQblq8Eu2yTOOCwsQ4VHzE5BhQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":211,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a6a4035287fda7be7727bfaaf2228f7d","sha1":"37416edf5810a94201ebf4764221990b8047ec05","sha256":"ade53fdd165fa70df98557ab992b7cc96e75ecbd3dcff2a4821acff62b9a00a7","sha512":"c5db00ae10a33e92964da936b374276c7971b243af275e7c6b95748d8caa2c270a20acfbb6cee44fa0679ee02e1a02a3c7720db462af8a3092f6c883a97d9653","ssdeep":"","tlshash":"2fd02201bba012425c9162c4eca5b830faa4348f60904e87a3e88c2129c20a5b83aa7b","first_seen":"2026-04-22T18:24:40.176531Z","last_seen":"2026-04-22T18:24:40.176531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/jst.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/jst.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 20 Mar 2022 06:16:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6236c6be-4b7b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hey1HtPQKVKJQjgz8VaAuTEGr2huHKYTs936njNu%2BbVN6WZgwlSi0h2MEEiLiDBcRXhd1BMIJV9v5Sx3bcaQow8Fe3%2BKgoqtC%2BH8CFeWpSf645tf%2BTLAxp9v66KBk8w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb5c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b993b0a39d50c323edbb5886a19d56cb","sha1":"8e183944ff4dd3741c2b18f3a2d8962b1662b1a4","sha256":"450fcc35ab762f1b121f48150a7465b6a506fee918e24a80811134ee3a1d88c6","sha512":"754b0b31db60b3b2b0b2dcbc5f32e950bd8245c08d60d4d84a8bfd7a887167dd636d8f001232639952575ac6d2ac97103c66e04a016502472412283cffd680e6","ssdeep":"192:cu7OzkWdAPKtyK2Pe+6fsKO2uY/E4vVAAm7gbK1QQlS/exkPXGmZ7ayFePl5a0FJ:cuiz5dU7h2QuagXq36Np2aE/ao54Cgq","tlshash":"6a82238d9f564f6a9485b3fdafea5050648740ec39a8e2f4e7b44473f80c6a50c48de7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T10:28:11.803244Z","times_seen":3150,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/fil.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/fil.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Nov 2021 07:13:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e50a-8bf\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZGtsKvcVAKB1e%2FeWwKxeOaApn7P3VmvHBfZLocWB%2FUYg0M781F28UiEzrwB%2Bgv1MNoDoKK%2BYJIbIx7eb5Qz6FrOZp4PRUtzfHV60TlJmwEGLRu7A8ETgMhlxaxvJqA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb4c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"bc0baed91ad63da79ebfd092f42c76dd","sha1":"8a4f9cb9ee821242971e3f29a770e5078218bdf9","sha256":"ac4d8dcc1a755104c19551dcd96fbf097a93e529f86f540d8e0d55328c09a16d","sha512":"7cd155866ec8308b41049d32de0fa72b16dd774355f36ffba0f8256b1acaa2fe9fc5ae6695166f22c655aefe314b161d525f1cd8eb78ed746c3374905b0406bd","ssdeep":"","tlshash":"0e413eb67b9fc403c77f858708ed5e6544225f0a69248d50051a7e6ebd2f1e8c5915cc","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T10:28:11.772624Z","times_seen":3527,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:16.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/app-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"6FD26749D6CE6D2748D4DA4E2461C61B\"\r\ndate: Fri, 06 Mar 2026 06:38:22 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69AA765E6EDEF6323285300A\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15743163260591507650\r\nx-oss-storage-class: Standard\r\ncontent-md5: b9JnSdbObSdI1NpOJGHGGw==\r\nx-oss-server-time: 7\r\ncontent-length: 352652\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2705959440800945728\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1196802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef54ccd776c571950363824ef49047ad","sha1":"7cf2fc955baa2a734b4c5d5a1bd08b4622c69757","sha256":"f19803966bdb401b6f4f9fbedf9dd29b932a92513f4c3daa133d7fa2cecf805b","sha512":"a861257e6fb5bbb8b78ac5d9acbe89b07cd32be9301745c039aeaa3c1de9590db4e6a0af715647c0aea75fae72e561f0dba271a29d877d608aca81c7929fc08d","ssdeep":"6144:mLPtqVxPp7Uy96XStztkazQeBX2bbHzsHI5evwlTUMoFOFVwvgG90YnsUqbeWpH5:AVciXSnka9BGfTsHI5e4lARLgGqgs","tlshash":"c22539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2026-03-06T10:13:01.515406Z","last_seen":"2026-04-30T14:39:43.981248Z","times_seen":223,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/js/coin.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/js/coin.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 23 Dec 2022 09:50:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a579c8-b3e6\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6WnVcIsq5iNWnsmiN9scK%2BpSg9pZAZGpAIPS41363USWZOQgY517d3sMk5YYtIHxwWSlx6nxJE5ojWDoKmDT%2B2bkdGby%2FLcoxQAeNKRsIyYy3LCdt4yFDqusxOc4uc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059e9cc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46054,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44565)","md5":"8185ca5042d7354128c043a61e475ca6","sha1":"35d4e81a3b0836fa59e8ae6110534870ae64fada","sha256":"58afa4b99b8bd0c2933d334837cf04f8e48681beee9ff4759b08e55558e30c99","sha512":"58fa2e9dbac39e2262030b593d16335a596af2659b50a4ab0bc1c19fb9c3023084e1c664518c9b4e3974cab617c3cbdfcb333ac8b754f201c6bd47316318038e","ssdeep":"768:OzuFp6a3zMbmhOETNkSYzAHX0NvIJQbohosvtjKTxUasQ2IRT9rknfsjSf/lLnc5:Ozw6H2l+eof/e4+Pt72","tlshash":"4c235d48b2e067185af70fa33e179cd5f7ba415d358445a39f8ca7e09632326f680b36","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-04-27T19:31:37.499174Z","times_seen":502,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 18:24:14 GMT\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-04-30T19:19:01.369496Z","times_seen":1194,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":131,"dns":1,"connect":7,"send":0,"wait":23,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: f60d9dc4af1d3c6b02bbf146c0191d73\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 45864075d75b60ad631091c3bf1cc856\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: u6YJvIbbyGqBnBET_7LdEIl9HT-4yRwKOfnJNrOoRuLoY9Iniq5TcA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c50911e090f79832315ba88fe81006fb","sha1":"d68925762e511688d0135f48b1dc3d3fa742f685","sha256":"cd2616a29842a573cd81dcb1d25ec5229ad070aebaaf40a329b3338817bf2cbb","sha512":"966122126a08d0ac205c4cbe3efd2d9fcf56b34ad4dc121d20d7690f5005283f4820bb4431282df0c89a175d40677c965347eead7c701728a1e4b349e626bc79","ssdeep":"","tlshash":"b3d022827f0c41f04e6112cce9240c304f99638510c38b0b93ed9b1011c41a4b60adb3","first_seen":"2026-04-22T18:24:40.179988Z","last_seen":"2026-04-22T18:24:40.179988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:18.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:18 GMT\r\nx-request-id: d4fa55640825869925967bbc550d4d1d\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 7d568979d87c2a4f5c2bfe1989c3936b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NsLGpRlJhGUUsxJq1krXCS9wBFBPgo38sdYVc4aWW3dCdTdih_pOxQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5390b0c415202737369f4116aa1ee9c7","sha1":"5c51643356ce2e3182c0c4f01792cda78ec993ea","sha256":"40a6377dc0efb9d85187841f75d8a1d3796a66afe8072c8d586b652c244d23a5","sha512":"9adbe315b0ba9359de2f10aa9c92fca0fac13570bca7252b2b3b944a5b5cb80252ca0dbd0431a8a618fd43f6086c2cd844c90ea1be24d480880f93bd4bd5276b","ssdeep":"","tlshash":"35d0a786bb7409406ea03289a6256d21a54912c9099a454ac6fa48a215c0468b42e877","first_seen":"2026-04-22T18:24:40.180885Z","last_seen":"2026-04-22T18:24:40.180885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:24.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:24 GMT\r\nx-request-id: f984396d01e75182747fee95143d7cfa\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 9ce90c7e144ce07ac6845f873d53598d\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2OXB9sIwMdYTQm21LmDid-4UQDpEdARDF0VmdTePab4mWzLVgygL9g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8113f589b7b0a27d67df2c1837e63cd5","sha1":"409f67879de9a0b05b78545bfb59145d3d44868d","sha256":"6b78affb1d0a86403974c9089a9e67f3d22a4015a72137204a5039107fe7f464","sha512":"d78386a0e34f3c621c38c6ad64fe91ba0e842ea60af92dcd7fd5edd3fd2c3de8afba0b674760cf49c30c7a1b61ab828f6d64f2b05134cff51c6efdb057e104cc","ssdeep":"","tlshash":"a0d0a786bb7409406e603185a6256d31954912ca099a454acafd48b215c1069b42e9b7","first_seen":"2026-04-22T18:24:40.181807Z","last_seen":"2026-04-22T18:24:40.181807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T18:24:12.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxcaxhtKLQLiTwdG9K8nN6g%2BDCHZSi5LBOPvGpIiT%2BJYH5qx08MRZDWEN%2Buo1q1JP9dKLmbvRNgpbf7dw1Jf98w%2BP3BBNprQi4KJ%2BLxZsDeMOaZKecwmDR45a1k%2Fqqg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f06a9fdfdd4723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"9d476f118154c959da7592dad10abfa0","sha1":"54df18eda4c43299cd1c7a023b009fb0a44b22a3","sha256":"97d3ae2061fb782b664d852b557257e612bec5f38451aaaefa20a438ba031c34","sha512":"467c1e1d422460adf4e7bddc95673beed94a15dbf5dc0a6cd82f92a8790b956e23e7118ab9d0a92430085ca871a3407d3eabf35270d2365adb185054a08b290a","ssdeep":"1536:0KYL+cc44wlhVH+tQyW0C7vxmiXvX6hSfHnmNuSJ:wa4LlhoIxmKvX6hSfHnmNb","tlshash":"27b30a70e7fa19391023909b9beb52567ae5e437c20bca043ebd47604f96c2599337ec","first_seen":"2026-04-22T18:22:44.100892Z","last_seen":"2026-04-22T18:24:40.182557Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1050,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":1015,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap/fonts/bootstrap-icons.css","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/bootstrap-icons.css HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 May 2024 01:29:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6657d670-edbb\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcAqJc1HXOTQHPI1NA3Ae4Dik3ZJntacSnP9Udik8dpQm8dWr1hUhXUvoqnNz99Ft2XZqm0axXQUvona8Iu9gafjnxMSpCLWJ1RL%2BPyWAi4JIIim0dXc7AlqCYpphp8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa058e97c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-04-30T10:28:11.810675Z","times_seen":14866,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/5f87391dce40926.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/5f87391dce40926.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-91a\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubiJ0dVL7c406idVeggDOGz0Yz%2B9VrYEGSfoWGWLjQuYDYPOx4AmiVSGEQtQ48ly5zAnJDxghKUUUxbJDJzhfvLiSazFbYPStBIVx4M8mbvun4f1qjPTmY84TIYL2Ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb0c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-04-30T18:36:20.814404Z","times_seen":15890,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 121\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XE4j17mQ9IGeHX9WsnkO5j4aPMdWWfMJDQ2cky9fbuw1%2BF5HGj3ih7pj5%2FeBKRW%2Fbwp79PBj7TEzvYT0MEAqZ4piMkBwPrL7IDRUfTrBxFylCK7YkGfbswSbovL%2FMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa0f4845c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-30T15:45:58.663827Z","times_seen":13458,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/js/axios.min.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/js/axios.min.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Dec 2022 08:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a4173a-7467\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lnx0utZ8p327aDrse1hxEfs5wQ%2BGPzXfrnahsImT8CXD6bpXqBz%2F17duqBxWa4wJHYhimjMsYD%2FdhwAI5w%2BDmGxguPOM50AnnsHXvMLtYeGEytwCJjl3OCr3gKrV4A4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059e9bc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29761)","md5":"58835c3f08ef2a2018ac37b27774fa2c","sha1":"e7a35a9106953bc41a4290cc8461c52612ea4379","sha256":"d5fba18e5f50a6f74db552765e4e256d2f4a6e9b46c2234b5e07f3c63fdcec28","sha512":"ed99a7f144d3eb0df27d5f26027065c985f90011a6fa29b821df2e331e7f852933173ef4074946a33e1e42837c67348d0e69e25de4980ea451657fc8fcc60dc6","ssdeep":"768:KCDyBTI61NNOlU1HI0DL48QDLAxH/uzEZBK5lilUpb0:ctND880wH20W+","tlshash":"a9d2e8c8ba91b071576771b5406f250bf23aa926e48dc490f130e8ea7cb850e9767f7c","first_seen":"2023-07-06T08:57:57Z","last_seen":"2026-04-27T19:31:37.662894Z","times_seen":478,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:22.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:22 GMT\r\nx-request-id: 4865ba67aac75001059b113151fdc475\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 3ad15ee7fe589c424f6f970ebb1e775c\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2fc_c1Sn20QqgrzlahgyATeVHiq9-Ylh25AI90XIRyGG3KF70s-siw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a92105842307740fe110ad9ded6cbba","sha1":"b28067f3982b6525a2c0bfb2ecfbe8c029a1df16","sha256":"f4e14407952c0166e2f4c61cbac0cd88a13f000a635f660d9588067222b1b1e1","sha512":"79bdf9a6e6f074ea626096efab2e2c2e3679059b3d5210ca0a2b8e41d15793a31a023a82bbc8378be4ed643e80496b8c5c544e51c54ed3ab71732cef615f1ab9","ssdeep":"","tlshash":"b2d02347ff0412357cd01091ec558530566c29850843471352df5c459794bff7b1dd33","first_seen":"2026-04-22T18:24:40.186361Z","last_seen":"2026-04-22T18:24:40.186361Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:23.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:23 GMT\r\nx-request-id: c46d17617e23ec8b654e1e64c5b47a02\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: dc6e2aa0c0cec5ec452d101ee207109e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XaI_W29tLYujuzBb4FHnS4dgTlIq2DTwNkSbtII2CYWBTctYnZuBog==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a28e786629f1da1a21350472cb8020a8","sha1":"d02ca6db842524ee54aba82c7b7b0cc81840c110","sha256":"6f957d21e088a147a3c29cbf249af51ff70ed61cf0b24fa36174830f4852f71e","sha512":"06769cae3f93c802ed71d68454d4634c6516f5619f8cb09e27c36a6ddae6b9cc13268aafe428435b6e303f5922ca2762515e765afff6de1976a3980d297469d5","ssdeep":"","tlshash":"72d023837f0003700c33b7c4b5100f20c708038700910e8a92fb692c33c807cb63a432","first_seen":"2026-04-22T18:24:40.187276Z","last_seen":"2026-04-22T18:24:40.187276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/trx.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/trx.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-d30\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxFb5nCB66vBiDV9RnuyDSHk3ihacOqE%2FhSM8Xa9Nq%2FL%2FOKvF2C6RCrdWBUALFLhN6qqLdaoH%2BLyKAHk8g0oxT742XmafwrAtgEL56qT9BsVU2EzlnU%2FfT0X4LOjxEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aeafc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"94689045fe789ea5a804e04d180d5b88","sha1":"4141c8cf319b2a9beabd2f67d9da1591ae1d805d","sha256":"85acc22574a8a833c94e8c767d461f7181a18dab1c3329d955c1eb6b801b6b4e","sha512":"ec2f109ae0ff20f4518ea4d1f48c771c2a9e34acd8895d2dc7c52c3302af590bb25e29484eaea887ac4869fbfa5ad1696c409493a56ff82e6ffe3ce177f3543a","ssdeep":"","tlshash":"ae614b9fcfe19cec8700d0ed7435d46bd5e43e5b46569c6ceb0d10a757c28215986339","first_seen":"2023-05-22T11:04:23Z","last_seen":"2026-04-23T15:58:20.750862Z","times_seen":2190,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/BTC_Price.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/BTC_Price.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:16:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ab2-57dae\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yl58MK3R69VO7cp%2F3S3t%2FpDj4fC8VOqwq1tVA0jVFTzei5RIjLEksV1ddrOB70nY%2FccNn%2BP%2Bn2e4uKs5aO0IiNrDty9i%2Fwz6%2FfRgP%2FvKGGnx%2FeJ4N7Kgc3UM4o9pwKY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05bebac272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 849 x 594, 8-bit/color RGBA, non-interlaced","md5":"013b219ede3c5a55ce26a42eae553377","sha1":"c4881a5304909fe48cced573c682409ee18ae482","sha256":"d825ea3de8fe0d361b5fe04a28d9b790885d32ca1d0c6b5e98d9ca0e2915632a","sha512":"1babd4e75add157dc0b173bf95d8f91272b2e0a8a001166746a1d74d517beb95b775437ef32751a110b01d4cced5adeab8f255727569cdd9e98d239505b3652a","ssdeep":"6144:pHbM/dFaf83dg9cvpEE6T+hRq7uaFsSZ7xsAHpJ4mA0B1qrv3xluq2jwA+:daFCUqipE+hRq6amSRKAL4m2TBln","tlshash":"be7423fc2d482578bbdfe4012c5856bc0e5e534e4612a2cd0a82e0954cfcf5a66ef2f9","first_seen":"2025-11-27T17:09:49.58732Z","last_seen":"2026-04-22T18:24:40.188639Z","times_seen":9,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=filusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 211\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 6513275f5260bf615db150ce26418667\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: e0bd39da3ddae4cb45440dab1a5c6a90\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NqYm_3S5C12PRBA3LO2bZ1s9ZoEKHWP50BY3nJdQvF9d_Sro-VESqQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":211,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"045a7b214f6ea3615d55d62ef7855cd4","sha1":"1fc2b3ce8a0b57c634fa7aeb4db56d1b081c1bfb","sha256":"4b47f09843e6eb68827e4f0dcd9921b47dd02d8c22229212cef699f53dab00a7","sha512":"25cab1ce4474c61e0845bfebdc1bdfe92d4b938d7249de975a972731827b4407ab809e7023212b3c879035a0ee49eb7570ca27cb29a28b5ff618ce71db12c20c","ssdeep":"","tlshash":"79d02282ead42a415d9012c8fce87931e28538cd5491098602fa9c4022e20aa7e0a97b","first_seen":"2026-04-22T18:24:40.189206Z","last_seen":"2026-04-22T18:24:40.189206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=itcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: b8fbb221a2542f57179a6da59317d622\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 36413c9dd1c0d4bcf8696c05f1c08ec0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gzb4qeWcEQ5EbjaQZYjRrF9ihPL0TQsVehCyK5o5OxGfa1HsPK9h5w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6626e24b7532260c7fde3fb51b19d427","sha1":"80c5c3dcc80d8284249de4bf3d40dac801835179","sha256":"cf4db378c45dba0e92cde56882f4d2267e190a8fc834d18931c2de31b8bd5b7c","sha512":"2b87599aa5e8987d7faffb383fb48d9b904b6ae47dda10d6b2ee607ddaeeb125737a63c087cadd15772fa4ff988697a78b028120f46b2ac0aa476a39be845dbd","ssdeep":"","tlshash":"77b012000b9f053b2dc8404d22f7053106ec84c031f8094112cc412044dfcf0db05188","first_seen":"2026-04-22T18:24:40.190187Z","last_seen":"2026-04-22T18:24:40.190187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:29.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 214\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:29 GMT\r\nx-request-id: ad302f4beda90322ed43ea849d92f29a\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 58deea1a21fa2053814175a5cf4e457e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sGsatECWL8Rr6kx_i9QY9xVv_2OX9MJg5UaNmiDaBz9xbS985ev13A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e00a1154ce75dbb28a1e5b0507845d6","sha1":"f985f0886861431e8772e58259ca6faea71ff69a","sha256":"cccfd7c8ac8527d64fc1125b33b7dcd65fb1fdbec5025969a113ab65b5666b44","sha512":"028c529ba54e6d84de90dfb66e42958dc0973f12a245597a3e33ae47716c2ef3735de1f16c52706ed2169b63d07dce344091060d2bdeef0c831aa807839399a7","ssdeep":"","tlshash":"5ad022433b880281aeb321c8ec156da17e2c604642d60a0306ea6c2429ca1f2f51ac7b","first_seen":"2026-04-22T18:24:40.191044Z","last_seen":"2026-04-22T18:24:40.191044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\nage: 3510192\r\nx-served-by: cache-fra-etou8220176-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-04-30T19:27:27.060294Z","times_seen":22969,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":30,"dns":1,"connect":13,"send":0,"wait":15,"receive":5,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 119\r\ncf-cache-status: HIT\r\netag: W/\"6119d72c-12a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1eaVVN0vsvBpS6Zp6FV81USMcTpg7tPlh6R2%2FTsMWKEhRZjNfISopK5fhS7wFdbv3OJ4tMIH4pztKw7NC7U6XSdJ5JOKwc%2BHFmQwEITmmJP%2F%2BCR9xmYGIPLS7H3oPM%3D\"}]}\r\ncf-ray: 9f06aa05eeccc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-30T10:28:11.793657Z","times_seen":6109,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6119d72c-1339c\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7N2MiwtpCXSKpxt57IdiGLYL%2FkwxN9MX1kin3gHjK8lX2WI51R2swgoSHFxoyRX36SPoffwjzl5nsPXqOjD9ms8OZbmTT%2F9DiJPovAxBJKRA%2Bahlg9TA51M2TyqBZM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05decbc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-04-30T19:32:35.019514Z","times_seen":7556,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:14.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/Public/Static/bootstrap/fonts/bootstrap-icons.css\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\nlast-modified: Thu, 30 May 2024 01:29:40 GMT\r\netag: \"6657d684-1a13c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=serL63WDKg61SDSyd4OxYqQUwn4%2F42pFD%2BTDjnAe7H8y%2F5KxiBawMuyerOOqYE3wmL9MGFQoy4gunTaVaGVsLnul1IKWZ5CtCC7G22QRWUundEBVHeAXswZ5Hv39FNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06aa08ff38c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T10:28:11.775Z","times_seen":10305,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882255413","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1776882255413 HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 25\r\ncache-control: must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:24:15-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: 9f06aa1089774e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1199), with no line terminators","md5":"aaf0003fdae92ed99d6d1779a9543c40","sha1":"98874b83ed1c61a3cffdeb1386bd01ed4b5a0008","sha256":"774e8912f83f4624b4653ef51d7d834b2f0bae92374849d7b911a226f433df28","sha512":"a14cfdc2971e230b351a11b8b0af7663f687ec837435fc7ab6768278d78131f7b21374bfb24c65a0ccf914cec14ed2850d8cb19b3adf65d91d830192d48b5da5","ssdeep":"","tlshash":"a421f1774508237a42191df7e96f2e0e9a72581feae9c7d5c4344e40106e73ab431ae8","first_seen":"2026-04-22T18:24:40.193974Z","last_seen":"2026-04-22T18:24:40.193974Z","times_seen":1,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":422,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:21.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:21 GMT\r\nx-request-id: 2eb76f04de50579f9c08a316884164d5\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 27a54a76275b63a4ad78a49eb7c0a7d9\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3fCQVyHMrOWZCZ3uAE72ey29iX30NoJvAC-U9IXGuqQrob0ND7rqPw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2a218ee81274812692bbfea1ce9eb2c2","sha1":"13e03851d6d8093be3438d1360fcb831b4dca34b","sha256":"8ed0c21af3db88fd2f145f799f1dfbb092ec5f2bf061feddd462e256b3e0a398","sha512":"417e69a1d391c8b38ff9046cf1c8ab414798bdf22381382ddfae9ddcb4994cc6b9afd5d79c4ac85180c5fe6b0382f9883a517d5521f35a606d709a6c503c0335","ssdeep":"","tlshash":"e4d097827f0002700823a6c4b5614e208b1802930081098592fa683d22c4069b826422","first_seen":"2026-04-22T18:24:40.19484Z","last_seen":"2026-04-22T18:24:40.19484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home-p-discord.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-discord.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-cad\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQajnLYGoz7RKRdJ1sblUFvR0Ld1ybH8jEq%2BL4HSlQk6MpTwUEgEjaLgneiUbCjQbyHiAGc07H2SXGE6gfMIlqMT7BJpjM5GJEHeAUr3oO3qcRZzo%2FYsj1v77ffDOWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05cec2c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a97e2474ad542b2847737426f6fe2ae","sha1":"e29ce1da34e1f4e9f9fd231f2e1f4d2497499b9a","sha256":"b26887362894dffd827cd8089e5721fe104ca1d15484d9f5a4ff39d3a659d2c0","sha512":"0e2167a25b3fcb54511c6ff4557be92540b595b15ce56d868605eb340c74ca67933fe64c42822e1cad44a7ecc6d7dafa10705ba256a48370056c5d2c020e7af9","ssdeep":"","tlshash":"fc6100fbaae833f4814ae7d990359436737f38fb37069f485344afc0a94204099ae854","first_seen":"2025-11-27T17:09:49.64206Z","last_seen":"2026-04-22T18:24:40.195657Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx316.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:17.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx316.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx316.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 13\r\nreq-arrive-time: 1776882257182\r\nresp-start-time: 1776882257195\r\nx-envoy-upstream-service-time: 13\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 335\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:24:17 GMT\r\nEO-LOG-UUID: 17033885632441874362\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f8dfc43c17f85e88a2901e696989216","sha1":"4aaa415626921f9fe3fa9dda43a9e3a35fc12feb","sha256":"3034b2b1e0b27128228f5cc2e0f248eed8bd4a5df715b99ea745ba98e5d3af2a","sha512":"e5da06523f173ad9912e30049e65c081af71dcf2cb5943301864d9bab7c3ec79c67d6501737e40187e6b249fbaf9391c93ba33290a3c2230fccea6f2e73c4f6b","ssdeep":"","tlshash":"02e0261942fc2c9b9a5640e066cce258b2c722c9a03e6ed2dec91182a29ae5d8a07431","first_seen":"2024-12-04T06:48:21.872025Z","last_seen":"2026-04-28T07:52:31.623541Z","times_seen":441,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:25.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:25 GMT\r\nx-request-id: 71ab1017abb3e52bab2bd761fee25881\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d28e84fd48dfb3a33c45d97459499d3e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: iaIxLnxj7EHv5j6I5_gGnT4c5aaDg_os7rxViiePqMOgGwd5BLBNTg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"575e3f1cb68a0f841d64990008bfcf81","sha1":"83fa252bce8ee85b66d044a930a4434bcfe18dcf","sha256":"6455fc40b035bebd7903c239183c1415e5879973b77774219c552bd4903b6b99","sha512":"2ad5e96476d977347f32e0c8cee11dbf764868aaf650b39521c7cd12117cbbf64fcfaab9271aebff79eefd60559e21443175e385f5658ebe073223b5c52ff960","ssdeep":"","tlshash":"fcb012000b9b053b2d98804c2276061107e884c032f4054411cc432444dfcf1ab05281","first_seen":"2026-04-22T18:24:40.196696Z","last_seen":"2026-04-22T18:24:40.196696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:30.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:30 GMT\r\nx-request-id: 372fa978d6652ab84d22171099184693\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 1ab13f2ff8b39117515eb4a15777abf0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: q96rbBkNieeKP-e9l4He4-8hci0IAaysQL7Wlv2tAj1DGT0d6YXsDQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"763bd6d490191b7eda8204b1653cb9d8","sha1":"c0c698cc5dbdb1c0d26e390e963265a44980d64c","sha256":"fac883f099543f75361f23669159776a61300fa3fb66b7253847a43944ca5004","sha512":"0672125a7e381ee6257e1d59c9b345c4e5e91414d060ecba2d4dfde5be3e708adfef2241c5593584368ada9bbadb24dcde22291e2b8128115aea2cf5fe90e87f","ssdeep":"","tlshash":"73d023457f5205485c5171c0d5555e2099741389109b424783fd5c6327c44b4f40dc37","first_seen":"2026-04-22T18:24:40.197545Z","last_seen":"2026-04-22T18:24:40.197545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Upload/public/6908ae4acc918.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Upload/public/6908ae4acc918.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 13:29:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908ae4a-1276e\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hF932wA7FSEzO9oTW%2BS8Njgd4HzHdL7GLKAhNpF1sqIhaMqvmd4jJQO%2BQBIdzpxp3XYEW3i1cI1RU5YS%2BJnx5SKUETv1igZg%2BCsmiGqEt8nvmA4L79DNvFOSI%2F%2FlJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059e9fc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"940c91feba7ba1ebfa57dc3f39110e3f","sha1":"85e5a05c752a781f310b790194cf60fb51f86de6","sha256":"15ad6d37a3689d95c72dce231274ff7fa0c61e65fa2a5cdd6d9527a239bb2b89","sha512":"1bd2eb66246ad84af700f504c7c62777761582e5bc0433d595f21b65990cd3f12f6a05da2ffd7e6a0ee4b67abf3c96b331189d3f0bc7aa64a4758d8f183160ab","ssdeep":"1536:Vq6RBCsQ5i1eM80/gCFS5O+6yEha1EpY9mSaKpRWdkjDlJBGVLVOzb:sYB4Y80/PAlS81EpOxpoy5wVeb","tlshash":"7573f1ae93884b7272d25e05a9ab5b0eb454fbce172bd0d2870472a4317d0c5e37dc67","first_seen":"2025-11-27T17:09:49.573687Z","last_seen":"2026-04-22T18:24:40.198342Z","times_seen":11,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/1.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/1.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:08:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a08c8-abfe\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U44v5o0Ewg%2FaDDSTa2OpD%2FA5zAYJjn8LxqWaRgdFKxYhn4o%2BE3XZz0p6kjWB%2B1eqHal0ZF57CF0QMK3C%2B8l1vHMwI4ipZnXSiAJmvZH9sK2zlUKISgNkUS7OQj0qU4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb9c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"95ede75112674627c15fe91a6698f7cc","sha1":"b78fb58d44092422f2dd7c714bfd2bfe96bad384","sha256":"d9ebe65437c812e6461b09c204bc6df20fc1c9e7fe818f05dc9bffa32799fc30","sha512":"1ef985e6c23b666421dfe38b823b41e54bf73654b225b289d5da9378948bf237ddfa625b95fad4f600f555d78fee84f594ace91e51c563aa3220c086d450b109","ssdeep":"768:d4bQB2xDA3CaScbjgGzhsegjOya/E14QBhWdh45U5/+mXEwp56k:9BmAnK8hVyO//2Qd352mJp5R","tlshash":"591302b59bfef4aec32500b10ad7fd09126c59988ba658d126436dfd8dde3028e09774","first_seen":"2025-11-27T17:09:49.632126Z","last_seen":"2026-04-22T18:24:40.198928Z","times_seen":9,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=dogeusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 221\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 0da9807998d03950d64abcb7bf922c1e\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 792aff267af1df1a695d4af656921b48\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _dZwe3tMtaGsIgIjDoxYfzWhsvr-pShs56hRAQER1Mal2ODmAMAgUA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"947e58d9f477fc4e888c9d09230a76e9","sha1":"670870e6eb3c4ba9ce74c8bcc1ea38e62ceb3a29","sha256":"7ac49eaa639482fe3d882b03ba6755c793d8c9e2b8547fe1d6502aa8fa0f2dff","sha512":"232813d510008b89cc64eedb4f62a6f0ba034fb0e1ce5cd35fe1484321f99a43b1ca4709fc0006444030205b27d0b82f75836e3ea3125b85f46175afb77a14b4","ssdeep":"","tlshash":"c3d0224aff081238bce01098ed958a30566c298508438b0392ef5c41a798bffbb1ec33","first_seen":"2026-04-22T18:24:40.19943Z","last_seen":"2026-04-22T18:24:40.19943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":256,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/3.mp4","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:14.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.mp4 HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 121640\r\nlast-modified: Tue, 04 Nov 2025 14:15:11 GMT\r\netag: \"690a0a6f-1db28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 118\r\ncontent-range: bytes 0-121639/121640\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiyfTCp2Vim1Te8zSYDNKd%2BKRBQjIT1kGwHOTU8ZC2N10Uv5d8KKhTSAxhBECeEq%2BBBeC61gCJVP2%2F48mINz56S2r0ELqFODmAiuGZor13lVw%2B8ciWk7SdpLR%2BljIqc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f06aa07df0ac272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121640,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"da3ea4a39c2859ee768f761a9e0be05c","sha1":"034a64a707d6b555f4764c0d1c9a0001d3e7c5b9","sha256":"9116095e316a6990fa66dd78fff172f068874d982536df3ccc5bd2f9e418ac5e","sha512":"b93873599b5a076ea4de17eb6e194a45ffd1be02eb19cd6b5022ef4b7e928df413341924e37758e6c095ba1e6037c9745cb1eb244cd32efafc6f851431f8f577","ssdeep":"3072:a87rXai5wjTncEtCBYNliaZtHlowthNZb6iAMK/eHY:j7jIcEOYWafew3NZbAMyeHY","tlshash":"cdc302926732b02fcb5a71398dea2354f631ce226b834b4f8385a176dc827761f5644a","first_seen":"2025-11-27T17:09:49.570574Z","last_seen":"2026-04-22T18:24:40.200273Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trxusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 822485b176f7419e73574c7c10dc199d\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 5abb8dbcc648bdce849dc8120e55b38e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: bzxToq0NLUPC8TONfIWsR4dpTWYQ5Yv9lZkyHbSOj4T6lYnXGHcldg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f25cbd07e365be8e6acf9de1c1e8ca21","sha1":"4ed2831219d3bd2986b423b34a1fa4e6b8a6ffe3","sha256":"af7747dae392dc528fb50e5f62db8893d494157efaa5ef2145f3bb181c7fd2df","sha512":"999e2c4b2c788990dbbc14e064805f867fafe86e2109cf040d4877faf6a87f2ea82c2213a5d6a818613302cb5fffe7d596b2bab8116e90f43813c8ffd921a355","ssdeep":"","tlshash":"fbd023113f09cdd09c9211c4e9857ff045ac188608c24f4a23ff1d5116c90e4b70dc3a","first_seen":"2026-04-22T18:24:40.20075Z","last_seen":"2026-04-22T18:24:40.20075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":247,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:20.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:20 GMT\r\nx-request-id: eed3676e42969eb9ec57e0614569c6b9\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 893249ba86f6a1434d2e85f2b833e19e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gX6pr8Hr-ye-TPct3lZ18jG6li31cZtCuQvDZYZ_IXlk8kGdG0H2Xg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9aa6c9f2897e061a60ef9b880ea8982a","sha1":"8813e8ef695a0238c5ae647b88836f5da2782c5e","sha256":"f463c2ab442d20811feffc27a1e7cec7817dee814cbc8b1e7cd6919b9709a54d","sha512":"6c9e9495938a5a65bc855e0f2ff8121b4fbe4492833baa07f27eb1bac31c9fe788531b00a3245a4996ce12f6b69e967a626d876b1206ffa5441e8c325e76a06a","ssdeep":"","tlshash":"15b012000b9b053b2da88048227606110ae884c032f4064411cc453444dfcf1eb06280","first_seen":"2026-04-22T18:24:40.201534Z","last_seen":"2026-04-22T18:24:40.201534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 9ccefd7f5e908f8d99069e53788e1e6f\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: e1bea72f37a341f753555b7c6cbaec9d\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: LBJqBvWDfXcRf4wqWDsqnOaWOoPqumHZbJ2ubJVHw5w3Z_40LvWlLA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55dd9fb58577105114ae2ed5e6c3a36a","sha1":"c62eca4b6ec8a71b5dd3c9cb797367b3e4b9395b","sha256":"dc510aabefe746bf1e85b48ee92af40335bff43fa9c2eb97eed16a32f78ca332","sha512":"5d8bdf306b9a4f793b564c398a875542bd23a48c7ac8768f09efe364bd85cc7b972b7a02460ec69e8c84ed5f0ab659d17c5427743b30816a4897ba6c9d5281e2","ssdeep":"","tlshash":"90d023c15f801180459113c8dc983d38567d1c8e404b4e0342fd5e5305c8470f21943b","first_seen":"2026-04-22T18:24:40.202349Z","last_seen":"2026-04-22T18:24:40.202349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":38,"dns":5,"connect":0,"send":0,"wait":242,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx316.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:16.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f\u0026track_id=\u0026title=KCEX\u0026referrer_url=\u0026url=https:%2F%2Fkcexx316.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://kcexx316.com/\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx316.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:24:16 GMT\r\nEO-LOG-UUID: 14657027027277813696\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:27.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:27 GMT\r\nx-request-id: 2c1a0d6f19bd2744580cdd02b6cbbf31\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 913da01cec32208b9c90d2e4bbadc705\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Um5Qqf_UO2cf0EyNh23WyKwnCXtIxDz7_mjBEy9VNwaKZzql-nKu7g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"adebd639e91cc435685737e742e36d7a","sha1":"5bf7404c91223f34fa404e7c2f6072e9aaaf94e0","sha256":"6f976fd359d3e46f5c8a4d40020950a85ba95e7a18301c8a5957c0bc62e5b6a1","sha512":"1f4c821c541b64321b524e2110721f88fce865298081c794bb545e1a4b18533211aa6f3c297d359693ba3a1c32d5ca3b600ad798735d29239819d236e39761f6","ssdeep":"","tlshash":"7cd097527b0010200422a588b7598ea08329179b0082098d22fb2c0075d00a0b61b422","first_seen":"2026-04-22T18:24:40.203769Z","last_seen":"2026-04-22T18:24:40.203769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:16.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.6.prod.20260306_165/entrypoint-v1.5.6.prod.20260306_165.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 06:30:39 GMT\r\ncontent-encoding: gzip\r\netag: \"5CC75246A01D73279B6562D7EC1FA1B8\"\r\ndate: Fri, 06 Mar 2026 06:38:21 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 69AA765D6EDEF63232DD270A\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11091130583004183539\r\nx-oss-storage-class: Standard\r\ncontent-md5: XMdSRqAdcyebZWLX7B+huA==\r\nx-oss-server-time: 5\r\ncontent-length: 64764\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3326334187507797157\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"5cc75246a01d73279b6562d7ec1fa1b8","sha1":"ec03073104c7ca3d4efda8afbeadd6e6a1327a3e","sha256":"4c87e79d8236f7c6e4e09358fe77ddaa39ec01daabe65031ce5fc520d1fecfe1","sha512":"1379d187b74b41d2cfaa9d37bc304d9c2672d7446f54ae11b4af614acea4c3926b59912525ec837c1c7ecb0582e28dcab79f383aa29d6ba0a43c751492f65099","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbMfZh:+llOuU1C+Pjv+1o+9Ym","tlshash":"1e1408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2026-03-06T10:13:01.511001Z","last_seen":"2026-04-30T14:39:43.971991Z","times_seen":225,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:16.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=5b46b75d0efb0e4bab7be2dc1ac5452f HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kcexx316.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 5\r\nreq-arrive-time: 1776882256661\r\nresp-start-time: 1776882256667\r\nx-envoy-upstream-service-time: 5\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1894\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:24:16 GMT\r\nEO-LOG-UUID: 8055919634546972722\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6193b180c937f27cb174d60a54780ae7","sha1":"bc0b6b03a8f0db8235f09d122bc861e7e221bf35","sha256":"420be45bef67d8c9d58b4fcccb6fa2faadf77795f069b0ff241bf14660302d54","sha512":"6e113d3c0205d20cfae7c7da570f15ef25cf5d4eca287eeefb6f9a7bc6240f87293b9a32909a1082839469e95a8a085ab2134463ab8fe1e7653051db8c36cc22","ssdeep":"","tlshash":"214102451082ad38925ef68dd6e9b905d55d304bb5c05f22d7f6cf1871cf24e2b033a5","first_seen":"2026-04-22T18:22:44.108489Z","last_seen":"2026-04-22T18:24:40.205158Z","times_seen":8,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":48,"dns":0,"connect":19,"send":0,"wait":233,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home_banner_4.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_4.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0527-33f3a\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtzxZl3ZEV0ry7%2BsrZ%2Bz%2BMuWtlKqeE9wNfprItjkof158Aolm7MNQCm0ebbQZwDrWh2s4v0UZ0HOc7nC5dmCK3jbrgJqnj2gzQkZg6U9m7DDrtS1OsMnYAAUyl%2BPc0A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aea7c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"8a3aaa5b8fa5f612ac5fd8547aaeaacc","sha1":"b585b36dc300791222eb5ce2ed3ef2d90be5e454","sha256":"a030f67fa95a38417accbe2267f9fcdc5df527e5319b38aed8ed7067a2f77170","sha512":"01e7f1c94a9397249c8b8c8012e891b1b903a7feb7c854008c0d3f8db424338657b41748c5644a7e53131525f79a7829c55d88038dae2dade065cd0042d1da74","ssdeep":"6144:g4yfMK8imcx3+S9tiND31qrUchVBxWzE2i:ryfci14S9AND30rUeCzEB","tlshash":"11240240db518573d7d68e95db160a82c69e723bb80be85153e7270b399bfec2d30d88","first_seen":"2025-11-27T17:09:49.639231Z","last_seen":"2026-04-22T18:24:40.205703Z","times_seen":9,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/5fc.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-a86\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4SNixNGr99VrmL78O%2FZek15UrNXJ0JoiOIFKSJcosyib%2FOgcPN6npQPFAHrkfNaARvO6uJ5oHgFWfOgDK1K1tgDtfqKtCnwzjW23VEsrP9xyF3HAMi%2FrTUoCcVbnIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aeacc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T18:36:20.878386Z","times_seen":18572,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home-p-linkedin.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-linkedin.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Nov 2025 15:31:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3c-523\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dl8BebcoQQCHMxCnCJC9QLwsX6gDsbgIy2V49fgUqhpkWiDKAUkGOzb8%2F9BBG1pZW%2FuCZos3qkVwCCED1QcYA1EQ2Pq3NUvAbZqz5MKnJmw9Ia2eLTLEOhBVgQ%2B419s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05cec4c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91cc9f901a7faa746e809d9ac862ecca","sha1":"18edcbc4ed6fcb4397cf9008eaa60a0c52c792fb","sha256":"d3f387b5ad7823a4d24bb708ab967e9ac9a6d0792080142904c1be5bbec6894b","sha512":"db07ae57475c1b89c544ac015869cb87dad1effcae153fd8cd11514388f43250e219694e7f5c4c7a8fd6c5b350d5ed538bda02969d0719367dc94bec7929c9b1","ssdeep":"","tlshash":"4b21d0bbd1f562e893499355aef53ca80b2b0bf5bb45ccc871cc0bd48e204ce9e45894","first_seen":"2025-11-27T17:09:49.577106Z","last_seen":"2026-04-22T18:24:40.207126Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://kcexx316.com/\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://kcexx316.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 22 Apr 2026 18:24:15 GMT\r\nEO-LOG-UUID: 6660258731770092694\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":42,"dns":1,"connect":20,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/1613786513998262.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 28 May 2021 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b089b0-adc\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=De9OTb3fk0SJT9SaRE2CKvPLoOAi%2FWLEx8gGcGC3nFK7r2kzFxVSzxsRFS629i%2FqQVohCpQbcA%2BeTtzVSBSbZrn%2Bn6PobItZJYsfBFvRPq2wTzQwwpyh7t9lUjDiKP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aea9c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-30T18:36:20.841637Z","times_seen":21078,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home-p-twitter.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-twitter.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 119\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"690a1c3d-1c1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3edG3ZBBdllzY%2FSET1vpWYWAHqO0wNsM%2FseGAB%2FVtoYPpzIQTkYROCulbXITujR6SQMxhDVc%2B%2BNU3JbN7Qz8GRKnFM4NjFiCcpnomeWdDCTxrMKXdUG8M%2FA4kxP%2BzMI%3D\"}]}\r\ncf-ray: 9f06aa05cebdc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f55b9b1ba41f191f7d83f1410fb8a10","sha1":"9347c4d57e67d27d7b945926eb91dc2a6c69a5a1","sha256":"d3c653cb211a91f44bb8d772d67d996beeeda8315a484e982ae087ac8b20dedf","sha512":"17027af1a28466b84c30eb1b272906ee749de9db56db60f064604867cc941a6c702f3bb3585fd6489c874f94d2ebaed5d6609b6a854d702a3f70cc9137b077bb","ssdeep":"","tlshash":"10f0554193acf4c8c508de60230a3255b3fb32e379a4c3c0d2c89901a47c1af1e0e6e4","first_seen":"2025-11-27T17:09:49.565881Z","last_seen":"2026-04-22T18:24:40.20808Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:19.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:19 GMT\r\nx-request-id: 609e480843caa8eb6fd9e8d527f66289\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4acf60158c3071db4ff8d9a7a1ae3bc2\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 32OrVAnlaoDmjdvjh2G6r6AJCZw3H0O2yc2Ab8BIgOEENaI6zmUYuw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a0f7b313a96a7505055b30f34269f0dd","sha1":"6bc3900fc25cd83c2dad0d452d0526bde9526432","sha256":"b1c0eaf09ec82a3d134c2a539ac1a1d27d184f7fca885090f778fd7769ca5c5f","sha512":"037a15f73a8e9cafed945f376a08e604695196591f2c32fa0522c4fb74a38b4844d3b3e878fd9396e09960791fda3c9234c3bf187caf281576f2c4931fbacc6c","ssdeep":"","tlshash":"78d09782bf0002700863a6c8b6100e208709028300910d8992fa692832c406cb827862","first_seen":"2026-04-22T18:24:40.208534Z","last_seen":"2026-04-22T18:24:40.208534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:24.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=bchusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 198\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:24 GMT\r\nx-request-id: cb1f4e1c863e60667ae6caa7cc0e1efe\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 58042e94cfc02b3d17118e5811d51f24\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: FpuTlDN1b_GmLBbkCC340qC3mmVWQr4WleN6ovNtHmnOTVCdwD8tEw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4d0b07e380041a46f63a86b495f90209","sha1":"a5471b014e7f76de2a4946bb4f5fa545065fa3d7","sha256":"868060b14e5f33cc4821da132dde48d340ab4acc26b4bbfb60c18fa5a2861cf4","sha512":"ff1149ec2ed5438dcf7e11811c0b8a2c28a69722f3203052e2993e327eb117e74a114c17c1c1fb8c6bded593aa29d40fdc4b10216da18f2b44041a723cbda01b","ssdeep":"","tlshash":"dfd022427b0c02e50e6121c4e5124d305f28928501c74b03deed8b402dc09b9b20deb3","first_seen":"2026-04-22T18:24:40.20978Z","last_seen":"2026-04-22T18:24:40.20978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home_banner_1.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_1.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0503-33d82\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9aFQRosCIqSEYvAuog0W9osWIyRSKBqNlguh2Dk8GxbDrqRrxMjlhQNNAdBHx55feIVTjTa6wENuz1f%2B2HpJRvqkq8Dd%2BOmUY2c6NNKWMTj%2FKFnjhsB%2FYoYXMRsA1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aea8c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1201 x 601, 8-bit/color RGBA, non-interlaced","md5":"7a706fe33fe6513a038e1cabe19641fa","sha1":"c50d4c295e430f5a05f8693b5a7658184af13018","sha256":"52e829d18b1a4ec0889ab4b1e5f3dc58b5df0c70f1e674f4dd8a6271b423a36b","sha512":"c4d402381b2b43e4fd4f3facedc2bf7f546202eddf7bec13b885b0a44ef75a138025629e9cd4ebb9e6266be911938a9afbbf0ec9b753a1a1737227d646039047","ssdeep":"6144:i0ZICYC8BmKsRhh9nUkUgkVJ8HB/9LZPIQMNiwi:i0ZICwJsRhh9nUkUgsJ8HB/jgFNij","tlshash":"3a24f190ae9e43b114bf3261f1440ee9e036314f956dfd6a6a34a7f9ff169302c21668","first_seen":"2025-11-27T17:09:49.602656Z","last_seen":"2026-04-22T18:24:40.210567Z","times_seen":8,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:26.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 205\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:26 GMT\r\nx-request-id: 268a32a6fc8773344ba8ff9c259b5367\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 53d4961fa8f9a2ce3d30f91406040a39\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: s288e3HRfib5Imc8KQHQXxZh13UJTLV13xkemesdMgZeTcp-TCWksw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"510f39a8ccaf98e36342d44f5cb815a7","sha1":"6724376e798b1a585a34ab090ab4401fa13cb862","sha256":"6fa7773654d110648f7cb7d86d965a67c00ddcf22d8c5c14d58339bac8bc972e","sha512":"da328a30e997cba559040ef0e649f74851fca3725df4bf5568677449f8cca780edd0db8e2474ea2d40ac1bda8eb86abdf77f0c774eb799ea88b0b7cc2b5f9e25","ssdeep":"","tlshash":"11d02213bf0022f5ac603284d6226a30c65ca20f22cd8a8202ef1e1024c70fbfc1cc3b","first_seen":"2026-04-22T18:24:40.211175Z","last_seen":"2026-04-22T18:24:40.211175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/Icoinfont/icon/customer-service.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/customer-service.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Nov 2025 13:24:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b5028-f71\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdCoQD5OXSpmK9o1698pGiFVgJwDLajJCiLdSqg3bODqqHbpOC9xx6U9oJ5RieagXwbJpc1GnN25VJSmPJbWaIyPHTa%2FW%2FtuEggXvfcTuRtmqc9kC4l7GC5xKR8cM4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059ea3c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"91a14d2d777d16708a29fa14fb8a6045","sha1":"6053d1e2f70f5e51f94ae307477442d1e8a7f3bc","sha256":"a0adef8cd9b4cd8664b55984519989b79e73d8809ed264b2ad15be40eeffcf67","sha512":"7eaab105b28879508b8eaee9bec2a80bf9cc10b94f328b5e528ca086ef9cea12cf72d1f01ffe6b2d4c6a76ee2459e9677e959b8fa46517a9dfedf6994536e89d","ssdeep":"","tlshash":"04816ca00d78831e6b720e65e7dbe014e52bc38582e6202bbd230dbbb4b7d9594924d2","first_seen":"2025-11-27T17:09:49.629541Z","last_seen":"2026-04-22T18:24:40.212078Z","times_seen":11,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/4558.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/4558.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Jun 2022 07:48:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"629719cc-48b0\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HiNPcPJTBsOOQXw9PRAhhf0nXwxJdPIOaWUcG%2BRvXLtoO6BjNkGJ7Q61wEmM%2FWZDrWqqHmBnOVcWphUddB%2F1I2YtNoTNy3SgrNnGaJ3W8NkPxYh%2Bagefv7Lg%2BpLSAlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb7c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 199, 16-bit/color RGBA, non-interlaced","md5":"c7e59bbd0ca773c704b906e229ca8383","sha1":"e191e030bfffacaa1b53ea83121a03955fd080ba","sha256":"22e62f07c3d37c4e0b8f717bda7ac0c60362fb80380c9f6def693dd4f9b4567c","sha512":"69dfd5a8bec0c1533adde28c322e96dcf9236b934a21668bc435f55f3284258881937ff92573a64188b4cd3ccd52f6d485eb4d864d4da0806753c71e385212db","ssdeep":"384:KR6xVqHk99Lm0m9/zkJMPoqgN09WuJFNFHaV2zbj69VmO:tvQk99K0m9/zQLqGeDJ9HHzbjnO","tlshash":"d682e0a4850add63e0b15bb72bad2753cd3d3a2020d4b2b53ebb09b468f090657a4ec4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T10:28:11.77335Z","times_seen":3363,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/js/layer/layer.js","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00Re60HMEPmUUiaq6zlcobyVBFva4wbgPRx6O%2BQ1Y9%2FA9DmEHwuNiEvbzR9CqUx0TX1t7E%2BSimKxwOAnlYelKDnpHW9n%2B3BGohNQ61OESjaCwtNm3ei4jK6Doovms9o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05dec8c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-04-30T15:45:58.663827Z","times_seen":13458,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.21.90.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 13:42:03 GMT","end":"Mon, 25 May 2026 13:42:02 GMT"},"fingerprint":{"sha1":"52:04:09:80:27:F3:84:72:42:69:EC:81:83:E9:E9:A6:CA:2F:E5:61","sha256":"E8:82:A0:7C:35:18:66:93:A5:95:2B:EC:03:4F:7B:0E:D0:F6:68:25:39:3D:35:F5:9A:A5:76:FA:A9:94:35:A5"}}},"request":{"raw":"GET /sjs/static.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2026 21:25:17 GMT\r\netag: W/\"69c3013d-38a0\"\r\nserver: cloudflare\r\nx-psserverid: bp13b, 2026-04-22T14:20:07-04:00\r\ncontent-encoding: br\r\nage: 247\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9f06aa10795d4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-04-30T15:03:46.927177Z","times_seen":622,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":14,"dns":2,"connect":1,"send":0,"wait":9,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/favicon.ico","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:16.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814; ps_rvm_OiyG=%7B%22pssid%22%3A%22Jg12507SPGATPa2A-1776882255884%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:16 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 03 Nov 2025 13:34:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6908af65-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2B1k2cl12qlSurvK1wZB9BJz8QnTTW9suCWITtlvgA5EtnMgKJ8suOYcsOShwROl7Uz5xSlwELYKuyF3plNtM4uyBZF595e2gP%2B%2FdeWg3IABhSj1k2RtBLn9GdgI4Z4%3D\"}]}\r\ncf-ray: 9f06aa14595ac272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d0be2f7f8448783b08c60ad569fb87c4","sha1":"df707c555a605710672661ba49489c5feb4fac88","sha256":"3be99507e78f836020e82a6736da194e1914038222bad38d9a3b071d15fede5c","sha512":"3f32814a45bc34f63cf9277a413930268397f047f4a6c8025853f1bc0c9300a830db16471ee94d0fc152d4a3265f3776ba2a99eda9e7c1f23ff8dbde127a2843","ssdeep":"48:7co9P3MQNNc5H2MFYAcvTPtODRY3EY3DHAqU04fi:7cop3fI5HhG1vZOD+3E0pU04fi","tlshash":"af9194e2a7012c0bcc2313fa3a36e6b2b3005e5d3112d31758f2fc2bb51b0862e90088","first_seen":"2025-11-27T17:09:49.55558Z","last_seen":"2026-04-22T18:24:40.213701Z","times_seen":12,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:29.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=trumpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:29 GMT\r\nx-request-id: 1560467257c3a9a3665e7cddcb7cc307\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 40e30dee007f98be8c1678822e8267f3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: r1SX2sxeHTpcRkt3zczU0YZ_gPvenG0z9kyb49g4YXjPAE_g02xf3Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55b553876bf882bddae557a6c7e172bd","sha1":"d51c36c1df71ddcc0d094522badb172f7dcf0898","sha256":"07b6be57ae1ab17ad9dbf1dab370b3b2140daf82a2eb8954cf1fc2cf0291ff22","sha512":"80797fc680e83de6d568720eeb402c71d6dce0621e76efcb02f2c424fd6e5af73210ec1e8e14442e131aaf07bbfff77c080128362b6a867399f982f0a30f76bb","ssdeep":"","tlshash":"3cd023c26f801140459113c4dc583d28567e5c8f504a4b0342fd5d5305cc471f11943b","first_seen":"2026-04-22T18:24:40.214289Z","last_seen":"2026-04-22T18:24:40.214289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"118.107.44.62","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 03 Apr 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:76:03:0C:93:D1:CD:E1:B0:EC:46:C0:4E:0B:04:86:E4:80:3B:93","sha256":"20:3D:7B:D4:00:D1:45:86:5F:27:E9:99:0E:00:64:64:58:38:47:BE:A5:CE:E8:D4:04:AF:81:88:25:F2:0A:01"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Apr 2026 18:24:14 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-30T19:38:33.524965Z","times_seen":19351,"resource_available":true,"data":null}},"time_used":1599,"timings":{"blocked":597,"dns":3,"connect":312,"send":0,"wait":323,"receive":0,"ssl":361},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=htusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 467ca83493e8f1eddb82b2837a0c06b0\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 4efa30f8f0994e6e9ebc02cd06f8d32e\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: QP4W2IRhkOyMdDywskrJcEtST8HuiFGRrbFj0ZENdWtAEsCjUYSdLg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7444ea431aeb1914613ca660da41d3c6","sha1":"621121be9632551bcfb22343a4c6009a0fea9e10","sha256":"d9596ddb1d58fbd7cfc7cc4c3fd899c298cb9ac7a97f6076f62e4f81bff2a8ac","sha512":"46200043b0f193277f9495a5bef97b910d304cb7a5d4b016d79de2b1c8a3cf03ce09b8116a106e1737e1b8fa7ba43c73c8966cbbba9ed3f025b5ffaf4c16adab","ssdeep":"","tlshash":"60b012000f9f053b2dc8444c32b6052106e884c031f5094111cc412098dfcf0db05180","first_seen":"2026-04-22T18:24:40.215725Z","last_seen":"2026-04-22T18:24:40.215725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:22.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=xrpusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 214\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:22 GMT\r\nx-request-id: f86bfcca12ed0fd1bd8813747e9d29b5\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 3b31d095e04a80edde94d4bad4453256\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: l9ri31eoLVOHOBJKWmkrKmNu_9y_e0jCFiPoosw8SUjs67_cIHfAFg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c01f11e52192f532e511b24da1f7ce52","sha1":"56638c693e6e8ee2326d1b94b0440e9a58d4aab3","sha256":"169e78c4dbf8db25f21b2e9311ca7cc52543f61b666ae52129ced9c368cc42d2","sha512":"f94eaaec9b62b90fceb6ee67e877daa7614602dc41c76fda50af77a14734b949a0e644496e07b8bcd02fa7d4f0f85500f4cba0439fff619ff78371dabd9c0e67","ssdeep":"","tlshash":"6ad022433b8803819e7321c9fe156da07e28604242d60a0306ea6c2429c61f2f51ac7b","first_seen":"2026-04-22T18:24:40.216574Z","last_seen":"2026-04-22T18:24:40.216574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:30.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=eosusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 95\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:30 GMT\r\nx-request-id: 20d26c2c7a375be0502be15c4a98ad0a\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 7a5a4b7dcb9f4e9a2472f99bef0271c1\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 8rDT6jbKWh-N_YE6VAGAbGXE5tvMT62Sl79iMC40QBtulSUpbv8J3A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d88495b1e2aa782e1ee26b7d36af896","sha1":"96452dfd9387c115164503192e03bf51a2b56e6d","sha256":"1ae622a8c0faf34f46b75fc9a135dbfd5a553de2f9f983140c2204496a0409a6","sha512":"d1161a49d1afa23969f6fe00c12e1e6765c3dba384c2c4f0a93aa769a40d7db0aa0f0c3c581f2634aacc704f2c598ff76fdd771c652131a8a35ae8099ce927df","ssdeep":"","tlshash":"66b012000bdb053f2d884048337605190af884c031f4064111cc423044dfcf0ba45181","first_seen":"2026-04-22T18:24:40.217376Z","last_seen":"2026-04-22T18:24:40.217376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/hot-2.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Jun 2022 14:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a35380-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLev8bjHI7yR2DpSdGCXc9hKItr%2FWeHHSrPeR0xLcKwExIlpaJehGPI9BHjjN7DTo%2B%2BB0QRg%2BL3kWtJc6FKtvc4NehB%2BDpwgLN1A3IeuSfB531JeB4PzuJ82DuNOxyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059ea0c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T10:28:11.824674Z","times_seen":5042,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home_banner_2.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_banner_2.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 13:52:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0509-4076b\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2BqFRCTnR3ay110ISEhc27iE9X1pcELA8dPVnHqfgrzuQGmXM7lsGAfzXjkIQjjArlbs4yEvvl%2FwBvNIBJpCXATJP%2FWFynML6nAt9Q8PhmROSdJP1U3FsWsBDMrlEZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059ea5c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"4edb32e15e62992c49a5d6081755960b","sha1":"d4d60aeae3ea3d47edd258dd75ab38bb2d7f8021","sha256":"384782e0c0551eabee3a5e455f445828b45e21d0b10c32601f7e597390097a1b","sha512":"aebe30f1ca659ac9141ffee439acd91dcba5a3265fe87d172943029affa5b271c1ce1fa2183c63a4bb743c8ad8ac7bb7e300f591b64ce80c8093b48a04899322","ssdeep":"6144:wtreYObd6SGtlgok2sCHNG/f2qGNWBVnJ6cud:2rjOwSGte34HN+TGEBVnJ6Z","tlshash":"be44022b4eb662e3e943caada41b0d13fe3f52406380b92fcb3579dc9607164dd4a64d","first_seen":"2025-11-27T17:09:49.562993Z","last_seen":"2026-04-22T18:24:40.218766Z","times_seen":9,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home-p-telegram.svg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home-p-telegram.svg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Nov 2025 15:31:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a1c3d-42d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Kr1SiNEutlsTl2JGZBdh%2BJLoGrsSq2LWsbECKFO4b8pZCvdJudQNTM4sniTNOeeVl0sVMZT28n30aDJmpFlpOjR1zX176fxmhrNf6KfcN2%2BZc9uoT8RzNJ0uVk8rN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05cebec272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57330633e16609d898b2e0a33ded01ee","sha1":"f14c53f1bd8856aeabfd681294e71606376adc29","sha256":"941c5903fa6905806d2b660971123513dc8df16dbc117835be3f4226c2fc6195","sha512":"2ef025a3b47b358429cc0585fe1e4ebd3b08bb6f9121be433ea54e10ba65531d1598efdad6332205434ce0e08ec485bf12ef161ddcbd81a2f661b3223bed21a9","ssdeep":"","tlshash":"ec11fca0a6efe6d0904ad3b4c565a5f779ba35ff62d1dd4a829029d0e61209d6008d80","first_seen":"2025-11-27T17:09:49.617063Z","last_seen":"2026-04-22T18:24:40.219319Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/home_top_bg.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_top_bg.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 09:51:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909ccb8-6a0c3\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvATiZI0rcD%2FD%2FP0bhKzVMKQS0KkJY3gwVmqBl9P%2BUUgeoe6DVwZeVcJrhzVWMJjpkLsF8lT8QK3EX3IUc1L2hhvV8OTo5yCRc7fRIz8Ym6KBkyzhxrH3XnhZPueuZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa059ea4c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 535 x 700, 8-bit/color RGBA, non-interlaced","md5":"b6d7e55919a0816b3d84bf64a46ed1df","sha1":"562b04c762b92c49245cbd3c7c3dcd5a89ace6f8","sha256":"eeebc077c321dc56641615e4d2d8f4d7fcc206e504796fe277dd5a083a97211f","sha512":"66d0551dc1a473a04108bbdf4473617eb6ab5b4b4c99aff15170f47e9f0c3bec98fa1fa390f768147e19d64b0181379ee00383cdd288346fa84170751b0d23fe","ssdeep":"6144:HYIU+8FT0nH61O2E6kRk2RTPyUBej2PxLXj7JqiaNv1Spw04OZMZ/dMW6Bml9yyV:4IAFTniDRTPyUU6HLpx4LcWf9BV","tlshash":"b19423d8eddbf51814cb9e7099557fe8036ae701cab6906ccbb47cc0282dcd6168dac6","first_seen":"2025-11-27T17:09:49.595537Z","last_seen":"2026-04-22T18:24:40.21991Z","times_seen":8,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/newRightIcon.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/newRightIcon.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:06:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0882-2d41\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5ay7nzEETZ1o%2Fheov6fG3CoMmtm029czUaNGySbHPRAbECHCQrqk6r%2Be%2BUfQ71ntXhs2LJx%2Bhb1SXl14C%2B0s866isyMzMrBUk4OnzkpN%2Bzw0eRrvHgkrv%2FI5vse%2BAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb8c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"96e4769861ce5565a50935bbe285fd5c","sha1":"e51fe566d9369debfd55a973d39cf2f29c6492fc","sha256":"a3e4896d5a7373c665571aa137b65e66221a37d3b3f9f80cf5c4a41e1f62c8fe","sha512":"408847c66d006ccfbd28b0ecef7bb0866a92d7c7be3bd75fb4879a69135b8cd4ce4a9614e4b3c72df2e7a55004b2b8b9818ebe039c244e69ea4efb8d5332ed67","ssdeep":"192:3mgLOMcBcy7nKRpwr4fg3fMeAVwH2i+9BoqkLQoyRCN0cjJoUIzKP:3RdcBZmfeAW23eqkLwRY0SOyP","tlshash":"a832c0e22f3c46fdfb6701191dcb989962bc9d0f2c81dba498c110bc9508accf46f022","first_seen":"2025-11-27T17:09:49.60618Z","last_seen":"2026-04-22T18:24:40.220425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ltcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 205\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 3a67a936e1fb64a090184fbf793a58ba\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: d41272fad2ca1371d1d1333918c8ddd9\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9cS7bU_1kXBowkQoppANoMHw0mAh0G0NbLtK4_TsytwzqbQukRWb7g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7603318060f143dc9c79dad318ddc4d9","sha1":"0486fd4f98d4305ba00e973b850ffda673c08595","sha256":"ed14329d1d2278944a19ec430541c154bbb8e5ca98de398f5cd14e1b588ce3ac","sha512":"c3a7aedfedb8ce5a64b831d5c04a820e67f55756abe67e58379f256c2aea54924fddcb36e2f68ef3f71842fd051850738c81bf20feba4fbf427cd0ea9ac749be","ssdeep":"","tlshash":"10d02213bf0422e4a89032c8d6222a30c61ca20f228d8a8202ef4e5020870ebfc1cc3b","first_seen":"2026-04-22T18:24:40.221098Z","last_seen":"2026-04-22T18:24:40.221098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Static/bootstrap5Slide/style.css","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Aug 2021 03:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 06:22:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 119\r\ncf-cache-status: HIT\r\netag: W/\"6119d72c-24d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsCDmcJB7w%2B%2FywFe4ChukznthnnwGSSFHMF8Zilc19krfXpRziJZvC3KPxS9DogsB90%2F%2Bfe%2FEtNPazTD8TSzEC76LDbZB8AQS%2FzHinmbipwCheWhSRulcF2QXpemAxg%3D\"}]}\r\ncf-ray: 9f06aa059e9ec272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-04-30T10:28:11.760689Z","times_seen":6095,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:15.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=flowusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 212\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:15 GMT\r\nx-request-id: 993f22becac2dba1b93eb4528dcc83ae\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 2f6b19633033ae6ec13ca84383caca02\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: E-5F2PVh5yquhQIl_iRiV2H7j3NpMN5at-h59Wp-XL1IseDKl2q4cw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8504df2572705b3bb2d99131ad77238b","sha1":"0a56cc8e925de4ea169333902ff6e111a3a44016","sha256":"b90a35a6ff310da90a1c2707038979aa1fec83b67480980ada28c5dd57243101","sha512":"cba91fba2f2fa7b7113b5c3d619684367de606eac0a5e474d65b58520c90405f673330413f0609543cbdfef1e0a2b9417a69a5398b70b4fbcfaf6388aab419ed","ssdeep":"","tlshash":"dfd02202bb282a441c8522cfed6479b09ac8188a10840d4b4bee8e1096ca8a9bd9c832","first_seen":"2026-04-22T18:24:40.222495Z","last_seen":"2026-04-22T18:24:40.222495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:21.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=ethusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 220\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:21 GMT\r\nx-request-id: c2eadd4cf63dc77562b1547ad00ec3ad\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: 7027ea5106988175e9da648266b38a4a\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sge2_SdRoykIFIz48JWbbqWDHZ3Yf9plGAvhzbwSHYZVyad4c6DKGw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8181681b5c046655c3dfc283006d4b10","sha1":"c7ccd50864081cf3bab14c7a4adb21a9af962f1d","sha256":"653651ec4962e1973c5c63a4defc17dc5f8c3b3348fbc6b6b9b697081539c749","sha512":"fd6a47849029d82e162fff648143d1aba42e9b5c58c5aea149f542876683d47a5f3d304cf2ccc1574dd20dae3d024093b27dd430ac8bf55544b0b37fa59fec5b","ssdeep":"","tlshash":"81d0a787bf7409406e6071c5a6257d21954912c9099a414ac6f948b225c0469b42f977","first_seen":"2026-04-22T18:24:40.223367Z","last_seen":"2026-04-22T18:24:40.223367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/Public/Home/static/imgs/3.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /Public/Home/static/imgs/3.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Nov 2025 14:16:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690a0ac0-bfa4\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGI82OxgWnxF8f%2BmFBTAIPS88Cn%2FAMNg%2BceCA538wAszUEqKknJ5VYhkccNI41kXLBFukcLFYUwfMn0musAwIOXQdyBOaUz7x4n8RYY%2F866ds%2BB5DpZl06S8%2FMFsJz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05bebbc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 700, 8-bit colormap, non-interlaced","md5":"605ab13aa91a4d3b95ef2385d94997bd","sha1":"0104babf6405cbb4351f1451dfb87617c4c0034b","sha256":"906004f4fae7119113a147d898e4c36c41c531114934276fd90f25aca902e72a","sha512":"d3a1da2b45f2e015c7f5627293e549d8f869929b8df28ab5184e013935d6e008d9bf0f56556245626a9dc66536f7125e5fd895533858aa37b4ea4133fa6c4723","ssdeep":"768:c2lAIvQgDS2AO2zPZbD349OOmCBbF7krncJ0xCXWHd+yUs9Q6+pMrMNJQhsh9asI:cCAQS2AO2zPZbjJOHp7kOMd+hQt+AMNo","tlshash":"5123f2816c5f32aacf1722e38d9fadca75c205a40b2a40ed4c9877cd5464f9cc6d98f5","first_seen":"2025-11-27T17:09:49.549738Z","last_seen":"2026-04-22T18:24:40.224257Z","times_seen":9,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.huobi.pro/market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"52.84.50.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:29.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /market/history/kline?period=1day\u0026size=1\u0026symbol=btcusdt HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kcexx316.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 223\r\nserver: openresty\r\ndate: Wed, 22 Apr 2026 18:24:29 GMT\r\nx-request-id: 8a947b57bb420a534a1a5d7667b6ab67\r\naccess-control-allow-origin: https://kcexx316.com\r\nvary: origin\r\naccess-control-allow-credentials: true\r\nrequest-id: e208090d03ae33bb3acebedbe6a9c316\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 39ZM3i6XvWVoyMWX1uHOIr3euzsr2XAXxt_FW7GiIQL0hbbKgGG0FA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4cff96ad196f5189fe33d50a88325039","sha1":"22ae49ceaece0892fe501d43d5ac87fa986e3ab8","sha256":"4ee839af9ed172de49727cbb60adcd686faa336c8d9913bc45283cdce669a0d0","sha512":"f08e166b30ef04e2d712e4d153239fdb9e97bfd0bf87c0574696b6d0147f94ee212168982eae90f623fbdd7aa5f9d96e582c296a1736a322aa428627daa9dcf8","ssdeep":"","tlshash":"20d023133b0010600872a5ccb7194eb0c32617d700d20dcc32ff2c0071d40b4f117423","first_seen":"2026-04-22T18:24:40.22485Z","last_seen":"2026-04-22T18:24:40.22485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/doge.png","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Nov 2021 07:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6180e304-838\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2Eq8s%2Fi4SRIPFEBO4nuZDJ0%2F6QIvpTw9w9dXFI7k3Z1OeJ9y8FQ8Tahxgf3dyBJO3O14RuDDTMMAP3sBAIzV4sNU1Fy3NbgkScEOJbjclchO%2FiBhP5C9nSjQEQAomk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05aeabc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-30T10:28:11.832317Z","times_seen":5337,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kcexx316.com/xm/trump.jpeg","fqdn":"kcexx316.com","domain":"kcexx316.com","tld":"com"},"ip":{"addr":"104.21.82.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kcexx316.com/","date":"2026-04-22T18:24:13.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kcexx316.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:55:01 GMT","end":"Tue, 30 Jun 2026 10:55:00 GMT"},"fingerprint":{"sha1":"3F:3C:F9:91:06:A1:89:91:D1:CF:78:49:D3:7A:07:79:10:CA:1C:67","sha256":"9B:C8:85:6C:40:0A:98:6E:BB:19:A9:45:3B:04:37:B6:BA:77:DB:FB:84:2D:73:52:4D:9C:31:7D:A2:3C:23:B5"}}},"request":{"raw":"GET /xm/trump.jpeg HTTP/1.1\r\nHost: kcexx316.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kcexx316.com/\r\nCookie: PHPSESSID=ttpm9gll0gvkq0l54uc4mqf814\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 18:24:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Aug 2025 11:21:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68948c3e-12e3\"\r\nexpires: Fri, 22 May 2026 18:22:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 119\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gusT31TyIoQClrn9WxIB2xpQT37dKQDWV0v9pBJ%2FQnrE6qraUdK7xfRJOewQboqQMYaNXpo1AxH8AGwI%2Bu%2FBTK2rIKAOaOOblMZ6iu21T8zb3XAoKI8F7noqHDaQpvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f06aa05beb6c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x256, components 3","md5":"bab381c17cd333000cbf4386b1542f5f","sha1":"ed40bf33caafe12092cfbfca1d0512e3ae8b2579","sha256":"af420cf9fc2594bb7bbc2e81d40c2d234ebba6a7921ae66f410fed7063b0e033","sha512":"c2766268d80d3ce92dea42096cbefb7c6453f88805d78da01ab2fed9e4511f6f47cddf1ad4b6d0da14fcf141fc99caa2d062d4b12d7e2305c043ef89ad479213","ssdeep":"96:IElbw+iHVumHFufDbDHmHPypd9lq4nItnEFgCUii0xT:9w7VuUFufDbDHgmbl9nItnEFTUiJ","tlshash":"d0a15b4babd9164ae4704f34a17247649fce3922b85a1917c0c617ba2b7f8c71f2c786","first_seen":"2025-03-31T17:08:27.225722Z","last_seen":"2026-04-27T19:31:37.653456Z","times_seen":94,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"kcexx316.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}