{"report_id":"457b1ca4-1949-4077-b34a-82d80481bdff","version":6,"status":"done","tags":[],"date":"2025-10-06T04:09:43Z","url":{"schema":"http","addr":"kxdao.net","fqdn":"kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"title":"科学刀 - 开放交流，共享精神，走进科学刀论坛 - Powered by Discuz!"},"submit":{"url":{"schema":"http","addr":"kxdao.net","fqdn":"kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-10T04:09:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"s.url.cn","ip":{"addr":"203.205.137.209","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2003-03-17","domain_rank":3398613,"first_seen":"2015-06-12T03:52:15Z","last_seen":"2025-08-17T07:52:41.706105Z","alert_count":0,"request_count":6,"received_data":500037,"sent_data":2748,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.layuicdn.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-06-08","domain_rank":0,"first_seen":"2020-01-14T09:48:27Z","last_seen":"2025-10-04T08:58:20.575806Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":1706,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.geetest.com","ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2012-03-05","domain_rank":806581,"first_seen":"2014-04-14T02:42:38Z","last_seen":"2025-10-01T04:27:58.113041Z","alert_count":0,"request_count":2,"received_data":2705,"sent_data":2486,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2025-10-05T23:38:42.511833Z","alert_count":0,"request_count":1,"received_data":175,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"kxdao.net","ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2018-03-13","domain_rank":828217,"first_seen":"2018-07-07T15:01:41Z","last_seen":"2023-10-21T03:04:40Z","alert_count":0,"request_count":1,"received_data":30323,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wx.y.gtimg.cn","ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2008-10-09","domain_rank":844581,"first_seen":"2023-07-05T14:24:26Z","last_seen":"2025-10-05T20:15:53.732907Z","alert_count":0,"request_count":4,"received_data":1174699,"sent_data":1853,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.kxdao.vip","ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2022-07-14","domain_rank":0,"first_seen":"2025-10-06T04:09:44.6691Z","last_seen":"2025-10-06T04:09:44.6691Z","alert_count":0,"request_count":5,"received_data":4601,"sent_data":2291,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.geetest.com","ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-03-05","domain_rank":196356,"first_seen":"2015-01-16T07:12:35Z","last_seen":"2025-09-29T04:50:18.997158Z","alert_count":0,"request_count":2,"received_data":346128,"sent_data":891,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"img02.sogoucdn.com","ip":{"addr":"43.132.66.196","port":443,"asn":139341,"as":"ACE","country":"France","country_code":"FR"},"domain_registered":"2013-07-11","domain_rank":1685723,"first_seen":"2014-02-15T22:14:35Z","last_seen":"2025-06-18T07:41:43.982615Z","alert_count":0,"request_count":1,"received_data":380,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.kxdao.net","ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2018-03-13","domain_rank":0,"first_seen":"2025-10-06T04:09:44.670454Z","last_seen":"2025-10-06T04:09:44.670454Z","alert_count":0,"request_count":25,"received_data":623438,"sent_data":17634,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Discuz! X:3.4","description":"Discuz! X is an internet forum software written in PHP and supports MySQL and PostgreSQL databases.","website":"https://www.discuz.net","common_platform_enumeration":"","icon":"Discuz X.png","categories":["Message boards"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0bbea63f8e43936a2da15fb0e24b24ac","sha1":"d711331a8c8b74a037e8758baf88df16baa69236","sha256":"2f41ab97ac43c4382461cc607ed39f109747088e7d47ffccc873372581545076","sha512":"7e397d4614391095fa43b1481b00f9d4169b5336ae4f592913a51145a0a84c7a5b6a37fc9b68b5ae49d80e55ed3e88921922357a64a3dd1a19bb0d2d284fb40a","ssdeep":"","tlshash":"af70000002808020a0800080c008000a2222000308000823b0228b0800220aa2a20000","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.858308Z","times_seen":1526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5f4ea336ed2a6f72617654d5e6986508","sha1":"7bee1abbf241c69851b3db9d55cdf61a5340118c","sha256":"130ddd31e00b4c5d4cc86c978a97535571fa74c22067a836e993f480b76d8c33","sha512":"dee14c99aacbd372c3a84b1068602331bb6616d78d495bc9f94047dba34fc6f57c9b51b2bfccdb76adbce8bffc46787cabc597eafb54d988f45f00d7c3bc69e7","ssdeep":"","tlshash":"c160000003000030f0000cccc00c000c33300c030c0000c030000333c0000c03f00303","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.827587Z","times_seen":1521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cec5ebfd9d55bf714a5ebf7abe597213","sha1":"872fea84f99a544cf9df5d9cb093248a1827d649","sha256":"c3a309a871125667a868fa3ffce605a8c4a7e587019831d587cdb915e35d982b","sha512":"d6aa69e8c61a0616595f6b3146383cb003f24ee3da55f2e926b2ccf6bd9c6eb359f956616f590fc98252e92deee21c9812db9e110ec32ced28018f8d5af242cb","ssdeep":"","tlshash":"0ff09e1a7e73a2001206e6357ef5706e8663a9fa1fd10560a519356c60c5a06d56c62b","size":497,"data":"","first_seen":"2025-10-06T04:10:05.735532Z","last_seen":"2025-10-06T04:10:05.735532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7819c0d19b10856f8e2a55bb92f684a9","sha1":"7bea260aaa363acbed63896b5f1c10ccdaea6c08","sha256":"7492accd96d886675fb5f161543965a8cd07f1539e0960b7d603e72cefc8ce37","sha512":"0cc08a4a3e5e2e2c1cc5d6c9012dfcc145b36799c501ece9dba54c776c882b9346da34a6db29ffafa18a63be2e3b04573ba1287e9f345dda3cc83ecf7758b5de","ssdeep":"","tlshash":"7970000c0a208020a000208e8028000aea2020832a0000800002820000800002e20200","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.820635Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5a1a654116dc6d8da68c6af728dea88","sha1":"6d7d311c95d8f64bba6c0003ba5559a692b658ba","sha256":"109a6a6ad46e7da364d175c2c16c9ca3c3111519cf97bf3ea9e6a61e22fa8d8d","sha512":"a8e2cddbb693d82f5d2faa5fd6730cb21032cf3e3449285a33024cb674a706ad70290fc7e9b2361b060dd464647d88fb7ed48b760b72223870c8cee443ff9691","ssdeep":"","tlshash":"3680003008b2208b883a082a02ca82aa8c8a282088202222cf880a0028b0ca0ccc002c","size":32,"data":"","first_seen":"2023-03-08T08:19:49Z","last_seen":"2025-12-26T10:51:46.771631Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0c25f0b7998428cafe8de4c0464d0a1","sha1":"d29f2664138e64b15d88b0978365ec1ace30842c","sha256":"b418a797210b0e664a1851caa6b452f34f86ba8dfcac5e255d93d4bc10c46ebd","sha512":"6752bb38476dd5b9a1d7add2de61612e60af873e0335355f206759bf9a293edaad48b3c622ecf4aeb382a8e4af393e8b4f8208228c38ccf6b9ad9175c32de532","ssdeep":"","tlshash":"dce0a763b56737b05a5e136aa3f10b6278e1111f0514d4d03b4ccdaf5f18f5528be3a5","size":347,"data":"","first_seen":"2025-10-06T04:10:05.740872Z","last_seen":"2026-03-08T21:57:16.336668Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"16c6f297db4cb09d6526ab08b57817a3","sha1":"5781c1843358b64158ed0a26256a14e7680feaeb","sha256":"0afb948e6ab392ce96492bec0761fbae76d8214583ac3dfd541b45cd35be1e85","sha512":"77bf9679449b24127894c465f900cfdff37620a5a5a0ef57e14435c5180e13705c70c0984035cea908ac71ba0b0c3dcdc6f5d94f4a233d675f48bc11a0185666","ssdeep":"","tlshash":"8921ce4a94d251946813baeccfaf9600f02245473006de703a0c8280bf1603da9fdfcf","size":1296,"data":"","first_seen":"2025-10-06T04:10:05.743206Z","last_seen":"2025-12-26T10:51:46.776405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c7ba982182028c229e82902485fecf","sha1":"819a5ac5ca686f198c049cafcbbb42a5ae15a6df","sha256":"0de5222c521fe1878f425f7805482086f148ee8fade7715d3befc07e72378301","sha512":"9827bcacf9d99be45defc706e63c1d80e079d71f457d2bf20f8c68d699e755bbd8281a33b13e4504f174e04699788e016402a0b192b7391202b6098a0825cd6e","ssdeep":"","tlshash":"a5800008b80083ac0220200ea0308328b202038e0030c8a80acc0a0000082882a02828","size":27,"data":"","first_seen":"2023-03-12T14:56:12Z","last_seen":"2026-03-20T14:03:42.16542Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"27d58fc853760c4c5959ea4c18102e05","sha1":"a0b1e5bac4f9ffab125e2a72ec32515ecfe980a7","sha256":"2689585176589381b3c09d32ba2ae5ac4e9420773ef1de98ba8606d037aface4","sha512":"56ce2e09b837040f5c37c8c6470990a0e93f7372611a397000e3ee7449c73d30485f3ec41bcdac1a175ac027d3f7ac47452f3cacd5fd6f7d32088a015010f2c7","ssdeep":"","tlshash":"fc600000c3300000f00300ccc00cc03c33300c030c000cc00000030000c003c3f300c0","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.850886Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/geetest3/js/gt3-init.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16714c3f957f541876828de4d31ba5d3","sha1":"c8763edece48a3cb4ac0a3fbe9cdf6083b045aa3","sha256":"e80c80c96999573c0cbc3940f1a8f927b8c3697eec3d72db6315c2ce0d0aab45","sha512":"867e14c5d311108de1d439c961d7f984f4b251c9dd18143c3d4fb609ff33aa5ed01d8ae4ed6aa59aea5f9c9a0e8b594458e5cea6c3f2e7635dddabfbad22e69f","ssdeep":"","tlshash":"1641fd26b2aa8185082bb5ddcb6f4244f42a90277005ce603c0d92886f1503c62bffcf","size":1920,"data":"","first_seen":"2025-10-06T04:10:05.675079Z","last_seen":"2026-03-08T21:57:16.213113Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/geetest3/js/gt.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87d1e58e54fb76b16b649cd025f63a3b","sha1":"57a53b2ffdd41ed3609964069bc6b93003648006","sha256":"add1840190041b98d2c3facdfc43ac873a2e7c759fe62034e5d984172acee5bb","sha512":"ff8d949e7df9053affde1194d5920c5b4128ba9cb81f899901c5b8d9d70dd23b64e2f38fac150905b589e6fd50beeb4126419e7cbc33bb698a683cc30d660ff0","ssdeep":"192:2eoSgR4CxE+jIvbk7ANr2oIGymkw7tTu7qBynHTABH9VMUxF6dK3wrlSLgwy7KCo:2eQ/reTQCynsBdVkKgrWQZo","tlshash":"9d02de1ea8f754938967b8798b6fa214f9398553041cce023e8cf3549f644385baafdc","size":8923,"data":"","first_seen":"2023-03-07T12:06:16Z","last_seen":"2026-03-08T21:57:16.299877Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44ed3d7212ef1474929386fd1ac7e848","sha1":"65825fcdc6cae131b6db8a65c62c135d791ddc9c","sha256":"3c6fe7f3e978d598d2e7bdacbc77a6803af076ca5b39573751ee4073dcd3d522","sha512":"5d8c2b9bde9d1a7b3dc0dcb8deb1d164d7da9f62b4792e56c56cd247710664b37af57c193bbf1556ebe560a7185669c360c654ba1a596a12495bff46933eedbd","ssdeep":"","tlshash":"af800028380080288230280ea0380328a082238f2020c080200c0800020a28c2a02038","size":26,"data":"","first_seen":"2023-03-07T22:36:53Z","last_seen":"2026-04-02T03:17:29.501389Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/jzsjiale_sms/static/js/jquery-1.10.2.min.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","size":93883,"data":"","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/jzsjiale_sms/static/js/jquery-1.10.2.min.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","size":93883,"data":"","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/gettype.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026callback=geetest_1759723772917","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"688fb82f0e1f5ec90a9d516df2d71f23","sha1":"98e7c023b9ef4bf7c1518a8f2df4b2083fa8fa10","sha256":"1b1c3609d83bbbcacf4ecfde19b807bd6bb71509cc8cd08d77eb1eea54faa571","sha512":"5121541d78c7d0f5bf758062ddf9ab48f2950a8e35f1ae874486ba62768cc894afa54fc1f8dcda6ac13e81fd66693aaa7057697f240850a8aa7bbe0b2f4b71bb","ssdeep":"","tlshash":"6ef0a717e903caa70ca6bc583e384236f1d8d0a20670829ec08d9c54d2adc0c7a98153","size":465,"data":"","first_seen":"2025-10-06T04:10:05.67117Z","last_seen":"2025-10-06T04:10:05.67117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa632d4e4286509fa66a4b8c5f31c7c9","sha1":"ac5dc261a02bcaf0aebd7eec66c29bf240c5481a","sha256":"a7f46285c5dfdbbf3eb2cac88e562aef4939467c1bf6d2d72718b47b2afce60c","sha512":"9ad64babb8d8147e982aa8633479daed8b155e9145924b4ab7138670a3f813950f70918199a47e1fec2eb0480692e1e063a2922bec4d2858b311f986e02d4558","ssdeep":"","tlshash":"9e70000003300f00fc0300c0f00c000c33fcc0030c0000c000000f0c0000c0c3fc00c0","size":20,"data":"","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-04-03T17:31:48.921122Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c1994b5f132a6d00db7043ca0fb5d34","sha1":"08ee2e698c7187ef69e45861abaa2e986a0e2656","sha256":"6baecf50ed14279e5b1e6f3e8472f26fb323e339b3f5e29349ccbf33a1b77c5b","sha512":"913ca4e12a3adf418096a5be985499ac7aabbbe4a69e1292bfa97d88b445c37611bf321657435357b56dc186b57797e168b0590a57b80ed0e4f41014ec4091f5","ssdeep":"","tlshash":"0970000002000008b0000880a8080008aa3020030ac000822020220080e00202a08220","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.909465Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d23e36e1d5e020c7c17c6fb59cfb24b0","sha1":"49032b9bc25166cdaec5fdf13d0400cdce27ea93","sha256":"0b4008fb3d12c5cbf5985b3aa73bb2a6c5bc608febebafac52cdc5998a648e6c","sha512":"4285d743ffe803454202916de8bee14caae82a1815a4af1aab80971bb05f9559856d5147cc01edbb27ddf4cba7549b72a966e40c5a09d649fbc15047ebc94450","ssdeep":"","tlshash":"8a60000c03003c00f000ccccc00c000c333000330c00003000000f00f30030c3f00000","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.824137Z","times_seen":1407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4e8aeb552ea81bb0c6c223eaacf15af","sha1":"ec23a147ca0775c11cf6cb46b79d3d6798087194","sha256":"59e58162674f31c42d8c271e0f18727e825419dc2c29bcda1aa6a3ed8130526c","sha512":"827ae7047260427c0fbb96faa8f6b24ad809549471d427477191f33df5eda5e47cceef2ed181510133e3be73785111f8cd8f72924f2b4c858dd39704d9e2d665","ssdeep":"","tlshash":"01d0a79ddbf30070603b741c9d7f40012e67b5636408fe207b9cc1814f861184077925","size":274,"data":"","first_seen":"2025-10-06T04:10:05.752483Z","last_seen":"2025-12-26T10:51:46.77889Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/get.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026challenge=96c1d21fdad9c11fd2826a6899e11df4\u0026lang=zh-cn\u0026pt=0\u0026client_type=web\u0026w=KPzCx19nP3eqLxIP7saJjXf(PP4HZWw7E9Z9tVOgl)89YCoNOaW)lhsW5VGel1CIQtE4I7cLs)M37Bry)07dzdyW5PC2HWUkfzlKehtfq8fr73wSHt6y0YsdadtKFUzYGm4vAbHdoy)eJ1U6sXdiyKoG835NojogB4e7ro2geGYoBrJS2Alb5ZevigMJ(SpSmQ14kVbM8BRtgjrwesHq639LzjrLwg5AIE)zxRn2n88zE(F6WzR(eAYggs4vlWYowogy435qZ7bbsWuV7P9ciQSMKiFd39TJoytI0ChgGo1gmB9s4dB(9dsKcWtXlSwFyxlUmfMb6hgfcBTOGpMt8dxhTagksTGfCstGquNvNed8i5LqoEMjBdULNPmuatGqzoXVc0tW5Z6yqsLw5jFpNwbPEwI4rkdgF1ksSbs43)A378ZEv7wRgBBAN(WILIfLTXPgIHj(Gt)ZXsN0XtSPA7R5J6UJlv59um7ogLGPaWpYvRGuS9rvl3Iv(qSztzlbWEnojLow5sqyc76ikcFD84MARRkcFY2pL0xhI(K(Lys1BDtdVEhiwDRYD9)xP4A)zC6)GCfHsnhAZ1sot7hhNeIdvIWr8wd4oUmrrmPmgzwbOpPpLgv2SbFk2Q4AQ5bY(SPTDjR17eXAIopz46YEgKqlsPaGfe24sXpVjf6BSarhRLrHqfPCukbpQbT4YWUQ4ZmbvqLcKY0SYlsG0JSCqGKPScU(PZzEhwjTQ2zFwK8t(3EYrNaNCsoQSyrOKVlFxXhhi7Y4p6TiJnWThM0SA1mXe(aS9DyO4ODJTHKrwHpjoD0qSBKvv3qPV7OfphjsxvmVbWfhilOPe6vSQS8vDVpL3OcGnf7INaOfX(dnFoF3s0L3KKjZeo3VoicefgKzEr0Y76cs0gKCoJbydULDvqhbgtFpp4)yZZW7UFBBjofETTnZJGylfRLkyjsi31TkMcGfmJyWGi0oVqn0kPxdgvuRhmzfUpfFOXn6RnlTeACijvw0FAOWzQdGN22jrfpQENqejf8rFA1AwRTuwr0tG9ZZiMjREOJHGaHiCX4kaFiLiw(sAPnEnemkbds5qo8RCOHO3Sxt4rU80tvAN9YikRr47J1OsNfRnyiJgvs2b3SZ36To4XfD4WoRJFbfAmAlQgzBb3dWE0nLuE9ShhkG8Ckj4I24cvMJd51LCfgXV70.54be21865355220585800ca00e83d242cd86819d8f85556f2bcd68779914e98249efab23a7603330233c0e0b9ff095fff387a429d242444992a8baa4fd740835c700ee1e6ed670675edad8af135fdbbc797fce90253679e66deec9021d3e622e4dc110a13c76acb8fa12b9ac4e5430ba240aed233a64bf03a6483efdbb00aeee\u0026callback=geetest_1759723763722","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"93918e2999ab9df18b286ebea7a6741b","sha1":"28a7390193d40c4ab4dc4fcedf293e69596a386b","sha256":"777f8f6f3847c572e7687f449c6d5a95266145ddb62501aed4fc5f1efca9ebfe","sha512":"e072169c375911837d556ea19a08152b4f6c9aad81ff4acbe453b6b1b15754f182d6993d0fbd33e9dac852970dc68f17f147dc355d535a82f645846a1ddfd60b","ssdeep":"","tlshash":"b421f46ff55a1e3345fdd3cc7d2c2d33a7658062c2e0c03dc1a84e54329c95964a8ad4","size":1270,"data":"","first_seen":"2025-10-06T04:10:05.667077Z","last_seen":"2025-10-06T04:10:05.667077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"901bf525bbedb8df1fada3e35e14b0bd","sha1":"7fa6b05c770a1d1ab71b42c0b0ccb273234896b3","sha256":"81590784ac8c4d2d56e3bd06e668ad49a0f1b783c57a47a799bb30efb6f8855c","sha512":"18fe0fd499d7db524186164c768cf07f558f8793aeae7f022631e684285a1b158fe46485624175eddd686ec42ba01f6c7301994b8c0b365aea9772244d71894e","ssdeep":"","tlshash":"2e70002b82002200b0022880e20c082822a088230800000000200a000200a002a80080","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.851766Z","times_seen":1530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/logging.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4544d50d2dde9cccea8012a9a5d0cfb7","sha1":"db2e168b35fb57db8002e3223effcc50a705ed30","sha256":"843ca4ccc43f7c97d0f24897b2890a713355e0e5e89f6a96001e663e10282b45","sha512":"6b99c931cee98a38e2d2fd44091b46266027ff407acab2f4255b66d3f66fca96cc05c45f9160864f0c83fda36224b44ad2ff5f678a7e29cf8d400453afc30c62","ssdeep":"","tlshash":"39e0ab8a336b052a0a9231e000c3cb567b38ae108012a80ca4063e812f39d52e8b7730","size":390,"data":"","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-03-31T06:34:26.073884Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/study_textpane/images/jquery-1.8.3.min.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93637,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-04-03T18:23:45.727284Z","times_seen":20498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c7ba982182028c229e82902485fecf","sha1":"819a5ac5ca686f198c049cafcbbb42a5ae15a6df","sha256":"0de5222c521fe1878f425f7805482086f148ee8fade7715d3befc07e72378301","sha512":"9827bcacf9d99be45defc706e63c1d80e079d71f457d2bf20f8c68d699e755bbd8281a33b13e4504f174e04699788e016402a0b192b7391202b6098a0825cd6e","ssdeep":"","tlshash":"a5800008b80083ac0220200ea0308328b202038e0030c8a80acc0a0000082882a02828","size":27,"data":"","first_seen":"2023-03-12T14:56:12Z","last_seen":"2026-03-20T14:03:42.16542Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d8b2bccdd8396b9f97e22f2e3fc13a49","sha1":"dcf73be0165354ac59dbfd5c7c3f9739fed624d4","sha256":"c3d8dd48ba3c697b4480c600905bd008a73d756f4ca7f32165ee1ef674ef7b80","sha512":"a18222e090d652aeaae2ac96c001a3b8744086cf720121996f0e527c772cb5047dc75800c0bb0b00b2119bfe2714e04b8d8ed2790bbacc4fead0b29d8091a06f","ssdeep":"","tlshash":"9670002083200000e000228080280088a22000230800a82032008a00c0000a82a28000","size":18,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.818403Z","times_seen":1526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9b8e84ec31eced42c47a27947dfbabc8","sha1":"0589ff5bc7fc05b709c6d8a122990199ae38c8a3","sha256":"be18c62887de403f8303d82a815b8696b0acfb3cdc579e0714325cb03ba82f4d","sha512":"ff34b5f18234119afb382f2180bfedd35ca76fb32e5346d873e0d8394fde8d874269ecc9302149400a21a6fc8aaf750c97974c2dde1e3026a8a3f283d0376324","ssdeep":"","tlshash":"b370000283008000a000a888e0ac0008aa2202030a00002000000a0000008002aa8080","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.891053Z","times_seen":1527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b70c7d506e86f6fd3e72ff61d41c07d","sha1":"752b239d7d46bc3e29f45c1f7f2e70527ca6aa07","sha256":"f3dfa23eb43210cf0b6fbd2eb34ebd1ee01b9f320441cc90c0e6c32c3cef18aa","sha512":"d0d615be17afdf6946aa89db17196f7e0fee94aa12993230915abce89a53c9249b6c7b793563678e82a6851d2513a958173039de2490634aca1c952900616ea5","ssdeep":"","tlshash":"fb0199e78480d9082669a46dfcb9b37c90dba10a9f40dc9dfe8f08450f2e5a84c3a155","size":694,"data":"","first_seen":"2025-10-06T04:10:05.757577Z","last_seen":"2025-12-26T10:51:46.780697Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/template/ooojps_jian1203/images/fixed.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efa9a771adf882486764ae5556cba221","sha1":"f5ac01a870c074afb1350fa2d8fec86f03cacd1d","sha256":"48d4fe1316170627b9efd0355b5082c2a93d6917a3130e8143bf594459e37e59","sha512":"9df68d04cedf5b07bffe396df4630c715d2d5a406116faf88960c05e5dc2bdf10b1797c7085454f70ac767b7ee228d690149076902d9487abe23c9f0c8a02b77","ssdeep":"","tlshash":"bc316c7937d9a47086fbb13e723a9796fe35d2176102a0957c0ca4a56f30d271102ff8","size":1571,"data":"","first_seen":"2025-10-06T04:10:05.702222Z","last_seen":"2025-12-26T10:51:46.742327Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d10b0fb2b2ed9709182d1aa4175f2e72","sha1":"bd0b80baa53f9f60339d157a42f7c252d1901f9a","sha256":"6e53b91f375b713f2b9b64a220f4a1d11a5495149be00084443cad7a4dc71107","sha512":"e4b97a7ea73427bc5e10488fdf46a11d271075697efc8bb388c91d6f828907675341effebe490151134c2ba3d0dfb2e59fd695cd2cb515cf61ad52fde677dbd0","ssdeep":"","tlshash":"fc60000cf0f0300003f0030fc00fc0000030000003c00300c0cc000c000000c00c300c","size":15,"data":"","first_seen":"2023-03-07T12:08:39Z","last_seen":"2026-04-01T11:10:55.091995Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/common.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d4bfc33fa3badc42d9200eb8f47bcb2","sha1":"3f89d367d4ef99f06c406a8eea20339ef96cef8f","sha256":"d049c37e84bb09c3c4620deaa1b0700aeed96b3726aee6eaad48000771a35251","sha512":"14078f4dac91869f55256a506c9039fb841172573af9f22ab49b94ced2d24e7b8176d3e4fd556166bc9cd676a3229d81a9768efa4b9faea048b617484a6a38bc","ssdeep":"1536:I3ob/AE4iI1VMvF3aXATIIAR8cWmdrVBJXoIgqetLfIACxOQ:+VMdaXCI9RfVB/eu","tlshash":"0e5338243615253685db31739a7fd608383158369303e970f86ce4d81da4da6e8fbefa","size":63542,"data":"","first_seen":"2023-06-19T11:17:56Z","last_seen":"2026-04-03T17:31:48.766252Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/study_textpane/images/masonry-docs.min.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb3e5900f64285fc26b22e3f69236e1e","sha1":"571a894b5efed15e7c39e38a04d24e2eb15f1cbb","sha256":"e1f61fcc4dfb4f0a900bee824f089a1a37be2d9f1d36c66c2e76716a5e986022","sha512":"b1628526b58cfbadcc7a9276ac0c27d9d498d3acef9a6623d858e2baed14918b67ce8d8bc3ddc1651c9d46b796f4eb52d7ba9da80acc8309653cb9fbff06d373","ssdeep":"768:IxVS/9WC3Ilgn/TBnn0FP+TLCWEZHxx/4:zlWCoOBnn0F2+Hxx/4","tlshash":"53f2c849b75174354387a1a692af010fb337207caa1680ecb7a5dcea1cb9c4e2137f79","size":35240,"data":"","first_seen":"2023-03-13T12:27:06Z","last_seen":"2026-03-30T00:41:21.428569Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"86f29d11652cd06d40cbadec0206c523","sha1":"2e7609513b096b1d81119aaeb7e871c03c3c3a34","sha256":"f18883030903d6a5c2011a40563013a02460a6df7758e56a57e4bc6e77f68c82","sha512":"bb119a390375d5102976c56ff966150462966b2a5723ec063bccb8e6abf564041bc4b018ab9595aa9d5d9209d00522d44df97bec5a18367970f53cf286d00c59","ssdeep":"","tlshash":"e9d0972f2cb66c7423760c3e11bada8cf5a3584c10bdd00090ede8598960fc1182ebce","size":254,"data":"","first_seen":"2025-10-06T04:10:05.760728Z","last_seen":"2025-12-26T10:51:46.798193Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2871c7c5088039983e5b6dfad6f613ae","sha1":"f6c25ac11b1aaad7838c60f5c456e7c2ebd56e1a","sha256":"e60c7913e2bba4ed614ff80191dd3e384d4897ac0fc83faecf3776abf84adcb1","sha512":"bf1a439ecefad80dbeca89b922aafbccb88315e2da0a4b56117e78328cc1655724abebb259c5f1f2faf7b42b5f0495ec1c39a214f6403677138c65fb0e819182","ssdeep":"","tlshash":"06a01122300020a08238a0f88a0a8b2e8000a80200a02a00880f88e22ea80ba2b0e808","size":76,"data":"","first_seen":"2023-03-07T12:08:39Z","last_seen":"2026-04-03T17:29:04.789621Z","times_seen":833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/static/js/fullpage.9.2.0-guwyxh.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f95bdf4200f087eef816dedb2dbd7f0","sha1":"aaab80cdd50dc5f36050b04b5f7cc0079d667837","sha256":"923a147d20ec0a941a44ab815991034fee5af16d5bb59fa23dcc86eb1a8734e1","sha512":"c51e522bca043becff365127a0477d9cacf524c5d491729712017639b4a3527408c17b95829da72e8b2cce39fd3b932ecd57bbc9781e47ba6e51d6a988709d52","ssdeep":"3072:9Zoz8Co64eZ7wKHYS+ou4hyZtCegH/7tdVvVwhQSuL6BL0lBjMANErWx:9heNPHxMYegfpdpTplBjMyErWx","tlshash":"0554b8e233913eda9577a62f4c3f3906a2b429600547da80363ff3499f78786c39561b","size":304290,"data":"","first_seen":"2025-07-30T16:54:45.340584Z","last_seen":"2026-03-27T14:32:11.051928Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b704049bb449560a7e16155b3d01d53","sha1":"c63ce43685021734249cbe2c8ed829fb3c521f10","sha256":"e225f77ed9a896d53048ea75bfeab57f08c128e083e1f849763de437d18e04bd","sha512":"453317e909047a6f89e1cbc056a7d7222390ae0069637d18e7295a46d25306aea033f16934dd975b94eb8a1fd91ca1f00d14769f7407d9cde6c3274b3d79ffbc","ssdeep":"","tlshash":"e970000002802000b8200088b008002832aa02030a88802080a0030000083803ac8200","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.905981Z","times_seen":1529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/forum.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb71d09ffa19eb2b907aa9671442519b","sha1":"bd33d131fa0ca8b58e5a04fc273e88e19a2886d2","sha256":"431eefbafc9f92eaeededf64fe9ff5f9fcc7d0b2cc4b3bdaa806cf57e215c818","sha512":"0855be591c9c18d57d5600f9aac1387754a2232d0be1c230567bc308212a0bf78ed13dd53f49299a6a783cb7ad3b753ac19a893efb0eb353ee542e4406cd6d68","ssdeep":"384:YBp6Doh+oQKsB2rLbdqY3lAxsrRoUlBIxIHXc033J9y65P/Ljdw4pqb/73no3M/4:M6DQ+yPbdqY3lAxsGyGS3cany8PDjdCw","tlshash":"c79209853b6c2205d6e7316259af4100ba37743483013479f869fce4ada8d69b53febe","size":19869,"data":"","first_seen":"2023-03-07T14:36:07Z","last_seen":"2026-04-03T17:31:48.816644Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"wx.y.gtimg.cn/music/photo_new/T059M000001JnBdQ2Wvmyi.gif","fqdn":"wx.y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.y.gtimg.cn","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:31:F5:13:FA:54:E9:39:5E:08:17:05:71:91:69:28:3D:EB:3E:B3","sha256":"1F:E1:CC:9D:DD:82:71:8B:2A:3E:ED:F7:16:87:FC:28:67:F6:2E:36:E9:F5:33:7E:20:97:68:33:DB:49:58:9F"}}},"request":{"raw":"GET /music/photo_new/T059M000001JnBdQ2Wvmyi.gif HTTP/1.1\r\nHost: wx.y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Aug 2025 23:31:04 GMT\r\nServer: nws_static_mid\r\nDate: Fri, 12 Sep 2025 02:30:19 GMT\r\nExpires: Sun, 12 Oct 2025 02:30:19 GMT\r\nContent-Type: image/webp\r\nX-Verify-Code: e31f4ed2626d218eeee0178587966fb1\r\nX-Daa-Tunnel: hop_count=1\r\nCache-Control: max-age=2592000\r\nAge: 2079548\r\nContent-Length: 28656\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5031396217417863286\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept\r\nX-Webp-Req: accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd0f2eba9184e17d2368875043f869cf","sha1":"f8f3ce7d16db0e20027ce82be7ec2ff4853c18ea","sha256":"8bafc1de739a67c6052438d9fd788f0bbb592e4d173ce727ffd3af23b2d1e796","sha512":"9c3e1531210c63015f13f7cdeb2505639bec4984f10963374649fde35df5553cba1c6202dd587c84dafd1091c447cf96f30ce6b8a0da75561890bdae7f40204a","ssdeep":"768:0uG5zQs7XrOnMFRgo1Tqb9G5/QolwfQeY:0uG5zQs2nst/QoaQeY","tlshash":"4cd2f1545333c4d9213d603575fa1eeef73a31898427e05792aff526584c0e3c93a72a","first_seen":"2025-10-06T04:10:05.64719Z","last_seen":"2025-10-06T04:10:05.64719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6485,"timings":{"blocked":-1,"dns":5096,"connect":254,"send":0,"wait":257,"receive":1,"ssl":877},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/attachment/common/a1/common_42_icon.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/attachment/common/a1/common_42_icon.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2020 15:28:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e88a7b9-f4a\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"9c9987d34f274f7a5982ed7230f44493","sha1":"9d131e4410ecdc5d6c2b0c3ca2c83ea8b1818c61","sha256":"16190191879e0996091daa2a0c517533d9a3a76efcd034dcc2cdd771c8f996ab","sha512":"648a3485546c71fdd8172c46e86283c5ef553afed00e8d1e0d4441b66e95f31cbe202bba3cc7164c3507bb5d9bf188f9951ad772647b0577ae02e1f888900fc2","ssdeep":"","tlshash":"a2814cdaf4807f1a914d966e4dd51357073b835899c2e4dbbdadc55ba8300f08c4e4d3","first_seen":"2025-10-06T04:10:05.651288Z","last_seen":"2025-12-26T10:51:46.749893Z","times_seen":6,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/attachment/common/cf/225553ttlbbebklcgkzgem.png?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/attachment/common/cf/225553ttlbbebklcgkzgem.png?U3b HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Mar 2020 14:55:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e820879-7689\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30345,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 586 x 80, 8-bit/color RGB, non-interlaced","md5":"f0528b93a935ac1f9e088d2ffab18d97","sha1":"b60c32f529ce125917a9c67aa821b9ea1780da85","sha256":"1880849bd78383ac4adecfecd183b3ea89594979c550b20fd6f9e961c71e95b2","sha512":"15ae4d7ea39356b76063177ba9facea837a606ead40d32272f9855f4c137c1d3ac22e4a7e4f740aa5f82941ce7b80cb9c6e5c46ccce553f1de78c357408a1fbb","ssdeep":"768:W4pz72ciYtjkXqdfiv1yEUyTyirWfoZu2SOMUDxQFNMf:rtwadEsxyeiri8SOdDxo4","tlshash":"1ed2f1b64a42377bd9f06c613fb364b94f7507a502c0517ea9c5c4638a48fe4d186a4f","first_seen":"2025-10-06T04:10:05.654157Z","last_seen":"2025-12-26T10:51:46.739725Z","times_seen":6,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.vip/static/image/common/px.png","fqdn":"www.kxdao.vip","domain":"kxdao.vip","tld":"vip"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 01:15:48 GMT","end":"Fri, 14 Nov 2025 01:15:47 GMT"},"fingerprint":{"sha1":"08:2E:6A:30:96:BC:78:D4:0F:72:B4:B3:C7:D5:B9:30:CF:E1:3B:50","sha256":"CE:43:D3:67:86:8E:8C:A1:E7:1A:73:BA:63:29:84:DC:15:26:58:89:91:98:DD:08:DD:FF:B4:67:EE:DA:EE:E9"}}},"request":{"raw":"GET /static/image/common/px.png HTTP/1.1\r\nHost: www.kxdao.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 210\r\nlast-modified: Mon, 15 May 2023 03:43:20 GMT\r\netag: \"6461aa58-d2\"\r\nexpires: Wed, 05 Nov 2025 04:09:23 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=c96078194fb3dc4a8fcd848df1b0caac; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=f86963c324601f98fa29bd7c3a07c196; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 1, 1-bit colormap, non-interlaced","md5":"1120da8344d0a52265635f08820867f4","sha1":"964f9165b23b866cce7dc930566160615b05bbe5","sha256":"e11970020edea5be0994cf33d189346011dc92c901e946303ba6422b028bc231","sha512":"bd32df3ef75cc8df46064c0946b4eaeddaaf06a040d1a69afc3dae83de3642103675f8a9b80e326e7e711880a3f93e96e8bf3f2ec0b8ee83612e37b513e67fff","ssdeep":"","tlshash":"11d022c1a7a88c9ba67aa793c1c20091f51b138281055d1a4c88c5201aa98d8e7a4637","first_seen":"2023-05-04T01:00:46Z","last_seen":"2026-04-02T08:22:15.528092Z","times_seen":468,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":0,"dns":267,"connect":172,"send":0,"wait":276,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.vip/static/image/common/adiden.png","fqdn":"www.kxdao.vip","domain":"kxdao.vip","tld":"vip"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 01:15:48 GMT","end":"Fri, 14 Nov 2025 01:15:47 GMT"},"fingerprint":{"sha1":"08:2E:6A:30:96:BC:78:D4:0F:72:B4:B3:C7:D5:B9:30:CF:E1:3B:50","sha256":"CE:43:D3:67:86:8E:8C:A1:E7:1A:73:BA:63:29:84:DC:15:26:58:89:91:98:DD:08:DD:FF:B4:67:EE:DA:EE:E9"}}},"request":{"raw":"GET /static/image/common/adiden.png HTTP/1.1\r\nHost: www.kxdao.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 164\r\nlast-modified: Thu, 05 Aug 2021 14:55:17 GMT\r\netag: \"610bfbd5-a4\"\r\nexpires: Wed, 05 Nov 2025 04:09:23 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=c96078194fb3dc4a8fcd848df1b0caac; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=f342ee6b737861d23845ae4dbeec4e44; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 14, 1-bit colormap, non-interlaced","md5":"33ed1424748b05991e59fe63ac6aaf6b","sha1":"4e152136e2d9f40555f4920bd13e8f385ce0e9af","sha256":"42a839e3377fd05bae77d8f5fa1a7a04c4884f4087a49ddf00e81c96b3160d9d","sha512":"437142cdad77bc1f18196334509bb211117c07c91e0d5c746158108498e30fb39f2aba2ae3192cce6e9ac4c04e8f2e2b45041850024d4bc4349e679aa88ca300","ssdeep":"","tlshash":"e5c08ce2e2489ca9c1af99b2918fc50ddb728a03623748836c0e99392679250a3c4392","first_seen":"2023-05-22T12:07:21Z","last_seen":"2026-02-07T12:55:00.033421Z","times_seen":28,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":0,"dns":0,"connect":169,"send":0,"wait":249,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000001E3ocX0yTUmW.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.209","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000001E3ocX0yTUmW.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 11:25:36 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sat, 27 Sep 2025 10:30:56 GMT\r\nexpires: Tue, 30 Sep 2025 10:30:56 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 48c6576054e405230de0f5d0ee5e8119\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 228476\r\ncontent-length: 112650\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4313116178980892617\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"674cfc40ce4a2ce10548e542ce6e72af","sha1":"6a8ebf952988d1e7d9ef7ea3c1e49757e984da6c","sha256":"7e027822fb25f976a32e4e1c1de0a5454bde30ffa3aa8cc270f5d99e66266bb1","sha512":"de476e2f064146320fff09c1fb8b24491d70c85d3b58cf7c3fc71158f12cb924e219d157762ddc98cd633c06293fad631f57d1fdbb839e1e5a308d36bad78f10","ssdeep":"1536:V23Ex14T0LvIOTEJpnR8OrbeGiR08bxQvpeEl+BpuTfkBYI6JvY/LB:83EpbIyEJpnR84ed1QROuYy4B","tlshash":"c8b31231030a6e90dc464a71326377f44b64e1e5e60b1c7b5e55bc3d2bbaf4a88b2b35","first_seen":"2025-10-06T04:10:05.659095Z","last_seen":"2025-12-24T19:36:01.841283Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3356,"timings":{"blocked":-1,"dns":1364,"connect":271,"send":0,"wait":1088,"receive":206,"ssl":427},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/css/layui.css","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.999Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/css/layui.css HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx.y.gtimg.cn/music/photo_new/T059M000001EWUsk1A6C8k.gif","fqdn":"wx.y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.y.gtimg.cn","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:31:F5:13:FA:54:E9:39:5E:08:17:05:71:91:69:28:3D:EB:3E:B3","sha256":"1F:E1:CC:9D:DD:82:71:8B:2A:3E:ED:F7:16:87:FC:28:67:F6:2E:36:E9:F5:33:7E:20:97:68:33:DB:49:58:9F"}}},"request":{"raw":"GET /music/photo_new/T059M000001EWUsk1A6C8k.gif HTTP/1.1\r\nHost: wx.y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 23 Aug 2025 11:10:58 GMT\r\nServer: nws_static_mid\r\nDate: Fri, 12 Sep 2025 02:30:17 GMT\r\nExpires: Sun, 12 Oct 2025 02:30:17 GMT\r\nContent-Type: image/webp\r\nX-Verify-Code: 862c1f551ce8c1acd3b9061f67a12113\r\nX-Daa-Tunnel: hop_count=1\r\nCache-Control: max-age=2592000\r\nAge: 2079550\r\nContent-Length: 160032\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1366404318350625357\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept\r\nX-Webp-Req: accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":160032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6272ed140e283c69efee58ae17652cca","sha1":"96b5ad37d2dd43ac37e5177078fec1478a219dda","sha256":"128754973eef2b05bfe4cd9c7d7a0c0cd57043260c84c8b133657b7f7e0f50c7","sha512":"3ef916cbba2d8df7d32eac38bc9614489bc04f298c646207ee46af004e89665dbcaeb53d0cac66e4029c1f6c149e136de66791da94c59f7f98e475ac25048867","ssdeep":"3072:DXDeC6dlo18t54+wJ/5+0agzMT/G6tc+eUEDLt3/oEk5YdWtz:Pejo18t5Xw+ezsxc+Kvt3wEoYq","tlshash":"5ef31317bbb5583ec98c2c77d0a8f069d1e7c815c2824936ad3aa896517f4cf0f9db81","first_seen":"2025-10-06T04:10:05.662074Z","last_seen":"2025-12-26T10:51:46.754105Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12930,"timings":{"blocked":5993,"dns":5097,"connect":281,"send":0,"wait":291,"receive":630,"ssl":638},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/jzsjiale_sms/static/images/login.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /source/plugin/jzsjiale_sms/static/images/login.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 17 Aug 2018 15:11:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5b76e59d-d75\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 24, 8-bit/color RGBA, non-interlaced","md5":"6db574a495c3020d3b0136adaf9d1fc3","sha1":"638be537b18d390cd0d0ab5a57d4064e8be0a6e3","sha256":"3a40f785ac839556c3e8930fcf7d074b8ec777cfdec884284e9f5f644e984e14","sha512":"4437c9c589bf4e3a1ea4d6a35823bbdeda8d1e7dbdc0e937f083ae40591bbbdc8b7a210bcc1f9d1ac527419abdeb0b6be07894e6b6c2ec507188171a62b864ef","ssdeep":"","tlshash":"78615d6f135a0da7ea3de85b44217d645472f2f59f2ac572941b9524f9003d5c41e28c","first_seen":"2025-10-06T04:10:05.664073Z","last_seen":"2025-10-21T07:31:27.747984Z","times_seen":3,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.vip/template/ooojps_jian1203/images/chart.png","fqdn":"www.kxdao.vip","domain":"kxdao.vip","tld":"vip"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:23.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 01:15:48 GMT","end":"Fri, 14 Nov 2025 01:15:47 GMT"},"fingerprint":{"sha1":"08:2E:6A:30:96:BC:78:D4:0F:72:B4:B3:C7:D5:B9:30:CF:E1:3B:50","sha256":"CE:43:D3:67:86:8E:8C:A1:E7:1A:73:BA:63:29:84:DC:15:26:58:89:91:98:DD:08:DD:FF:B4:67:EE:DA:EE:E9"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/chart.png HTTP/1.1\r\nHost: www.kxdao.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 990\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\netag: \"5ffe69ed-3de\"\r\nexpires: Wed, 05 Nov 2025 04:09:23 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=c96078194fb3dc4a8fcd848df1b0caac; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=d94665fba98f4d0793b01cd4fc89cdf6; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"3046ca1c2d74c72b752711e737c1a965","sha1":"44856101b21db49e188fecef03f8e91c7e0bdc61","sha256":"b2018d88f01016ba37924a4a7df4c39399ff28109dd65acd195b8b263cb65720","sha512":"2b5296aefa15fec56ad3b2b7637fd173f43c311192b64551da147d5d5546cd0255294997d7001511d8b999dcbc5f39f7e023d99a12183a47e8cbc35077056fe0","ssdeep":"","tlshash":"70110e88fe806c4091cad5d228e2c03b945608809dd0f8b27ccad91308a43f99d8decf","first_seen":"2023-05-09T22:45:43Z","last_seen":"2026-03-31T06:34:26.108536Z","times_seen":115,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/get.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026challenge=96c1d21fdad9c11fd2826a6899e11df4\u0026lang=zh-cn\u0026pt=0\u0026client_type=web\u0026w=KPzCx19nP3eqLxIP7saJjXf(PP4HZWw7E9Z9tVOgl)89YCoNOaW)lhsW5VGel1CIQtE4I7cLs)M37Bry)07dzdyW5PC2HWUkfzlKehtfq8fr73wSHt6y0YsdadtKFUzYGm4vAbHdoy)eJ1U6sXdiyKoG835NojogB4e7ro2geGYoBrJS2Alb5ZevigMJ(SpSmQ14kVbM8BRtgjrwesHq639LzjrLwg5AIE)zxRn2n88zE(F6WzR(eAYggs4vlWYowogy435qZ7bbsWuV7P9ciQSMKiFd39TJoytI0ChgGo1gmB9s4dB(9dsKcWtXlSwFyxlUmfMb6hgfcBTOGpMt8dxhTagksTGfCstGquNvNed8i5LqoEMjBdULNPmuatGqzoXVc0tW5Z6yqsLw5jFpNwbPEwI4rkdgF1ksSbs43)A378ZEv7wRgBBAN(WILIfLTXPgIHj(Gt)ZXsN0XtSPA7R5J6UJlv59um7ogLGPaWpYvRGuS9rvl3Iv(qSztzlbWEnojLow5sqyc76ikcFD84MARRkcFY2pL0xhI(K(Lys1BDtdVEhiwDRYD9)xP4A)zC6)GCfHsnhAZ1sot7hhNeIdvIWr8wd4oUmrrmPmgzwbOpPpLgv2SbFk2Q4AQ5bY(SPTDjR17eXAIopz46YEgKqlsPaGfe24sXpVjf6BSarhRLrHqfPCukbpQbT4YWUQ4ZmbvqLcKY0SYlsG0JSCqGKPScU(PZzEhwjTQ2zFwK8t(3EYrNaNCsoQSyrOKVlFxXhhi7Y4p6TiJnWThM0SA1mXe(aS9DyO4ODJTHKrwHpjoD0qSBKvv3qPV7OfphjsxvmVbWfhilOPe6vSQS8vDVpL3OcGnf7INaOfX(dnFoF3s0L3KKjZeo3VoicefgKzEr0Y76cs0gKCoJbydULDvqhbgtFpp4)yZZW7UFBBjofETTnZJGylfRLkyjsi31TkMcGfmJyWGi0oVqn0kPxdgvuRhmzfUpfFOXn6RnlTeACijvw0FAOWzQdGN22jrfpQENqejf8rFA1AwRTuwr0tG9ZZiMjREOJHGaHiCX4kaFiLiw(sAPnEnemkbds5qo8RCOHO3Sxt4rU80tvAN9YikRr47J1OsNfRnyiJgvs2b3SZ36To4XfD4WoRJFbfAmAlQgzBb3dWE0nLuE9ShhkG8Ckj4I24cvMJd51LCfgXV70.54be21865355220585800ca00e83d242cd86819d8f85556f2bcd68779914e98249efab23a7603330233c0e0b9ff095fff387a429d242444992a8baa4fd740835c700ee1e6ed670675edad8af135fdbbc797fce90253679e66deec9021d3e622e4dc110a13c76acb8fa12b9ac4e5430ba240aed233a64bf03a6483efdbb00aeee\u0026callback=geetest_1759723763722","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:23.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /get.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026challenge=96c1d21fdad9c11fd2826a6899e11df4\u0026lang=zh-cn\u0026pt=0\u0026client_type=web\u0026w=KPzCx19nP3eqLxIP7saJjXf(PP4HZWw7E9Z9tVOgl)89YCoNOaW)lhsW5VGel1CIQtE4I7cLs)M37Bry)07dzdyW5PC2HWUkfzlKehtfq8fr73wSHt6y0YsdadtKFUzYGm4vAbHdoy)eJ1U6sXdiyKoG835NojogB4e7ro2geGYoBrJS2Alb5ZevigMJ(SpSmQ14kVbM8BRtgjrwesHq639LzjrLwg5AIE)zxRn2n88zE(F6WzR(eAYggs4vlWYowogy435qZ7bbsWuV7P9ciQSMKiFd39TJoytI0ChgGo1gmB9s4dB(9dsKcWtXlSwFyxlUmfMb6hgfcBTOGpMt8dxhTagksTGfCstGquNvNed8i5LqoEMjBdULNPmuatGqzoXVc0tW5Z6yqsLw5jFpNwbPEwI4rkdgF1ksSbs43)A378ZEv7wRgBBAN(WILIfLTXPgIHj(Gt)ZXsN0XtSPA7R5J6UJlv59um7ogLGPaWpYvRGuS9rvl3Iv(qSztzlbWEnojLow5sqyc76ikcFD84MARRkcFY2pL0xhI(K(Lys1BDtdVEhiwDRYD9)xP4A)zC6)GCfHsnhAZ1sot7hhNeIdvIWr8wd4oUmrrmPmgzwbOpPpLgv2SbFk2Q4AQ5bY(SPTDjR17eXAIopz46YEgKqlsPaGfe24sXpVjf6BSarhRLrHqfPCukbpQbT4YWUQ4ZmbvqLcKY0SYlsG0JSCqGKPScU(PZzEhwjTQ2zFwK8t(3EYrNaNCsoQSyrOKVlFxXhhi7Y4p6TiJnWThM0SA1mXe(aS9DyO4ODJTHKrwHpjoD0qSBKvv3qPV7OfphjsxvmVbWfhilOPe6vSQS8vDVpL3OcGnf7INaOfX(dnFoF3s0L3KKjZeo3VoicefgKzEr0Y76cs0gKCoJbydULDvqhbgtFpp4)yZZW7UFBBjofETTnZJGylfRLkyjsi31TkMcGfmJyWGi0oVqn0kPxdgvuRhmzfUpfFOXn6RnlTeACijvw0FAOWzQdGN22jrfpQENqejf8rFA1AwRTuwr0tG9ZZiMjREOJHGaHiCX4kaFiLiw(sAPnEnemkbds5qo8RCOHO3Sxt4rU80tvAN9YikRr47J1OsNfRnyiJgvs2b3SZ36To4XfD4WoRJFbfAmAlQgzBb3dWE0nLuE9ShhkG8Ckj4I24cvMJd51LCfgXV70.54be21865355220585800ca00e83d242cd86819d8f85556f2bcd68779914e98249efab23a7603330233c0e0b9ff095fff387a429d242444992a8baa4fd740835c700ee1e6ed670675edad8af135fdbbc797fce90253679e66deec9021d3e622e4dc110a13c76acb8fa12b9ac4e5430ba240aed233a64bf03a6483efdbb00aeee\u0026callback=geetest_1759723763722 HTTP/1.1\r\nHost: api.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: \r\nexpires: 0\r\npragma: no-cache\r\netag: \"28a7390193d40c4ab4dc4fcedf293e69596a386b\"\r\nset-cookie: GeeTestUser=9422472ce753e457a13865974f1c4eee; expires=Tue, 06 Oct 2026 04:09:23 GMT; Path=/\r\ncache-control: must-revalidate, no-cache, no-store\r\ncontent-length: 1270\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\neo-log-uuid: 12477277497842076732\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1270), with no line terminators","md5":"93918e2999ab9df18b286ebea7a6741b","sha1":"28a7390193d40c4ab4dc4fcedf293e69596a386b","sha256":"777f8f6f3847c572e7687f449c6d5a95266145ddb62501aed4fc5f1efca9ebfe","sha512":"e072169c375911837d556ea19a08152b4f6c9aad81ff4acbe453b6b1b15754f182d6993d0fbd33e9dac852970dc68f17f147dc355d535a82f645846a1ddfd60b","ssdeep":"","tlshash":"b421f46ff55a1e3345fdd3cc7d2c2d33a7658062c2e0c03dc1a84e54329c95964a8ad4","first_seen":"2025-10-06T04:10:05.667077Z","last_seen":"2025-10-06T04:10:05.667077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx.y.gtimg.cn/music/photo_new/T056M000002vpDku3xX3oh.png","fqdn":"wx.y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.y.gtimg.cn","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:31:F5:13:FA:54:E9:39:5E:08:17:05:71:91:69:28:3D:EB:3E:B3","sha256":"1F:E1:CC:9D:DD:82:71:8B:2A:3E:ED:F7:16:87:FC:28:67:F6:2E:36:E9:F5:33:7E:20:97:68:33:DB:49:58:9F"}}},"request":{"raw":"GET /music/photo_new/T056M000002vpDku3xX3oh.png HTTP/1.1\r\nHost: wx.y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 05 Oct 2025 00:04:15 GMT\r\nServer: nws_static_mid\r\nDate: Sun, 05 Oct 2025 01:55:00 GMT\r\nExpires: Tue, 04 Nov 2025 01:55:00 GMT\r\nContent-Type: image/webp\r\nX-Verify-Code: f53bf4813df3706e28d805bd66731ced\r\nX-Daa-Tunnel: hop_count=1\r\nCache-Control: max-age=2592000\r\nAge: 94467\r\nContent-Length: 17674\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12888582794444410758\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept\r\nX-Webp-Req: accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d54a09c5c43ee4717bd4e333e8bf9a36","sha1":"2a319048f2f3c46053766083620e9f9edb76e756","sha256":"8bfadc70ed8ad518e2aa116b9ca07b4193df28f0ab6b9f3ace976f3b4b15fbfe","sha512":"a9dc8aa6f803394408794aea3daf6601eefdf6a3365f7b449b62dd3e45c10276f356af8bd37f83b55d6b406bad45b511e11310bc0c380e3c65002c88e64ce18f","ssdeep":"384:sHQ/8+1OwnHASbbTRDmCPjkvllodSJssH1CYesxg:NEABbXc5vlSmbesxg","tlshash":"1c82cf632d56e358b22aa3f914b30d5a700a205fc299b3f9c6e156678a0cc0d7cb7b94","first_seen":"2025-10-06T04:10:05.669045Z","last_seen":"2025-11-19T07:18:32.29262Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5999,"timings":{"blocked":-1,"dns":5096,"connect":256,"send":0,"wait":262,"receive":0,"ssl":385},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.geetest.com/gettype.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026callback=geetest_1759723772917","fqdn":"api.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"43.159.109.100","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /gettype.php?gt=39ee0605ac3edb01f6fda8e7aca038d3\u0026callback=geetest_1759723772917 HTTP/1.1\r\nHost: api.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: \r\nexpires: 0\r\npragma: no-cache\r\netag: \"98e7c023b9ef4bf7c1518a8f2df4b2083fa8fa10\"\r\nset-cookie: GeeTestUser=4abbed13aac16efe5f0e1c07b20bc48e; expires=Tue, 06 Oct 2026 04:09:23 GMT; Path=/\r\ncache-control: must-revalidate, no-cache, no-store\r\ncontent-length: 465\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\neo-log-uuid: 9832539671279977334\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"688fb82f0e1f5ec90a9d516df2d71f23","sha1":"98e7c023b9ef4bf7c1518a8f2df4b2083fa8fa10","sha256":"1b1c3609d83bbbcacf4ecfde19b807bd6bb71509cc8cd08d77eb1eea54faa571","sha512":"5121541d78c7d0f5bf758062ddf9ab48f2950a8e35f1ae874486ba62768cc894afa54fc1f8dcda6ac13e81fd66693aaa7057697f240850a8aa7bbe0b2f4b71bb","ssdeep":"","tlshash":"6ef0a717e903caa70ca6bc583e384236f1d8d0a20670829ec08d9c54d2adc0c7a98153","first_seen":"2025-10-06T04:10:05.67117Z","last_seen":"2025-10-06T04:10:05.67117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":78,"connect":24,"send":0,"wait":254,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T056M000002nmAEg1zfl4y.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.209","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T056M000002nmAEg1zfl4y.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 28 Sep 2025 22:16:27 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sun, 28 Sep 2025 16:00:59 GMT\r\nexpires: Wed, 01 Oct 2025 16:00:59 GMT\r\ncontent-type: image/webp\r\nx-verify-code: c0249c8fd5fc303a98a3114bf5068c3f\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 122546\r\ncontent-length: 176352\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10648813292252263675\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":176352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b9687cb2d8759cb4b69cca0b6f87c33","sha1":"37a1cc9dfef3bfcd6c63433b2127c3d17ccdfb23","sha256":"a6f67c4e9abf6efa5d6dad00fc38e17206dd2fc7b215ac90a8fed06d6b1abc6c","sha512":"f5e2d9537b46bb7bee89fe4081f237d7d041c81bf28562f46a31fa9ede4761da8c377a20ac2f5826e975e6aa6a869b9c64ad5aac27b38695779cb64df82c74d8","ssdeep":"3072:EH+qx2oIuOXtjG6PqYi4rSRdP2b9EfXjC52oqCnsey9rS7M4ESkdjbQer7F4:4n2nuSj9PxfpyXj8qSseyA9kT7y","tlshash":"5304237a855734c5d1e730bf774517e6db0ee48f3a1ac6c81ca85789b4c86b8376ad00","first_seen":"2025-10-06T04:10:05.673152Z","last_seen":"2025-12-26T10:51:46.724678Z","times_seen":6,"resource_available":false,"data":null}},"time_used":4945,"timings":{"blocked":1972,"dns":1364,"connect":283,"send":0,"wait":259,"receive":720,"ssl":346},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?e319bc2d39bc1eebb794e72d2f34c6c9","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:23.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?e319bc2d39bc1eebb794e72d2f34c6c9 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nDate: Mon, 06 Oct 2025 04:09:28 GMT\r\nServer: apache\r\nStrict-Transport-Security: max-age=172800\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":6145,"timings":{"blocked":0,"dns":5060,"connect":252,"send":0,"wait":321,"receive":0,"ssl":512},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/geetest3/js/gt3-init.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /source/plugin/geetest3/js/gt3-init.js HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Oct 2021 01:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6178a7a8-780\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16714c3f957f541876828de4d31ba5d3","sha1":"c8763edece48a3cb4ac0a3fbe9cdf6083b045aa3","sha256":"e80c80c96999573c0cbc3940f1a8f927b8c3697eec3d72db6315c2ce0d0aab45","sha512":"867e14c5d311108de1d439c961d7f984f4b251c9dd18143c3d4fb609ff33aa5ed01d8ae4ed6aa59aea5f9c9a0e8b594458e5cea6c3f2e7635dddabfbad22e69f","ssdeep":"","tlshash":"1641fd26b2aa8185082bb5ddcb6f4244f42a90277005ce603c0d92886f1503c62bffcf","first_seen":"2025-10-06T04:10:05.675079Z","last_seen":"2026-03-08T21:57:16.213113Z","times_seen":8,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/logging.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/cache/logging.js?U3b HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 390\r\nlast-modified: Sun, 05 Oct 2025 21:30:00 GMT\r\netag: \"68e2e358-186\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (390), with no line terminators","md5":"4544d50d2dde9cccea8012a9a5d0cfb7","sha1":"db2e168b35fb57db8002e3223effcc50a705ed30","sha256":"843ca4ccc43f7c97d0f24897b2890a713355e0e5e89f6a96001e663e10282b45","sha512":"6b99c931cee98a38e2d2fd44091b46266027ff407acab2f4255b66d3f66fca96cc05c45f9160864f0c83fda36224b44ad2ff5f678a7e29cf8d400453afc30c62","ssdeep":"","tlshash":"39e0ab8a336b052a0a9231e000c3cb567b38ae108012a80ca4063e812f39d52e8b7730","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-03-31T06:34:26.073884Z","times_seen":335,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T054XD66002BUd9q2qlLBR.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.209","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T054XD66002BUd9q2qlLBR.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 12:48:15 GMT\r\nserver: NWS_SSD_MID\r\ndate: Fri, 26 Sep 2025 06:52:27 GMT\r\nexpires: Mon, 29 Sep 2025 06:52:27 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 429078fd0703983bdf462796c9299282\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 73007\r\ncontent-length: 42898\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4897798431501209864\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42898,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5edc9d75737373f63e0dc46a9db72b87","sha1":"07cfe297d8ed40e0684a11fe9712cae9c8b91b96","sha256":"419d6dcff7bd6dc0415fce6728e836a708b6dfc5cd08ce5b473febfc02afad62","sha512":"40901fd939b8bd71a5c658c9c957ceaa5bfdc7ad5df930501f7a8d079a0d232ada652b3279f41a8caefe193f72c7d9ba43a7f2aa1041aa4554601685782250a0","ssdeep":"768:5e5g+db2/UHQNaaXOdN7WzwAiN5+VKK4Tm9f/5JSjOruy8o2KYZiCnB0qA:9sq/MQNt+dEjiNYR4S7S6mhZSqA","tlshash":"5b13f14a73a766a1d3c77c7bc9cc0824ad460404a7747a239227da1f1ee1d1f7302b5d","first_seen":"2025-10-06T04:10:05.681274Z","last_seen":"2025-10-21T07:31:27.752509Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5573,"timings":{"blocked":2140,"dns":1365,"connect":251,"send":0,"wait":1196,"receive":75,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/common.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/cache/common.js?U3b HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Oct 2025 21:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e2e358-f836\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63252), with no line terminators","md5":"4d4bfc33fa3badc42d9200eb8f47bcb2","sha1":"3f89d367d4ef99f06c406a8eea20339ef96cef8f","sha256":"d049c37e84bb09c3c4620deaa1b0700aeed96b3726aee6eaad48000771a35251","sha512":"14078f4dac91869f55256a506c9039fb841172573af9f22ab49b94ced2d24e7b8176d3e4fd556166bc9cd676a3229d81a9768efa4b9faea048b617484a6a38bc","ssdeep":"1536:I3ob/AE4iI1VMvF3aXATIIAR8cWmdrVBJXoIgqetLfIACxOQ:+VMdaXCI9RfVB/eu","tlshash":"0e5338243615253685db31739a7fd608383158369303e970f86ce4d81da4da6e8fbefa","first_seen":"2023-06-19T11:17:56Z","last_seen":"2026-04-03T17:31:48.766252Z","times_seen":98,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/home.php?mod=misc\u0026ac=sendmail\u0026rand=1759723761","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /home.php?mod=misc\u0026ac=sendmail\u0026rand=1759723761 HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: JWUN_2132_lastact=1759723762%09home.php%09misc; expires=Tue, 07-Oct-2025 04:09:22 GMT; Max-Age=86400; path=/; secure\nJWUN_2132_sendmail=1; expires=Mon, 06-Oct-2025 04:14:22 GMT; Max-Age=300; path=/; secure\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/style_64_forum_index.css?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/cache/style_64_forum_index.css?U3b HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 01:05:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dc7e66-1118\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4376,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4376), with no line terminators","md5":"a392ae416cd1b91fb93edd42ba1c9044","sha1":"21ea194429aa96890890fcee80a05fba6d0e3a05","sha256":"33afdb5814007f1e36769692b29cfd0cce07ff8983da16c4ddbda517d44e2b3f","sha512":"5a6797f4270e13d0cd9e1693519d5990d80d95620d04dfaf23eb2f538499ceef5c3e16d37518f62e43c58de2cf1cb2b558756cd9648b2205fd1a23649cc4356a","ssdeep":"48:lb+tVShVM3g0CT96C1sA1B6Qwt+IWaZc03XROsQJnsNAWAh:lq7690c9ae6Qwt+IW50xOs5NU","tlshash":"fa91003cebfd715da037c63ab0a3554ee126c10beb630eecb5296cb484929541a37991","first_seen":"2025-10-06T04:10:05.686587Z","last_seen":"2025-12-26T10:51:46.741494Z","times_seen":5,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/static/image/common/qq_login.gif","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /static/image/common/qq_login.gif HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 15 May 2023 03:43:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6461aa58-c80\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3200,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 124 x 24","md5":"5303890a49bf80d5d9227155cc844e29","sha1":"5367aba5ebe04fdf559f3be193be3b7940a948e8","sha256":"e401693c5f4f22c6b1233bdfcac8e92aa6fef620f304ecfabe29b704195afd05","sha512":"1fe0f6ef591acbf394f2091053a2d8db8e7b21c76ac56cc7b14036803749329d5564d1b2c40d9bd3c38ccc999f1818c8a207f48df9f3b9f3d906a32e3aaa4ec1","ssdeep":"","tlshash":"a8613bceb68499121084d8f11c6bc9e1ac1cea0514dce9ee38b8cd2813bc5e2964a7db","first_seen":"2023-05-17T08:59:28Z","last_seen":"2026-03-29T13:50:23.424101Z","times_seen":103,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/layui.js","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.221Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/layui.js HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":202,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/plugin.php?id=geetest3\u0026model=start\u0026t=1759723762532","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /plugin.php?id=geetest3\u0026model=start\u0026t=1759723762532 HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: JWUN_2132_lastact=1759723762%09plugin.php%09; expires=Tue, 07-Oct-2025 04:09:22 GMT; Max-Age=86400; path=/; secure\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"de527afc08ea9e2a3469f789d5e1f57f","sha1":"4fd86977c3018b31c697a03f9da1e91e108d81cc","sha256":"b74f1aecdac04430442c096650152e1fc2ac860e7ad5af3b66525898d03a07a1","sha512":"835218660d409a0b1cc9d872ae6adbe92a8084737e21214ce9d6e8f2ddc4454ac60790b74ceafc58b8c09fd3e1649e4c250af4a896ab2e5ddc291c959228fa18","ssdeep":"","tlshash":"a2b01274f30e84f24fd02311443d5a7064c8c1009e3172bddf1c00d24b10acc26028f4","first_seen":"2025-10-06T04:10:05.689547Z","last_seen":"2025-10-06T04:10:05.689547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/static/wind/style_https.1.5.8.css","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:23.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /static/wind/style_https.1.5.8.css HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-ray: 98a24d938b9ec272-OSL\r\ncf-cache-status: HIT\r\nage: 857085\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\nexpires: Tue, 07 Oct 2025 04:09:23 GMT\r\nlast-modified: Mon, 28 Jul 2025 16:08:15 GMT\r\nvary: Accept-Encoding\r\ncontent-md5: P7aqz9WuLTiU8vALDV8yNg==\r\nx-oss-hash-crc64ecma: 8727683345402674844\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 689233FACDAAFE373676A314\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":40702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40701)","md5":"3fb6aacfd5ae2d3894f2f00b0d5f3236","sha1":"f15fd4bebcd69660aced9ddaa6d0bc9b03e903a3","sha256":"8ba195fffe0097e44a5dd29c35c092f10039e126cc9c4113330e8bf690c2461e","sha512":"855d94ad7b87e9a506fe106dc61a84575a75da71175e1439c4d1fd27b0c1e2a1563529cfe23858ee2d5f5e330ab65014d405d4b29eff78fe9b06680b9b8920f6","ssdeep":"384:wuYullffgfx8pP95J7OgulVRpxOlffNwWVRT:5lffsC95Jhu4lffZ","tlshash":"2a03d023f413a288943f8727edc87e11d46cc617913b8b9fab55e4298701cd6b4f7a4a","first_seen":"2023-04-07T12:22:13Z","last_seen":"2026-03-27T14:32:11.04823Z","times_seen":178,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000003fQDRG4VapHR.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.209","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000003fQDRG4VapHR.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 12:06:52 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sat, 27 Sep 2025 11:34:08 GMT\r\nexpires: Tue, 30 Sep 2025 11:34:08 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 21316f505d2a9d15507f235aea231030\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 158403\r\ncontent-length: 14718\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 717748922552226437\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"984bed9fd887f79c10e5c7f9245c3a61","sha1":"686545e9d30dd4b4349b8d7c3437b4534d98550f","sha256":"6c419307c0066c584f9ec9e1953c9c48863d5f8a5ad7975289e2f43bed6a7044","sha512":"1039a7e70a654b9735f01c4f8c442c62ad6a960abc5265259d9aa92e301934dc6dba3fc8d661fad4e0040ca0835d3a250cbaeeea0806c605f318d330833017e2","ssdeep":"384:eDTC/+Q37mBCtQFNjcVHn2GZycMtldSo9BKX6LaCz:eDQ+QLMCtOyHn29c++o9/aS","tlshash":"0662c1216bf76840a42b04a4ed278e68ebfa136eb7c07ddd7e2c5105c875f043419ce0","first_seen":"2025-06-21T22:36:42.933386Z","last_seen":"2026-01-04T02:54:45.139191Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3456,"timings":{"blocked":-1,"dns":1364,"connect":255,"send":0,"wait":1244,"receive":25,"ssl":568},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/static/image/common/collapsed_no.gif","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /static/image/common/collapsed_no.gif HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 275\r\nlast-modified: Mon, 15 May 2023 03:43:20 GMT\r\netag: \"6461aa58-113\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":275,"size_decoded":0,"mime_type":"image/gif","magic":"PNG image data, 17 x 17, 4-bit colormap, non-interlaced","md5":"932fc2d611f31101dfff16f4173694d2","sha1":"65976fa41b7588b22f9ca8afcd4dbc08ca00f629","sha256":"26848782aeb4790ecda1fbe7d6994726a22cde2a5ed89bac7cc13db5ee7db968","sha512":"c244fb6cacbed066813e48155d209e7401d1359ee9915be27fe5a2a40310882064d6633276ea87484978ed70cc59c1734025080048d24eea11c84d906ca47560","ssdeep":"","tlshash":"d7d02e86baa71c2a82f890a3159d0360b0474f5c43281f569204c261b8e569eaaac2e3","first_seen":"2023-05-09T07:02:52Z","last_seen":"2026-04-01T11:10:54.986101Z","times_seen":205,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/css/layui.css","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.220Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/css/layui.css HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":202,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img02.sogoucdn.com/app/a/200692/1920_644_feedback_429e5f63cace4bd184565dd1b077ea4a.png","fqdn":"img02.sogoucdn.com","domain":"sogoucdn.com","tld":"com"},"ip":{"addr":"43.132.66.196","port":443,"asn":139341,"as":"ACE","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sogou.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 20 May 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"34:BC:52:B5:0C:78:D8:86:70:2C:C5:F1:AF:00:4D:9F:C3:04:05:71","sha256":"58:07:E1:1D:A7:02:A6:8E:56:2B:EB:79:02:F5:85:E9:F2:C3:54:4D:57:C6:4F:1A:C5:3E:03:D2:4A:85:2B:F2"}}},"request":{"raw":"GET /app/a/200692/1920_644_feedback_429e5f63cace4bd184565dd1b077ea4a.png HTTP/1.1\r\nHost: img02.sogoucdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: text/html\r\nx-yuntu-trace-proxy: 310637b586bb\r\nx-cache-lookup: Cache Miss, Hit From Inner Cluster, Cache Miss, Cache Miss\r\ncontent-length: 153\r\nx-nws-log-uuid: 709971070435830923\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":1346,"timings":{"blocked":0,"dns":651,"connect":35,"send":0,"wait":322,"receive":0,"ssl":337},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.layuicdn.com/layui/layui.js","fqdn":"www.layuicdn.com","domain":"layuicdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.999Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /layui/layui.js HTTP/1.1\r\nHost: www.layuicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/study_textpane/images/jquery-1.8.3.min.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /source/plugin/study_textpane/images/jquery-1.8.3.min.js HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Aug 2021 16:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610c0be2-16dc5\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65482), with CRLF line terminators","md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-04-03T18:23:45.727284Z","times_seen":20498,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/geetest3/js/gt.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /source/plugin/geetest3/js/gt.js HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Oct 2021 01:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6178a7a8-22db\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87d1e58e54fb76b16b649cd025f63a3b","sha1":"57a53b2ffdd41ed3609964069bc6b93003648006","sha256":"add1840190041b98d2c3facdfc43ac873a2e7c759fe62034e5d984172acee5bb","sha512":"ff8d949e7df9053affde1194d5920c5b4128ba9cb81f899901c5b8d9d70dd23b64e2f38fac150905b589e6fd50beeb4126419e7cbc33bb698a683cc30d660ff0","ssdeep":"192:2eoSgR4CxE+jIvbk7ANr2oIGymkw7tTu7qBynHTABH9VMUxF6dK3wrlSLgwy7KCo:2eQ/reTQCynsBdVkKgrWQZo","tlshash":"9d02de1ea8f754938967b8798b6fa214f9398553041cce023e8cf3549f644385baafdc","first_seen":"2023-03-07T12:06:16Z","last_seen":"2026-03-08T21:57:16.299877Z","times_seen":30,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-06T04:09:21.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: JWUN_2132_saltkey=oie11Iyz; expires=Wed, 05-Nov-2025 04:09:21 GMT; Max-Age=2592000; path=/; secure; httponly\nJWUN_2132_lastvisit=1759720161; expires=Wed, 05-Nov-2025 04:09:21 GMT; Max-Age=2592000; path=/; secure\nJWUN_2132_sid=T12JXK; expires=Tue, 07-Oct-2025 04:09:21 GMT; Max-Age=86400; path=/; secure\nJWUN_2132_lastact=1759723761%09index.php%09; expires=Tue, 07-Oct-2025 04:09:21 GMT; Max-Age=86400; path=/; secure\nJWUN_2132_pc_size_c=0; expires=Tue, 07-Oct-2025 04:09:21 GMT; Max-Age=86399; path=/; secure\nJWUN_2132_sid=T12JXK; expires=Tue, 07-Oct-2025 04:09:21 GMT; Max-Age=86399; path=/; secure\nserver_name_session=f2de0bd37bedb450b7fc90f34df53e46; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Discuz! X:3.4","description":"Discuz! X is an internet forum software written in PHP and supports MySQL and PostgreSQL databases.","website":"https://www.discuz.net","common_platform_enumeration":"","icon":"Discuz X.png","categories":["Message boards"]}],"data":{"size":29911,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1268), with CRLF, LF, NEL line terminators","md5":"558c5ac9b6f8e98aa4484e2516a6dd05","sha1":"d6e317d43c48f4cfdbea90dafbe803ba3cebcdfe","sha256":"eb27174bbc80e0efe2cea2a70b90d99a2ae1b86fe421cdc9ff7aab1f11904cf3","sha512":"6b89b09a4d46dd9380b52d9427a150fe1c5ee573ffb44a188e517dd66b8f72d8392b5c2b92eac62dc5d1968fd504583a11c720b7b05668a3bf415a1561db580c","ssdeep":"768:SfETNnUxmHD3N99p9pSbDqr1AtoTFtoohr1lr6KqhGnJ:ScAmH1p9pgDqJq8J","tlshash":"0ad2b61295d78e6b4733c1e0e8b1ab1cf092425bc7028e14b6ec1ae3bfa5f559c5309e","first_seen":"2025-10-06T04:10:05.695466Z","last_seen":"2025-10-06T04:10:05.695466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/template/ooojps_jian1203/images/logo.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/logo.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Jan 2021 08:19:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5ffead28-138f\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 52, 8-bit/color RGBA, non-interlaced","md5":"7e25e689754de9ae8eb668b8b5b74219","sha1":"ffed4d48b0563dbe3ca74575069aeab2e2371986","sha256":"b3676780edfbe6da45eb7fd70f799ab0323b2de4e42e9c0aad2bd7613d764288","sha512":"948f4c2fb2f40320706145c0d719f41f502e4731436525923d33dea816c7608f518d49b269112a7ea7ab00b376ed90fb889c31b6d2de984cc091f26d90b59ebd","ssdeep":"96:UMYR2Wzy9lkskZ6B/apcrk7l4Hn8n6fvSmy6mJymYq1J+x3ZI1O2K42K:4i9ub6BGU8M9y6mJuq+JW13","tlshash":"d0a15cec83d32251d494a85106e24019ed639dc54be83ce7a4db701af64a0a7b06a7bf","first_seen":"2025-10-06T04:10:05.697917Z","last_seen":"2025-12-26T10:51:46.72131Z","times_seen":6,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/forum.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/cache/forum.js?U3b HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Oct 2025 21:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e2e358-4d9d\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19621), with no line terminators","md5":"eb71d09ffa19eb2b907aa9671442519b","sha1":"bd33d131fa0ca8b58e5a04fc273e88e19a2886d2","sha256":"431eefbafc9f92eaeededf64fe9ff5f9fcc7d0b2cc4b3bdaa806cf57e215c818","sha512":"0855be591c9c18d57d5600f9aac1387754a2232d0be1c230567bc308212a0bf78ed13dd53f49299a6a783cb7ad3b753ac19a893efb0eb353ee542e4406cd6d68","ssdeep":"384:YBp6Doh+oQKsB2rLbdqY3lAxsrRoUlBIxIHXc033J9y65P/Ljdw4pqb/73no3M/4:M6DQ+yPbdqY3lAxsGyGS3cany8PDjdCw","tlshash":"c79209853b6c2205d6e7316259af4100ba37743483013479f869fce4ada8d69b53febe","first_seen":"2023-03-07T14:36:07Z","last_seen":"2026-04-03T17:31:48.816644Z","times_seen":79,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/static/js/fullpage.9.2.0-guwyxh.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:23.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 17 Jan 2025 00:00:00 GMT","end":"Sat, 17 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:57:1F:06:90:26:7E:20:91:D8:77:96:A1:67:16:E7:C9:E8:E4:96","sha256":"FC:33:EB:97:24:88:E1:64:94:5B:E5:37:7A:E0:DB:89:4D:1D:DB:F6:96:50:B9:1D:BA:B9:28:B5:7A:69:70:95"}}},"request":{"raw":"GET /static/js/fullpage.9.2.0-guwyxh.js HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-ray: 98a24d91698cc272-OSL\r\ncf-cache-status: HIT\r\nage: 761889\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\nexpires: Tue, 07 Oct 2025 04:09:23 GMT\r\nlast-modified: Tue, 29 Jul 2025 14:44:15 GMT\r\nvary: Accept-Encoding\r\ncontent-md5: X5W99CAPCH7vgW3tstvX8A==\r\nx-oss-hash-crc64ecma: 15691279645251471329\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 68959A1DD3D7CB383980F33A\r\nx-oss-server-time: 20\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304290,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f95bdf4200f087eef816dedb2dbd7f0","sha1":"aaab80cdd50dc5f36050b04b5f7cc0079d667837","sha256":"923a147d20ec0a941a44ab815991034fee5af16d5bb59fa23dcc86eb1a8734e1","sha512":"c51e522bca043becff365127a0477d9cacf524c5d491729712017639b4a3527408c17b95829da72e8b2cce39fd3b932ecd57bbc9781e47ba6e51d6a988709d52","ssdeep":"3072:9Zoz8Co64eZ7wKHYS+ou4hyZtCegH/7tdVvVwhQSuL6BL0lBjMANErWx:9heNPHxMYegfpdpTplBjMyErWx","tlshash":"0554b8e233913eda9577a62f4c3f3906a2b429600547da80363ff3499f78786c39561b","first_seen":"2025-07-30T16:54:45.340584Z","last_seen":"2026-03-27T14:32:11.051928Z","times_seen":65,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":33,"connect":2,"send":0,"wait":23,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/template/ooojps_jian1203/images/fixed.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/fixed.js HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5ffe69ed-623\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, CR line terminators","md5":"efa9a771adf882486764ae5556cba221","sha1":"f5ac01a870c074afb1350fa2d8fec86f03cacd1d","sha256":"48d4fe1316170627b9efd0355b5082c2a93d6917a3130e8143bf594459e37e59","sha512":"9df68d04cedf5b07bffe396df4630c715d2d5a406116faf88960c05e5dc2bdf10b1797c7085454f70ac767b7ee228d690149076902d9487abe23c9f0c8a02b77","ssdeep":"","tlshash":"bc316c7937d9a47086fbb13e723a9796fe35d2176102a0957c0ca4a56f30d271102ff8","first_seen":"2025-10-06T04:10:05.702222Z","last_seen":"2025-12-26T10:51:46.742327Z","times_seen":6,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/attachment/common/d6/common_40_icon.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/attachment/common/d6/common_40_icon.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2020 15:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e88aa9e-4dc\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f4921849126bdb770b73488d2e1f8126","sha1":"427c4a565d30954922851456a1161fdd45af231c","sha256":"697ebdb62b20695fda755c7244d1dcf77be14dc22937729bfbb4116b495763f5","sha512":"27a567da0e24c9b098691f22455ea7e9e592402e121c1910955d126faa922b43711f51bb6df1725b82fcc327cbac8c3dc381424d86310859b12dfe7dd057c863","ssdeep":"","tlshash":"c3211705b702aa28c88c13b0da35949cf3f2f3cb90a2a0150e4d5e0d8f237ed041f31a","first_seen":"2025-10-06T04:10:05.704346Z","last_seen":"2025-12-26T10:51:46.767142Z","times_seen":6,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/favicon.ico","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:26.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723762%09plugin.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124; JWUN_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:26 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Thu, 05 Jun 2025 06:03:54 GMT\r\netag: \"6841334a-25be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"1c032804cfe07894ab3885a56514c17c","sha1":"e3fc174423f251fde4e70e187636205c8c95b2a6","sha256":"aea4b4fcb150b161eea1032b2789923116a0c3d6c15345f2b721b4aff961f297","sha512":"59c79a3954d970a189be8b3165c0b5a9644bf44f79c9baa5ca0a2159c4556e056c2bac06db232149d454427cd484a07b53930fe8f0101d2d8598f8bc706c5f2d","ssdeep":"48:9U3N6hFwXeY49dJKQX6ONqtuj6cxY+UBSVJH5RM:91hE4dUpO8ti6cC+9VJH5W","tlshash":"6e12d5e7a3417029f900ef7104828c42feeaf9a9ee19b4ad0d7d59527617cce264067f","first_seen":"2025-10-06T04:10:05.70728Z","last_seen":"2025-12-26T10:51:46.736768Z","times_seen":6,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/cache/style_64_common.css?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/cache/style_64_common.css?U3b HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 01:05:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dc7e63-14794\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bc940f67f4999ead8f823dd9be2c43b4","sha1":"1fc1ec939bedea923b88b70b73183716a534984f","sha256":"acea809bb6e72e791d63aa7acff45277fc254a43008b71d1e54503e14b3012d6","sha512":"69865dd9d0b5f3ce57839b6017576809bdc1c0c1ac132b342150e0c4e8b12df0eb12dc1c7d62b686445bb0d2706ccf5c6a02b307bdbabdf3f75da2173720d894","ssdeep":"1536:D3wBvms6HqX6xtFGHZo1M0UpcM6JdYchKvHDQucgwurx:Xsiq+fWj","tlshash":"b6839522dad1201eb53bca77f462b7ddb11bc01be2530bf9f52939b4c8074a51932b99","first_seen":"2025-10-06T04:10:05.709659Z","last_seen":"2025-12-26T10:51:46.751556Z","times_seen":5,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/study_textpane/images/masonry-docs.min.js?U3b","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /source/plugin/study_textpane/images/masonry-docs.min.js?U3b HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Aug 2021 16:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610c0be2-89a8\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32004)","md5":"bb3e5900f64285fc26b22e3f69236e1e","sha1":"571a894b5efed15e7c39e38a04d24e2eb15f1cbb","sha256":"e1f61fcc4dfb4f0a900bee824f089a1a37be2d9f1d36c66c2e76716a5e986022","sha512":"b1628526b58cfbadcc7a9276ac0c27d9d498d3acef9a6623d858e2baed14918b67ce8d8bc3ddc1651c9d46b796f4eb52d7ba9da80acc8309653cb9fbff06d373","ssdeep":"768:IxVS/9WC3Ilgn/TBnn0FP+TLCWEZHxx/4:zlWCoOBnn0F2+Hxx/4","tlshash":"53f2c849b75174354387a1a692af010fb337207caa1680ecb7a5dcea1cb9c4e2137f79","first_seen":"2023-03-13T12:27:06Z","last_seen":"2026-03-30T00:41:21.428569Z","times_seen":17,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.vip/template/ooojps_jian1203/images/nav_line.png","fqdn":"www.kxdao.vip","domain":"kxdao.vip","tld":"vip"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 01:15:48 GMT","end":"Fri, 14 Nov 2025 01:15:47 GMT"},"fingerprint":{"sha1":"08:2E:6A:30:96:BC:78:D4:0F:72:B4:B3:C7:D5:B9:30:CF:E1:3B:50","sha256":"CE:43:D3:67:86:8E:8C:A1:E7:1A:73:BA:63:29:84:DC:15:26:58:89:91:98:DD:08:DD:FF:B4:67:EE:DA:EE:E9"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/nav_line.png HTTP/1.1\r\nHost: www.kxdao.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 191\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\netag: \"5ffe69ed-bf\"\r\nexpires: Wed, 05 Nov 2025 04:09:23 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=c96078194fb3dc4a8fcd848df1b0caac; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=4f4ff6c67f85ea314d0ae89ea6678074; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 36, 8-bit/color RGBA, non-interlaced","md5":"a7ddcd0afec67ccc5f6efd302a8201b3","sha1":"099c96e45d8376d512e95a1d61be2ef166021c99","sha256":"3a849c0d18b04788e4b787062442435eadfb81188e170919ef2278a3dc195b95","sha512":"79f7e72c4865426482650f3bacc7172457303bfacd1fe3eed03a43162611a5793bcb7d39e0b488f2b1a59af58c3cf8383df306bb58fd6d76e9c43068f1a4468b","ssdeep":"","tlshash":"80c0c0c203c02e5c8d3f549303c3021094d31901072f3c15f12f505e3d52d03e8b8312","first_seen":"2025-10-06T04:10:05.713692Z","last_seen":"2025-12-26T10:51:46.750696Z","times_seen":6,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":0,"dns":116,"connect":156,"send":0,"wait":156,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/jzsjiale_sms/static/js/jquery-1.10.2.min.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /source/plugin/jzsjiale_sms/static/js/jquery-1.10.2.min.js HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723762%09home.php%09misc; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124; JWUN_2132_sendmail=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Mar 2018 07:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5aa8caa8-16ebb\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.vip/template/ooojps_jian1203/images/tbbankuai.png","fqdn":"www.kxdao.vip","domain":"kxdao.vip","tld":"vip"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:23.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.vip","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 01:15:48 GMT","end":"Fri, 14 Nov 2025 01:15:47 GMT"},"fingerprint":{"sha1":"08:2E:6A:30:96:BC:78:D4:0F:72:B4:B3:C7:D5:B9:30:CF:E1:3B:50","sha256":"CE:43:D3:67:86:8E:8C:A1:E7:1A:73:BA:63:29:84:DC:15:26:58:89:91:98:DD:08:DD:FF:B4:67:EE:DA:EE:E9"}}},"request":{"raw":"GET /template/ooojps_jian1203/images/tbbankuai.png HTTP/1.1\r\nHost: www.kxdao.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 424\r\nlast-modified: Wed, 13 Jan 2021 03:33:01 GMT\r\netag: \"5ffe69ed-1a8\"\r\nexpires: Wed, 05 Nov 2025 04:09:23 GMT\r\ncache-control: max-age=2592000\r\nset-cookie: server_name_session=c96078194fb3dc4a8fcd848df1b0caac; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=ef39c4fcf52cbbf5fce5475875c0e9b9; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 19, 8-bit/color RGBA, non-interlaced","md5":"5167b97b211dd2fe959aef04a6149679","sha1":"57862b59e3e11a478731f965d3c5835d16da2cd8","sha256":"7123002f94ba915994f21fb444708f4b94a00daac9f77ee9eaa9ca1596415ec3","sha512":"a22783757ed16417f50e44ba1377d68e1b6e4628efe98f720a966deaba70b065971e897303df2f2a6d9151662a3c29cd3a230dc941e6fc4bcd2a7af44753fda6","ssdeep":"","tlshash":"41e05c81d670977cef94e8590913c5259866952d43a0e05850e2b3286aeafba0aac08a","first_seen":"2024-08-19T22:39:33.03865Z","last_seen":"2025-12-26T10:51:46.717472Z","times_seen":7,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kxdao.net/","fqdn":"kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-06T04:09:21.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://www.kxdao.net/\r\nset-cookie: server_name_session=f2de0bd37bedb450b7fc90f34df53e46; Max-Age=86400; httponly; path=/\nSITE_TOTAL_ID=2f8d6990667f9c08d916e696aa3aa4c7; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29911,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":316,"dns":0,"connect":155,"send":0,"wait":156,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/source/plugin/jzsjiale_sms/static/js/jquery-1.10.2.min.js","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /source/plugin/jzsjiale_sms/static/js/jquery-1.10.2.min.js HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Mar 2018 07:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5aa8caa8-16ebb\"\r\nexpires: Mon, 06 Oct 2025 16:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"6c123f43d5ebbbda71d02ceb5d8ad227","sha1":"aab2b8ea8d6f24d70f9f9f20af20e5054c9ad409","sha256":"ace97c1a8f130bbe6ba993ed743e2ec3e25d947c06291bb23e10759467ec67e7","sha512":"e335f8ed59655fa9a41801e62a148ab3c340233c5786f2f109671bb772fcfab0b81fcf8d62d02a15cdf6fcde8b4c9b6df6a2a331e037100f817825e88ae3dc24","ssdeep":"1536:K4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/IodZ7qABZnu0sFB:KGsKXAI2p0WPdbDrstfau","tlshash":"7f9308ddb2d1b06257bb20bd006f540ff236195d280d8850f129e8eabc74a4d927bfad","first_seen":"2025-09-27T22:55:53.130667Z","last_seen":"2025-12-26T10:51:46.724045Z","times_seen":8,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/attachment/study_textpane/slide/202402/20/200348q5ongoh7nhnvvz9h.gif","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/attachment/study_textpane/slide/202402/20/200348q5ongoh7nhnvvz9h.gif HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/gif\r\nlast-modified: Tue, 20 Feb 2024 12:03:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d49524-58fb\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22779,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 34","md5":"d26611bb0d313acfdec59e3c3d1640a2","sha1":"0c121fa2c6635d7995f0dce3e53212147700faa6","sha256":"d8ec432e8601bfa2f4f58d893d7bc13fea53d07ffe543744fdb4029b1222d817","sha512":"52df1983595970a691f37fa9b4049e39575c20963d0def2903bc2aabd2f98e7d2f5774383f61f8529ff5d63ea88be8af64fcbbf7a669044fe1b9d9e9cbda6faf","ssdeep":"192:NmS/BR+Gx4unkoruXrPsubaGK5zZuy/BErY/IunkoruXrPsubaGK5zZuy/Ba9XwZ:8PE1YzQFYK46oVUrP5Vz","tlshash":"1fa28ecffce84020c2b945f574a74b85b4a947e040d4511a580a7d8f9dca2ebb279aef","first_seen":"2025-10-06T04:10:05.723018Z","last_seen":"2025-12-26T10:51:46.740639Z","times_seen":6,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx.y.gtimg.cn/music/photo_new/T053XD000004Ziflf4cbjjm.gif","fqdn":"wx.y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"203.205.137.231","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.y.gtimg.cn","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:31:F5:13:FA:54:E9:39:5E:08:17:05:71:91:69:28:3D:EB:3E:B3","sha256":"1F:E1:CC:9D:DD:82:71:8B:2A:3E:ED:F7:16:87:FC:28:67:F6:2E:36:E9:F5:33:7E:20:97:68:33:DB:49:58:9F"}}},"request":{"raw":"GET /music/photo_new/T053XD000004Ziflf4cbjjm.gif HTTP/1.1\r\nHost: wx.y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 11 Sep 2025 09:18:22 GMT\r\nServer: nws_static_mid\r\nDate: Fri, 12 Sep 2025 02:30:17 GMT\r\nExpires: Sun, 12 Oct 2025 02:30:17 GMT\r\nContent-Type: image/webp\r\nX-Verify-Code: cc2b25cf41cd8d19f2f86d8de16816e0\r\nX-Daa-Tunnel: hop_count=1\r\nCache-Control: max-age=2592000\r\nAge: 2079550\r\nContent-Length: 966284\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6531637914404908068\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept\r\nX-Webp-Req: accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":966284,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69296fea758dd4f3d170b3387564fe9a","sha1":"fa7567cd0d5bc187ae0b138e442b23f12a0d1952","sha256":"ea2925e29bba2e6ab60cbe4a879c06947e664b2a6252e8e28260f0752e3b69da","sha512":"d8736ca5cec81afa4b83f7a176d203c57e4394a5d2c6490477e06aabb850768abe0bce95a68fab723f938c9f4db9f62b6b77d1a78a11c9f035a27a540be580fd","ssdeep":"24576:W6Zj5+dgl4DBDik2ftKNzyRc5fpiGiiNv/G/DtMZ7:lKdgl4VKYNiof3iiA47","tlshash":"b22533fb824e8c6cd345527a98863e140f0a5a1b9673f90b4bddf5a3e31744db0ab0b5","first_seen":"2025-10-06T04:10:05.725529Z","last_seen":"2025-12-26T10:51:46.71657Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15196,"timings":{"blocked":6257,"dns":5097,"connect":275,"send":0,"wait":278,"receive":2381,"ssl":906},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000001FbQJQ3vHXjw.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.209","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000001FbQJQ3vHXjw.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 11:45:54 GMT\r\nserver: NWS_SSD_MID\r\ndate: Sat, 27 Sep 2025 11:18:54 GMT\r\nexpires: Tue, 30 Sep 2025 11:18:54 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 8d3db4bef2f43ae71f382044c69e3655\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 156932\r\ncontent-length: 61504\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17126894464408447140\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07fefcdbb0c20b2a003dfcbbb0d3a6e4","sha1":"5283f717597aebcc8aec5913afb82fb95e93d9d8","sha256":"5f24e0046a65254712d690d3a864e4f1958f1311c526352844a093882b0232c5","sha512":"6eb2551e70d90a705a268ddb572efbc6c690738ab5e67b5660d6570469712004071a4d0d9a2e10ae0d9313c377c0413c52b9f71b78d353238cfdbd9e6c5622e5","ssdeep":"1536:d90eTjiC4s6my0KwNAo+dLmPkEL/95U/WTaX5:j0eb4s6wKwNAPMPkE7YTp","tlshash":"79530213f9584c6af63579ae21ba7a478d8d4d85d2aa0501020cf9e3cfde520bf453ee","first_seen":"2025-10-06T04:10:05.727564Z","last_seen":"2025-11-19T07:18:32.314555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4679,"timings":{"blocked":1971,"dns":1365,"connect":258,"send":0,"wait":259,"receive":454,"ssl":371},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kxdao.net/data/attachment/common/d9/common_46_icon.png","fqdn":"www.kxdao.net","domain":"kxdao.net","tld":"net"},"ip":{"addr":"23.224.69.29","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kxdao.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 01:15:54 GMT","end":"Mon, 24 Nov 2025 01:15:53 GMT"},"fingerprint":{"sha1":"0D:8B:84:2C:8E:CE:FF:85:EF:8B:69:89:6A:1A:CC:21:9F:95:5E:34","sha256":"58:C8:07:12:6E:84:28:1A:F9:66:4D:98:79:AC:D6:B1:08:89:47:A2:E2:2B:B9:94:01:E6:6D:8B:5C:EA:CA:E9"}}},"request":{"raw":"GET /data/attachment/common/d9/common_46_icon.png HTTP/1.1\r\nHost: www.kxdao.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nCookie: JWUN_2132_saltkey=oie11Iyz; JWUN_2132_lastvisit=1759720161; JWUN_2132_sid=T12JXK; JWUN_2132_lastact=1759723761%09index.php%09; JWUN_2132_pc_size_c=0; server_name_session=f2de0bd37bedb450b7fc90f34df53e46; SITE_TOTAL_ID=f63a7e3510cb031b08aa5a6f1a620124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 04:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2020 14:46:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e889db7-b8d\"\r\nexpires: Wed, 05 Nov 2025 04:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"755268739777a1ca430ca95e0dd4e780","sha1":"682c05b843a0568ac1654ab41cb9c0e5dede4709","sha256":"4b7c32130584dd9b99fee9ee7fd74a402709bec271865c5a58c5ff2a021231c9","sha512":"19aabf433d5735aa179418ef82fe5e8c18fdc4ac91bc2f957c5c3205180074295de065284c19961b5065e926b688d45c895c1f8d2295bafee3b603d7d2f1e9ea","ssdeep":"","tlshash":"21514cddb4207f09e257229647e218c1c6771cc20ea75f5cf518ec7854c4bb564f2660","first_seen":"2025-10-06T04:10:05.729653Z","last_seen":"2025-12-26T10:51:46.749063Z","times_seen":6,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.url.cn/music/photo_new/T059M000000tBOCv3ledhE.gif","fqdn":"s.url.cn","domain":"url.cn","tld":"cn"},"ip":{"addr":"203.205.137.209","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kxdao.net/","date":"2025-10-06T04:09:22.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weixin.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:2C:0B:40:DA:7A:53:33:30:8C:52:3C:79:87:09:34:D8:74:AF:73","sha256":"B7:77:A9:42:07:58:1D:3D:2E:31:96:AF:D8:C4:EF:9A:6F:91:46:37:9A:5E:F8:70:38:AC:90:B9:C1:BC:52:0E"}}},"request":{"raw":"GET /music/photo_new/T059M000000tBOCv3ledhE.gif HTTP/1.1\r\nHost: s.url.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kxdao.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 25 Sep 2025 11:25:36 GMT\r\nserver: NWS_SSD_MID\r\ndate: Fri, 26 Sep 2025 07:23:59 GMT\r\nexpires: Mon, 29 Sep 2025 07:23:59 GMT\r\ncontent-type: image/webp\r\nx-verify-code: 2e16bf4eb176e72ccb538a08cd999efa\r\nx-daa-tunnel: hop_count=1\r\ncache-control: max-age=259200\r\nage: 74104\r\ncontent-length: 89214\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3515243140115056284\r\nx-cache-lookup: Cache Hit\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38c144e3219cb456e111e6c3e075b8ee","sha1":"3fd06519b52f0b66263b4f4851b67cbbe8d17670","sha256":"12995becbe29689092ac2a4bb3443ed264c6341982cafab6fe44fbcc21854a8b","sha512":"febebd92fab6cd5e71baf66e9eee9bcc2153ed98b024b7ba2f1cff3d614b0e71ff89560f0c2c935eafbe7dd13032fadc9350a1cd7c99fec24d64798d1ad1afc5","ssdeep":"1536:uGIeNwNpinNiaRqPWvFMNUPEEPJjNDb3r7JfasXtCmNAn65yTLSXWl5gE:PIBpcrRqqRsEhjl77JamN46E3vr","tlshash":"3193022c0cd2a22e861a43ff7959b19f124dcf12d68bf1535800ac5d26e6d2ff265f16","first_seen":"2025-10-06T04:10:05.731821Z","last_seen":"2025-11-19T07:18:32.287792Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5167,"timings":{"blocked":2016,"dns":1365,"connect":260,"send":0,"wait":934,"receive":177,"ssl":414},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}